Sploitus

Exploit for CVE-2021-3560_PoC

kitploit ยท 2026-08-25

Exploit Code

MARKDOWN46 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-ISTAR-LAB-CVE-2021-3560_POC
# CVE-2021-3560_PoC

polkit ์ต์Šคํ”Œ๋กœ์ž‡ ์Šคํฌ๋ฆฝํŠธ

polkit ์„œ๋น„์Šค๋ฅผ ์‚ฌ์šฉํ•˜์—ฌ ๋ฃจํŠธ ๊ถŒํ•œ ์ƒ์Šน์„ ์œ„ํ•œ ์ž๋™ํ™” ์Šคํฌ๋ฆฝํŠธ

# ์š”๊ตฌ ์‚ฌํ•ญ

  * SSH ์„œ๋ฒ„ (GNOME์„ ํ†ตํ•œ ์ธ์ฆ ํŒ์—…์„ ํ”ผํ•˜๊ธฐ ์œ„ํ•จ)
  * ์ทจ์•ฝํ•œ Linux ๋ฐฐํฌํŒ:



๋ฐฐํฌํŒ| ์ทจ์•ฝ ์—ฌ๋ถ€?  
---|---  
RHEL 7| ์•„๋‹ˆ์˜ค  
RHEL 8|  ์˜ˆ  
Fedora 20 (๋˜๋Š” ์ด์ „)| ์•„๋‹ˆ์˜ค  
Fedora 21 (๋˜๋Š” ์ดํ›„)|  ์˜ˆ  
Debian 10 (โ€œbusterโ€)| ์•„๋‹ˆ์˜ค  
Debian testing (โ€œbullseyeโ€)|  ์˜ˆ  
Ubuntu 18.04| ์•„๋‹ˆ์˜ค  
Ubuntu 20.04|  ์˜ˆ  
  
# ์‚ฌ์šฉ ๊ฐ€์ด๋“œ

root@kitploit:~
    
    
    ssh localhost
    git clone https://github.com/tyleraharrison/CVE-2021-3560_PoC.git
    cd CVE-2021-3560_PoC
    ./polkitRoot.sh
    

# ์•Œ๋ ค์ง„ ๋ฌธ์ œ์ 

  * ๋ฌด์ฐจ๋ณ„ ๋Œ€์ž…(brute-force)์ด ํ•„์š”ํ•œ ๋ฌธ์ œ์— ๋Œ€ํ•œ ํ•ด๊ฒฐ์ฑ…์€ ์ž‘์„ฑ์ด ๋ฏธํกํ•œ ์žฌ๊ท€ ํ•จ์ˆ˜์ž„
  * GitHub์—์„œ ์ค„ ๋์„ CRLF๋กœ ๋ณ€๊ฒฝํ•˜์—ฌ Bash๊ฐ€ ์ด๋ฅผ ์ฒ˜๋ฆฌํ•˜์ง€ ๋ชปํ•˜๋ฏ€๋กœ `dos2unix polkitRoot.sh`๋ฅผ ์‚ฌ์šฉํ•˜์—ฌ ์ค„ ๋์„ ๋ณ€๊ฒฝํ•ด์•ผ ํ•  ์ˆ˜๋„ ์žˆ์Œ



Ubuntu 20.04์—์„œ ํ…Œ์ŠคํŠธ๋จ

์ฐธ๊ณ : https://github.blog/2021-06-10-privilege-escalation-polkit-root-on-linux-with-bug/