Catálogo de exploits

vilasboasph/CVE-2021-4034

impromptu pwn chal

CVE-2021-4034 in Bash Script

clubby789/CVE-2021-4034

h3x0v3rl0rd/CVE-2021-4034

gbrsh/CVE-2021-4034

Pseudopatch for CVE-2021-4034

PoC for the CVE-2021-4034 vulnerability, affecting polkit < 0.120.

Y3A/CVE-2021-4034

ayypril/CVE-2021-4034

jostmart/-CVE-2021-4034

polkit pkexec Local Privilege Vulnerability to Add custom commands

POC for CVE-2021-4034

A Golang implementation of clubby789's implementation of CVE-2021-4034

A python3 and bash PoC for CVE-2021-4034 by Kim Schulz

Just a sh script file to CVE-2021-4034

discordianfish/cve-2022-0185-crash-poc

Self-contained exploit for CVE-2021-4034 - Pkexec Local Privilege Escalation

sunny0day/CVE-2021-4034

PoC for cve-2021-4034

Bash implementation of CVE-2021-4034

A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default configuration "require all denied", these requests can succeed. If CGI scripts are also enabled for these aliased pathes, this could allow for remote code execution. This issue only affects Apache 2.4.49 and not earlier versions. Credits to: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41773

This demonstration video shows how we can control the victim's device by sending the innocent-looking PDF file to the target which actually consists of embedded payload. The exploit was made public as CVE-2010-1240.

Proof of Concept for CVE-2021-4034 Polkit Privilege Escalation

Proof of Concept (PoC) CVE-2021-4034

Python exploit code for CVE-2021-4034 (pwnkit)

robemmerson/CVE-2021-4034

An exploit for CVE-2021-4034 aka Pwnkit: Local Privilege Escalation in polkit's pkexec

Exploit for CVE-2021-4034

CVE-2021-4034: Local Privilege Escalation in polkit's pkexec proof of concept