liamg / traitor

:arrow_up: :skull_and_crossbones: :fire: Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock
MIT License
6.6k stars 576 forks source link

Add support for CVE-2021-4034 #52

Closed sa7mon closed 2 years ago

sa7mon commented 2 years ago

Another privesc using polkit

https://seclists.org/oss-sec/2022/q1/80

liamg commented 2 years ago

I'll do this tomorrow - I guess I need a mechanism to build precompiled shared objects into the traitor binary, I don't like having to rely on a c compiler existing on the target.