CVE-2021-3560

This exploit leverages a race condition in Polkit's dbus interface to create a new user with administrative privileges and set a password, allowing local privilege escalation to root. It uses timing-based exploitation to bypass authentication checks.

This repository contains a functional exploit for CVE-2021-3560, a privilege escalation vulnerability in polkit. The exploit leverages a race condition to bypass authentication and create a privileged user via DBus calls to accountsservice.

This repository contains a functional Bash script that automates the exploitation of CVE-2021-3560, a privilege escalation vulnerability in Polkit. The script leverages a race condition to create a new user with sudo privileges by manipulating D-Bus messages.

This repository contains a functional Go-based exploit for CVE-2021-3560, a Polkit privilege escalation vulnerability. The exploit registers a malicious authentication agent to bypass Polkit's authentication mechanism, allowing an unprivileged user to gain root access via systemd service manipulation.

This repository provides a description and usage instructions for a local privilege escalation exploit (CVE-2021-3560) affecting polkit. It does not contain actual exploit code but references the vulnerability and its impact on multiple Linux distributions.

The repository contains a C-based exploit for CVE-2021-3560, a polkit authentication bypass vulnerability. The exploit leverages a race condition where a process exits immediately after sending a DBus message, causing polkit to incorrectly assume the caller is root (UID 0).

This repository contains a functional exploit for CVE-2021-3560, a PolicyKit (polkit) vulnerability that allows local privilege escalation. The exploit registers a malicious authentication agent to bypass polkit's authentication mechanism and gain root access.

This repository provides a detailed technical analysis of CVE-2021-3560, a privilege escalation vulnerability in Polkit. It explains the root cause (mishandling of DBus message IDs leading to UID substitution) and includes step-by-step exploitation instructions for Ubuntu 20.04.

This repository contains a functional Python exploit for CVE-2021-3560, a local privilege escalation vulnerability in Polkit. The exploit leverages a flaw in Polkit's D-Bus request handling to create a new user with sudo privileges, bypassing credential checks.

This repository provides a detailed technical analysis of CVE-2021-3560, a race condition vulnerability in PolKit (polkitd) leading to local privilege escalation. It includes root cause analysis, code snippets, and a breakdown of the vulnerability's trigger path.

This is a functional Metasploit module that exploits CVE-2021-3560, a local privilege escalation vulnerability in Polkit. It leverages a race condition in the D-Bus authentication mechanism to add a new user with sudo privileges and execute arbitrary commands as root.

This repository contains a functional exploit for CVE-2021-3560, a local privilege escalation vulnerability in polkit. The exploit automates the creation of a privileged user and sets a password via DBus method calls, leveraging a race condition in polkit's authentication mechanism.

This repository provides a detailed technical analysis of CVE-2021-3560, a privilege escalation vulnerability in Polkit. It explains the root cause involving D-Bus message handling and includes step-by-step exploitation instructions, but does not contain functional exploit code.

This repository contains a functional exploit for CVE-2021-3560, a local privilege escalation vulnerability in Polkit's pkexec. The exploit leverages a race condition to create a new user with root privileges via D-Bus calls.

This repository contains a functional exploit script for CVE-2021-3560, a Polkit privilege escalation vulnerability. The script uses D-Bus to create a new user and set a password, leveraging a race condition in Polkit's pkexec.

This repository contains a functional exploit for CVE-2021-3560, a local privilege escalation vulnerability in PolicyKit. The exploit leverages D-Bus to create a new user with administrative privileges and sets a password for that user.

The repository contains a functional exploit for CVE-2021-3560, a local privilege escalation vulnerability in Polkit. The exploit leverages a race condition in the D-Bus interface of accounts-daemon to create a privileged user and escalate to root.

This repository contains a functional Bash script that automates the exploitation of CVE-2021-3560, a local privilege escalation vulnerability in Polkit. The exploit leverages a race condition to create a new user with root privileges by manipulating D-Bus messages.

