Polkit

  • PolicyKit is an authorization service on Linux-based OS that allows user software and system components to communicate with each other if the user software is authorized to do so
  • pkexec is interesting
  • pkexec -u root id
    • allows you to execute commands as root
  • In the pkexec tool, the memory corruption vulnerability with the identifier CVE-2021-4034 was found, also known as Pwnkit and also leads to privilege escalation
  • POC - https://github.com/arthepsy/CVE-2021-4034