Local Privilege Escalation in polkits pkexec
Title source: metasploitExploitation Summary
CVE-2021-4034 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added June 27, 2022, with confirmed use in ransomware campaigns.
EIP tracks 174 public exploits from researchers including Lance Biggerstaff, berdav, ly4k, including a Metasploit module exploits/linux/local/cve_2021_4034_pwnkit_lpe_pkexec.
AI-analyzed exploit summary This exploit leverages a vulnerability in PolicyKit's pkexec (CVE-2021-4034) to achieve local privilege escalation by manipulating environment variables and loading a malicious shared library via GCONV_PATH. The exploit consists of a shared library (evil.so) that spawns a root shell and a main exploit binary that sets up the environment for exploitation.
Description
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.
Exploits (174)
This exploit leverages a vulnerability in PolicyKit's pkexec (CVE-2021-4034) to achieve local privilege escalation by manipulating environment variables and loading a malicious shared library via GCONV_PATH. The exploit consists of a shared library (evil.so) that spawns a root shell and a main exploit binary that sets up the environment for exploitation.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages environment variable manipulation and a malicious shared library to gain root access.
This repository contains a functional exploit for CVE-2021-4034, a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages environment variable manipulation and a malicious shared library to gain root access.
This repository contains a functional proof-of-concept exploit for CVE-2021-4034, a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages environment variable manipulation and a malicious shared library to gain root privileges.
This repository contains a functional exploit for CVE-2021-4034, a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages an out-of-bounds read/write primitive to manipulate environment variables and execute arbitrary code with root privileges.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in pkexec. The exploit leverages environment variable manipulation and a malicious shared object to gain root privileges.
This repository contains functional exploit code for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit's pkexec. The exploits manipulate environment variables and file paths to execute arbitrary code with root privileges via a malicious shared library.
This repository contains a functional exploit for CVE-2021-4034, a local privilege escalation vulnerability in PolKit's pkexec. The exploit leverages environment variable manipulation (GCONV_PATH) and a crafted shared object to achieve root access.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages environment variable manipulation and a malicious shared library to gain root privileges.
This repository contains a functional Python-based exploit for CVE-2021-4034 (PwnKit), which leverages a local privilege escalation vulnerability in polkit's pkexec. The exploit manipulates environment variables and creates malicious shared objects to gain root access.
This repository contains a functional Python-based PoC for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages environment variable manipulation and a malicious shared library to gain root privileges.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in pkexec. The exploit manipulates environment variables and leverages a malicious shared library to gain root access.
This repository contains functional exploit code for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit. The exploit leverages environment variable manipulation and a malicious shared library to gain root access.
This repository contains a functional exploit for CVE-2021-4034, a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages environment variable manipulation and a malicious shared library to gain root access.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in pkexec. The exploit leverages environment variable manipulation and a malicious shared library to gain root privileges. The included Ansible playbook automates the exploitation and verification process.
This repository provides a detailed technical analysis of CVE-2021-4034, including a CTF challenge setup, Ghidra decompilation insights, and exploitation steps. It explains the vulnerability in the context of a custom binary and includes a solve script for the challenge.
This repository contains a functional exploit for CVE-2021-4034, a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages an out-of-bounds read/write primitive to manipulate environment variables and execute arbitrary code with root privileges.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in Polkit's pkexec. The exploit leverages environment variable injection to execute arbitrary code as root by manipulating the GCONV_PATH variable and creating malicious shared libraries.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in pkexec. The exploit leverages environment variable manipulation and a malicious shared library to gain root privileges.
This repository provides a detailed technical analysis of CVE-2021-4034 (PwnKit), including root cause analysis, mitigation strategies, and patching guidance. It includes in-depth explanations of the memory corruption vulnerability in Polkit's pkexec binary, which allows local privilege escalation due to improper handling of argument vectors.
This repository contains a detailed technical report on CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in pkexec (polkit). The report includes methodology, risk assessment, and remediation recommendations but does not include functional exploit code.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit's pkexec. The exploit downloads and compiles a malicious shared library to gain root access.
The repository claims to exploit CVE-2021-4034 (PwnKit) but lacks actual exploit code, instead pushing users to download a ZIP file from an external source. The README is vague and marketing-oriented, with no technical details about the vulnerability.
This repository contains a compiled exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in Polkit's pkexec component, along with a PHP reverse shell script for post-exploitation. The exploit manipulates environment variables to execute arbitrary code as root.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit's pkexec. The exploit includes both Python and C implementations, along with a vulnerability detector.