This repository contains a functional proof-of-concept exploit for CVE-2021-3560, a Polkit D-Bus privilege escalation vulnerability. The script leverages a race condition in Polkit's D-Bus interface to create a new user and escalate privileges to root.

This repository provides a detailed technical writeup explaining CVE-2021-3560, a local privilege escalation vulnerability in Polkit. It includes an analogy to simplify the concept and demonstrates the exploit steps using dbus-send commands to create a privileged user.

This exploit leverages an authentication bypass in polkit (CVE-2021-3560) to create a privileged user and set a password via DBus calls. It demonstrates a local privilege escalation (LPE) by abusing the `CreateUser` and `SetPassword` methods without proper authentication.

This repository contains a functional exploit for CVE-2021-3560, a local privilege escalation vulnerability in Polkit. The exploit checks for vulnerable Polkit versions and executes a privilege escalation attack by manipulating the D-Bus interface.

This repository provides a detailed educational writeup on CVE-2021-3560, a privilege escalation vulnerability in polkit due to a race condition. It includes learning objectives, scenario setup, and expected outcomes but lacks actual exploit code.

This repository contains a functional bash script that exploits CVE-2021-3560, a local privilege escalation vulnerability in polkit. The exploit leverages a race condition in the dbus interface to create a new user with administrative privileges.

This repository contains a functional exploit for CVE-2021-3560, a local privilege escalation vulnerability in polkit. The exploit leverages a race condition to create a new user with root privileges by manipulating D-Bus calls to the Accounts service.

This repository contains a functional exploit for CVE-2021-3560, a race condition in polkit's dbus interface that allows local privilege escalation to root. The exploit creates a new user with root privileges by timing the termination of a dbus-send process.

This repository contains a functional exploit for CVE-2021-3560, a Polkit privilege escalation vulnerability. The exploit leverages a race condition in Polkit's authentication mechanism to create a privileged user via D-Bus messages.

This exploit leverages a race condition in polkit (CVE-2021-3560) to create a new user with root privileges. It uses timed D-Bus calls to bypass authentication checks, demonstrating a local privilege escalation (LPE) vulnerability.

This repository contains a functional exploit for CVE-2021-3560, a local privilege escalation vulnerability in Polkit. The exploit leverages a race condition in Polkit's D-Bus request handling to create a new user with root privileges.

This repository contains a functional exploit for CVE-2021-3560, a local privilege escalation vulnerability in Polkit. The exploit leverages a race condition in the dbus-send mechanism to create a new user with administrative privileges and set a password, allowing an attacker to escalate to root.

This repository contains a functional exploit for CVE-2021-3560, a local privilege escalation vulnerability in Polkit. The exploit creates a new user and manipulates D-Bus calls to escalate privileges by exploiting a race condition in Polkit's authentication mechanism.

This repository contains a functional exploit script for CVE-2021-3560, a local privilege escalation vulnerability in polkit. The script automates the creation of a new user with root privileges by exploiting a race condition in the polkit service.

This repository contains a functional exploit for CVE-2021-3560, a local privilege escalation vulnerability in Polkit. The exploit creates a new user and sets a password via D-Bus, leveraging a race condition in Polkit's authentication mechanism.

This repository contains a functional exploit for CVE-2021-3560, a PolicyKit (polkit) vulnerability that allows local privilege escalation (LPE) by registering a malicious authentication agent. The exploit leverages D-Bus to bypass authentication and execute arbitrary commands as root.

This repository contains a functional proof-of-concept exploit for CVE-2021-3560, a Polkit D-Bus privilege escalation vulnerability. The script leverages a race condition in Polkit's D-Bus interface to create a new user and escalate privileges to root by manipulating user creation and password setting operations.

This Metasploit module exploits a race condition in polkit (CVE-2021-3560) to bypass authentication and add a privileged user, enabling local privilege escalation (LPE). It leverages D-Bus method calls and process termination to trigger the vulnerability.