
Proof-of-concept exploit for CVE-2021-4034, a local privilege escalation in polkit's pkexec, demonstrating exploitation via GCONV_PATH manipulation.
This is an exploit created for CVE-2021-4034 meant as a POC. It is based off the info at https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt.
gcc prog.cgcc payload.c -o payload.so -shared -fPIC./a.out.
Note: You can rename this file, a.out is simply the default name from GCC.