This repository contains a Python script that automates the exploitation of CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit's pkexec. It downloads the exploit code from a known source, compiles it, and executes it to gain root access.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages environment variable manipulation and the GCONV_PATH mechanism to execute arbitrary code as root.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages environment variable manipulation and memory corruption to gain root privileges on vulnerable systems.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), leveraging a vulnerability in pkexec to achieve local privilege escalation via environment variable manipulation and a malicious shared library. The exploit uses a crafted environment to trigger arbitrary command execution as root.
This repository contains a functional Python3 exploit for CVE-2021-4034 (PwnKit), leveraging a vulnerability in pkexec to achieve local privilege escalation via environment variable manipulation and malicious shared library injection.
This repository contains a functional exploit for CVE-2021-4034, a local privilege escalation vulnerability in pkexec. The exploit leverages environment variable manipulation and a crafted shared object to gain root access.
The repository contains only a README file with a brief description of CVE-2021-4034 affecting UniontechOS, but no exploit code or technical details. It lacks depth and functional content.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), leveraging a vulnerability in pkexec to achieve local privilege escalation via environment variable manipulation and malicious shared library injection.
This repository contains a functional proof-of-concept exploit for CVE-2021-4034 (PwnKit), demonstrating a local privilege escalation vulnerability in polkit's pkexec. The exploit manipulates environment variables and argv to trigger an out-of-bounds write, leading to arbitrary code execution with root privileges.
This repository contains a read-only scanner for CVE-2021-4034 (PwnKit) that checks for vulnerable versions of polkit/pkexec without exploiting the vulnerability. It detects OS distribution, checks pkexec permissions, and verifies installed package versions against known patched versions.
This repository contains a detailed technical report on CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in pkexec (polkit). The report includes methodology, risk assessment, and remediation recommendations but does not include functional exploit code.
This repository contains a functional exploit for CVE-2021-4034, a local privilege escalation vulnerability in pkexec (part of polkit). The exploit leverages environment variable manipulation and a malicious shared library to gain root privileges.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), leveraging a memory corruption vulnerability in pkexec to achieve local privilege escalation. The exploit manipulates environment variables and uses a malicious shared library to execute a shell with root privileges.
This repository provides a detailed technical walkthrough of exploiting CVE-2021-4034 (PwnKit) for local privilege escalation on Ubuntu, including reconnaissance, credential brute-forcing, and step-by-step exploitation using a compiled exploit from an external source.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit's pkexec utility. The exploit includes multiple payloads (shell, id, backdoor, reverse shell) and detailed technical analysis.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit's pkexec utility. The exploit leverages an out-of-bounds write to inject malicious environment variables, leading to arbitrary code execution as root.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in Polkit's pkexec utility. The exploit leverages improper argument handling when argc == 0 to achieve root privileges via a crafted environment variable and embedded shellcode.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages environment variable manipulation and a malicious shared library to gain root access.
This repository contains a functional exploit for CVE-2021-4034, a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages environment variable manipulation and a malicious shared library to gain root access.
This is a functional exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit's pkexec. It leverages environment variable manipulation and a malicious shared library to gain root access via setuid calls.
This Ansible playbook checks for the presence of the vulnerable pkexec binary and applies a mitigation by changing its permissions. It does not exploit the vulnerability but detects and patches it.
This repository contains a functional exploit for CVE-2021-4034, a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages environment variable manipulation and a malicious shared library to gain root access.
This repository contains a functional exploit for CVE-2021-4034, a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages environment variable manipulation and a malicious shared library to gain root access.
This repository contains documentation and materials for a study on CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in pkexec, a SUID-root program part of polkit. The vulnerability allows unprivileged local users to gain root access and has been present since 2009.
This repository contains a detailed technical writeup of exploiting CVE-2021-4034 (PwnKit) on the Hack The Box 'Poison' machine, including step-by-step commands and remediation advice.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages environment variable manipulation and a malicious shared library to gain root privileges.
