Pkexec Privilege Escalation

23/01/2023 30/03/2023

shuciran

PwnKit (ly4k)

This PwnKit contains a pretty good PwnKit binary for PKEXEC. In order to exploit it, we need to download the PwnKit.c binary and compile from our Kali:

(This is to compile with x32 architecture if x64 is needed, delete “-m32”)

  
gcc -m32 -shared PwnKit.c -o PwnKit -Wl,-e,entry -fPIC

Additionally, there is a compiled version of the binary with support for both architectures 32 and 64 bits.

Upload it to the victim machine and execute it, you can use your favorite Local Web Server

04 Privilege Escalation, Linux - Pkexec

pkexec linux privesc

WebShells
FTP (tcp-21)
Reverse Shells
Finding GUID with ipainstaller
Plist Files

exploitation wireless file transfer hackthebox active directory scr windows privesc mobile linux enumeration linux privesc

Pkexec Privilege Escalation

PwnKit (ly4k)

For Privilege Access (Linux)

DirtyCow Privilege Escalation

SUID Screen Exploitation