Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2021-3560_PoC — Automated privilege escalation script exploiting CVE-2021-3560 in polkit to gain root access on vulnerable Linux distributions. | Kitploit
Tools/GitHubGitHub/istar-lab/cve-2021-3560_poc
Privilege EscalationVulnerability AnalysisExploitationPenetration TestingRed TeamingBinary Exploitation
GitHubistar-lab/cve-2021-3560_poc

CVE-2021-3560_PoC

Automated privilege escalation script exploiting CVE-2021-3560 in polkit to gain root access on vulnerable Linux distributions.

View Repository
15 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2021-3560_PoC

polkit exploit script

Automated script for escalating to root using polkit service

Requirements

  • SSH server (this is to avoid having authentication popups through GNOME)
  • Vulnerable Linux distribution:
DistributionVulnerable?
RHEL 7No
RHEL 8 Yes
Fedora 20 (or earlier)No
Fedora 21 (or later) Yes
Debian 10 (“buster”)No
Debian testing (“bullseye”) Yes
Ubuntu 18.04No
Ubuntu 20.04 Yes

Usage Guide

root@kitploit:~
ssh localhost
git clone https://github.com/tyleraharrison/CVE-2021-3560_PoC.git
cd CVE-2021-3560_PoC
./polkitRoot.sh

Known Issues

  • Solution to needing to brute-force is poorly written recursion
  • Line-endings may need to be changed with dos2unix polkitRoot.sh because GitHub changed them to CRLF and Bash does not like that

Tested in Ubuntu 20.04

Reference: https://github.blog/2021-06-10-privilege-escalation-polkit-root-on-linux-with-bug/

Download Tool