This repository contains a Python script that automates the compilation and execution of a known PwnKit (CVE-2021-4034) exploit for local privilege escalation. The script compiles a C-based PoC and executes it to attempt privilege escalation, verifying success by checking root access and reading files in the root directory.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in Polkit's pkexec component. The exploit leverages improper environment variable handling to achieve arbitrary code execution as root via a crafted shared object and gconv-modules file.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in Polkit's pkexec component. The exploit leverages improper environment variable handling to achieve arbitrary code execution as root via a crafted shared object and gconv-modules file.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), leveraging a vulnerability in pkexec to achieve local privilege escalation via environment variable manipulation and a malicious shared library.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), leveraging a vulnerability in pkexec to achieve local privilege escalation. The exploit manipulates environment variables and uses a malicious shared library to spawn a root shell.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), demonstrating local privilege escalation via environment variable manipulation in pkexec. The attack involves setting malicious environment variables to trigger arbitrary code execution.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), demonstrating a local privilege escalation vulnerability in pkexec. The exploit leverages environment variable manipulation to load a malicious shared library, granting root access.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages environment variable manipulation and a malicious shared library to gain root access.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), which leverages a vulnerability in pkexec to achieve local privilege escalation. The exploit manipulates environment variables and creates a malicious shared library to gain root access.
The repository contains only a minimal README with no exploit code or technical details. It claims to be a rewrite of the Polkit vulnerability but lacks any substantive content.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in pkexec. The exploit leverages environment variable manipulation and a malicious shared library to gain root privileges.
The repository contains only a README.md file with minimal content (just the CVE identifier) and no exploit code or technical details. It appears to be a placeholder or incomplete repository.
This repository contains a functional exploit for CVE-2021-4034, a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages environment variable manipulation and a malicious shared library to achieve root access.
This is a functional Python exploit for CVE-2021-4034 (PwnKit), leveraging environment variable manipulation and a malicious shared object to achieve local privilege escalation via pkexec. The exploit follows the original C implementation by blasty, using ctypes to call execve() with crafted environment variables.
This repository provides a detailed technical analysis of CVE-2021-4034 (PwnKit), explaining the out-of-bounds write vulnerability in pkexec due to improper argument handling, which allows local privilege escalation. It includes a walkthrough of the exploit mechanism and references an external exploit script.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages environment variable manipulation and a malicious shared library to gain root access.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages environment variable manipulation and a malicious shared object to gain root privileges.
This repository contains a compiled exploit for CVE-2021-4034, a local privilege escalation vulnerability in Polkit's pkexec. The exploit leverages improper environment variable handling to execute arbitrary code with root privileges via a malicious shared library (pwnkit.so).
The repository describes CVE-2021-4034, a local privilege escalation vulnerability in polkit's pkexec utility due to incorrect handling of environment variables, allowing arbitrary code execution. It lacks actual exploit code but provides a technical overview of the vulnerability.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in pkexec. The exploit leverages environment variable manipulation and a malicious shared library to gain root access.
This repository contains functional exploit code for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in pkexec. The exploit leverages improper environment variable handling to execute arbitrary code with root privileges.
This repository contains a functional proof-of-concept exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages environment variable manipulation and a malicious shared library to gain root access.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), leveraging a vulnerability in pkexec to achieve local privilege escalation (LPE) via environment variable manipulation and malicious gconv-modules configuration.
This repository contains a functional exploit for CVE-2021-4034, a local privilege escalation vulnerability in polkit's pkexec utility. The exploit leverages incorrect handling of environment variables to execute arbitrary code with elevated privileges.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), leveraging a vulnerability in pkexec to achieve local privilege escalation via environment variable manipulation and a malicious shared library.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages environment variable manipulation and a malicious gconv module to gain root privileges.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages environment variable manipulation and a malicious shared library to gain root access.
This repository contains a functional proof-of-concept exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages environment variable manipulation and a malicious shared library to gain root privileges.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit's pkexec. The PHP script appears to be an obfuscated payload designed to exploit the vulnerability by manipulating environment variables to achieve root access.
This repository contains functional exploit code for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages environment variable manipulation and a malicious gconv module to gain root privileges.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages environment variable manipulation and a malicious shared library to gain root access.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), leveraging a vulnerability in pkexec to achieve local privilege escalation via environment variable manipulation and a malicious shared library. The exploit creates a fake gconv module directory and executes pkexec with crafted environment variables to trigger the vulnerability.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in pkexec. The exploit leverages environment variable manipulation and a malicious gconv module to gain root access.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages environment variable manipulation and a pre-compiled shared object to gain root access on vulnerable systems.
This exploit leverages CVE-2021-4034 (PwnKit) to achieve local privilege escalation by manipulating environment variables and abusing pkexec's handling of the GCONV_PATH variable. It compiles a shared library to spawn a root shell and modifies system configurations to grant sudo privileges to a specified user.
