Skip to content
KitploitKITPLOIT
ToolsBlog
Log in
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2021-3560_PoC — Automated privilege escalation script exploiting CVE-2021-3560 in polkit to gain root access on vulnerable Linux distributions. | Kitploit
Tools/GitHubGitHub/istar-lab/cve-2021-3560_poc
Privilege EscalationVulnerability AnalysisExploitationPenetration TestingRed TeamingBinary Exploitation
GitHubistar-lab/cve-2021-3560_poc

CVE-2021-3560_PoC

Automated privilege escalation script exploiting CVE-2021-3560 in polkit to gain root access on vulnerable Linux distributions.

View Repository
15 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2021-3560_PoC

polkit exploit script

Automated script for escalating to root using polkit service

Requirements

  • SSH server (this is to avoid having authentication popups through GNOME)
  • Vulnerable Linux distribution:
Distribution Vulnerable?
RHEL 7 No
RHEL 8 Yes
Fedora 20 (or earlier) No
Fedora 21 (or later) Yes
Debian 10 (“buster”) No
Debian testing (“bullseye”) Yes
Ubuntu 18.04 No
Ubuntu 20.04 Yes

Usage Guide

ssh localhost
git clone https://github.com/tyleraharrison/CVE-2021-3560_PoC.git
cd CVE-2021-3560_PoC
./polkitRoot.sh

Known Issues

  • Solution to needing to brute-force is poorly written recursion
  • Line-endings may need to be changed with dos2unix polkitRoot.sh because GitHub changed them to CRLF and Bash does not like that

Tested in Ubuntu 20.04

Reference: https://github.blog/2021-06-10-privilege-escalation-polkit-root-on-linux-with-bug/

Download Tool