The repository contains no exploit code or technical details, only a vague README with a claim to 'get root.' This is characteristic of a social engineering lure.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages environment variable manipulation and a malicious shared library to gain root access.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages environment variable manipulation and a malicious shared library to gain root access.
This is a functional exploit for CVE-2021-4034 (PwnKit), leveraging a vulnerability in pkexec to achieve local privilege escalation. The exploit manipulates environment variables and the GCONV_PATH to execute arbitrary code with root privileges.
The repository lacks actual exploit code and instead directs users to clone and execute an external repository, which is a common tactic for distributing malware or fake exploits. No technical details about CVE-2021-4034 are provided.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages environment variable manipulation and a malicious shared library to gain root privileges.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), leveraging environment variable manipulation to achieve local privilege escalation via pkexec. The exploit creates a malicious gconv module and executes it with elevated privileges.
This repository contains functional exploit code for CVE-2021-4034, a local privilege escalation vulnerability in Polkit's pkexec. The exploit leverages environment variable manipulation and a malicious shared library to gain root privileges.
This is a functional exploit for CVE-2021-4034 (PwnKit), leveraging a vulnerability in pkexec to achieve local privilege escalation. The exploit manipulates environment variables and GCONV_PATH to execute arbitrary code with root privileges.
The repository contains a functional exploit for CVE-2021-4034, a memory corruption vulnerability in Polkit's pkexec. The exploit leverages environment variable manipulation and a malicious shared library to gain root privileges on vulnerable systems.
This repository contains a functional proof-of-concept exploit for CVE-2021-4034, a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages environment variable manipulation and a malicious shared library to gain root privileges.
This repository contains a functional proof-of-concept exploit for CVE-2021-4034, a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages environment variable manipulation and the gconv module to gain root privileges.
This repository contains a functional Rust-based exploit for CVE-2021-4034 (PwnKit), which leverages environment variable manipulation and a malicious shared library to achieve local privilege escalation via pkexec. The exploit includes a setup script to download a vulnerable version of pkexec and prepares the necessary files for exploitation.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages environment variable manipulation and a malicious shared library to gain root privileges.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), leveraging a vulnerability in pkexec to achieve local privilege escalation via environment variable manipulation and a malicious shared library.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages environment variable manipulation and a malicious shared library to gain root privileges.
This repository contains a functional exploit for CVE-2021-4034, a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages environment variable manipulation and a malicious shared library to gain root access.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), leveraging a vulnerability in polkit's pkexec to achieve local privilege escalation via environment variable manipulation and a malicious shared library.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages environment variable manipulation and a malicious shared object to gain root privileges.
This repository contains a Python script that automates the exploitation of CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit's pkexec. The script provides a menu-driven interface to fetch, compile, and execute the exploit, as well as host an HTTP server for file transfer.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages environment variable manipulation and a malicious shared library to gain root access.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit's pkexec. The exploit automates the compilation and execution of a malicious shared library to gain root privileges.
This repository contains a functional exploit for CVE-2021-4034, a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages environment variable manipulation and a malicious shared library to gain root access.
This repository contains a functional Go-based exploit for CVE-2021-4034 (PwnKit), which achieves local privilege escalation via a vulnerability in polkit's pkexec. The exploit dynamically sets up a malicious GCONV_PATH environment variable to execute arbitrary code as root, and includes a bind shell for post-exploitation.
This repository contains a functional exploit for CVE-2021-4034, a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages environment variable manipulation and a malicious shared library to gain root access.
This repository provides a USB-Rubber-Ducky payload that exploits CVE-2021-4034 (pwnKit) for local privilege escalation on Unix-like systems. It includes two payload variations (online/offline) to compile and execute the exploit, spawning a root shell.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), which is a local privilege escalation vulnerability in pkexec. The script compiles a C-based exploit into a shared object file and serves it via an HTTP server for remote retrieval.
This repository contains a functional exploit for CVE-2021-4034, a local privilege escalation vulnerability in pkexec. The exploit leverages environment variable manipulation and a malicious shared library to gain root privileges.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages environment variable manipulation and a malicious gconv module to gain root access.
This PoC exploits CVE-2021-4034 (PwnKit) by manipulating the GCONV_PATH environment variable to execute arbitrary code with root privileges via pkexec. It creates a malicious shared library and leverages improper environment variable handling in polkit's pkexec.
This is a functional exploit for CVE-2021-4034, a local privilege escalation vulnerability in Polkit's pkexec. It leverages environment variable manipulation and a malicious shared library to gain root access via improper handling of the GCONV_PATH variable.
This repository contains a functional exploit for CVE-2021-4034, a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages environment variable manipulation and a crafted shared library to achieve root access.
This repository contains a functional Nim-based exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages environment variable manipulation and a malicious shared library to gain root access.
This repository contains a functional exploit for CVE-2021-4034, a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages environment variable manipulation and a malicious shared library to gain root access.
This repository contains a functional Go-based exploit for CVE-2021-4034 (PwnKit), leveraging a malicious shared library to achieve local privilege escalation via pkexec. The exploit uses environment variable manipulation and a crafted gconv module to execute arbitrary commands as root.
This repository contains a functional exploit for CVE-2021-4034, a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages environment variable manipulation and a malicious shared library to gain root privileges.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), leveraging an environment variable manipulation vulnerability in pkexec to achieve local privilege escalation. The exploit includes detailed technical analysis in the README, explaining the root cause and the role of the GIO_USE_VFS environment variable.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit's pkexec utility. The exploit leverages environment variable manipulation to execute arbitrary code with elevated privileges, including a compiled C exploit and a shell script for user creation and password setting.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in Polkit's pkexec. The exploit leverages environment variable manipulation to inject a malicious shared library, which is then executed with root privileges.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in pkexec. The exploit leverages environment variable manipulation to execute arbitrary code with root privileges, adding a new user 'rooter' with sudo access.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit's pkexec. The exploit manipulates environment variables and leverages a malicious gconv module to gain root access.
This repository contains a functional proof-of-concept exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages environment variable manipulation and a malicious shared library to gain root privileges.
This repository contains a functional exploit for CVE-2021-4034, a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages environment variable manipulation and a malicious shared library to gain root privileges via pkexec.
This repository contains a functional Go-based exploit for CVE-2021-4034 (PwnKit), which leverages a memory corruption vulnerability in pkexec to achieve local privilege escalation. The exploit creates a malicious shared library and manipulates environment variables to execute arbitrary code as root.
This repository contains a functional exploit for CVE-2021-4034, a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages environment variable manipulation and a malicious shared library to gain root access.
This repository contains functional exploit code for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit's pkexec. The PoC leverages environment variable manipulation and a crafted shared object to achieve root access.
This repository contains multiple functional exploits for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit's pkexec. The exploits leverage environment variable manipulation and malicious shared libraries to gain root access.
This repository contains a functional Rust implementation of the CVE-2021-4034 (PwnKit) local privilege escalation exploit. It leverages the vulnerability in polkit's pkexec to gain root access by manipulating environment variables and creating malicious shared objects in /dev/shm.
This repository contains a functional proof-of-concept exploit for CVE-2021-4034 (PwnKit), leveraging a vulnerability in pkexec to achieve local privilege escalation (LPE) via manipulation of the GCONV_PATH environment variable and a malicious gconv module. The exploit includes multiple components such as a FUSE filesystem to bypass logging and a payload executor to gain root privileges.
This Python script exploits CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit's pkexec. It compiles a shared object file to manipulate environment variables and execute arbitrary commands with root privileges.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), leveraging a vulnerability in polkit's pkexec to achieve local privilege escalation via environment variable manipulation and a malicious gconv module.
This repository contains a functional Proof of Concept (PoC) for CVE-2021-4034, a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages environment variable manipulation and a malicious shared library to gain root privileges.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in pkexec. The exploit leverages environment variable manipulation and a malicious shared library to achieve root access.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in pkexec. The exploit leverages environment variable manipulation and a malicious shared library to gain root access.
This repository contains a functional exploit for CVE-2021-4034, a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages environment variable manipulation and a malicious shared library to gain root access.
This repository contains a functional exploit for CVE-2021-4034, a local privilege escalation vulnerability in pkexec. The exploit leverages a race condition and environment variable manipulation to execute arbitrary code as root.
This repository contains a functional exploit for CVE-2021-4034, a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages environment variable manipulation and a malicious shared library to gain root access.
This repository contains a functional exploit for CVE-2021-4034, a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages environment variable manipulation and a malicious shared library to gain root access.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages environment variable manipulation and a malicious shared library to gain root privileges.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), leveraging a memory corruption vulnerability in pkexec to achieve local privilege escalation (LPE) by manipulating environment variables and executing arbitrary code with root privileges.
This repository contains a functional Python exploit for CVE-2021-4034 (PwnKit), which leverages a vulnerability in polkit's pkexec to achieve local privilege escalation. The exploit uses environment variable manipulation and a crafted shared library to execute arbitrary code as root.
This repository contains functional exploit code for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit's pkexec. The PoC leverages environment variable manipulation and the GCONV_PATH mechanism to execute arbitrary code as root.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in pkexec. The exploit leverages an out-of-bounds write in argv[] to gain root privileges by manipulating environment variables and loading a malicious shared library.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), which leverages a vulnerability in pkexec to achieve local privilege escalation. The exploit manipulates environment variables and creates a malicious shared library to gain root access.
This repository contains a functional exploit for CVE-2021-4034, a local privilege escalation vulnerability in pkexec. The exploit leverages environment variable injection and a malicious shared object to gain root privileges.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages environment variable manipulation and a malicious shared library to gain root privileges.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages environment variable manipulation and a malicious shared library to gain root privileges.
This repository contains a functional proof-of-concept exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit's pkexec. The exploit manipulates environment variables and leverages a malicious shared library to gain root privileges.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), which leverages a vulnerability in pkexec to achieve local privilege escalation. The exploit manipulates environment variables and file paths to execute arbitrary code with root privileges, specifically removing the SUID bit from /usr/bin/pkexec.
This repository contains a functional local privilege escalation (LPE) exploit for CVE-2021-4034 (PwnKit). The exploit leverages a vulnerability in pkexec to execute arbitrary code with root privileges by manipulating environment variables and the GCONV_PATH mechanism.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), leveraging a vulnerability in pkexec to achieve local privilege escalation. The exploit manipulates environment variables and the GCONV_PATH to execute arbitrary code with elevated privileges.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages environment variable manipulation and a malicious shared library to gain root access.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in pkexec. The exploit leverages environment variable manipulation and a malicious shared library to gain root access.
This repository contains functional exploit code for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in Polkit's pkexec. The PoC leverages environment variable manipulation and a malicious shared library to gain root access.
This repository contains a functional exploit for CVE-2021-4034, a local privilege escalation vulnerability in Polkit's pkexec. The exploit manipulates environment variables and leverages a malicious gconv module to execute arbitrary code with elevated privileges.
This repository contains a functional exploit for CVE-2021-4034, a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages environment variable manipulation and a malicious shared object to gain root privileges.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), leveraging an out-of-bounds write in pkexec to achieve local privilege escalation via environment variable manipulation and LD_PRELOAD injection.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), leveraging a vulnerability in pkexec to achieve local privilege escalation. The exploit manipulates environment variables and uses a malicious shared library to gain root access.
This repository contains a functional Go implementation of CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit's pkexec. The exploit leverages an out-of-bounds write and environment variable manipulation to execute arbitrary code as root.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), leveraging a race condition in pkexec to achieve local privilege escalation (LPE) by manipulating environment variables and executing a malicious shared library.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in Polkit's pkexec. The exploit leverages environment variable manipulation and a malicious shared library to gain root privileges.
This is a functional exploit for CVE-2021-4034 (PwnKit), leveraging a vulnerability in pkexec to achieve local privilege escalation. The exploit manipulates environment variables and the GCONV_PATH to execute arbitrary code with root privileges.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in pkexec. The exploit leverages environment variable manipulation and a malicious gconv module to execute arbitrary code as root.
This repository contains a functional exploit for CVE-2021-4034, a local privilege escalation vulnerability in pkexec. The exploit leverages environment variable manipulation and a malicious shared library to gain root privileges.
This repository contains a functional exploit for CVE-2021-4034 (PwnKit), leveraging a memory corruption vulnerability in pkexec to achieve local privilege escalation. The exploit manipulates environment variables and uses a malicious shared library to gain root access.
This PoC exploits CVE-2021-4034 (PwnKit) by manipulating environment variables to execute arbitrary code via pkexec. It creates a malicious shared object and gconv-modules file to achieve local privilege escalation.
This repository contains a functional exploit for CVE-2021-4034, a local privilege escalation vulnerability in pkexec. The exploit leverages environment variable manipulation and a malicious shared library to gain root privileges.
This Metasploit module exploits CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit's pkexec. It leverages improper environment variable handling to execute arbitrary code as root.
References (13)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H