CVE-2024-48990-POC

Simple poc for CVE-2024-48990 privilege escalation vulnerability with needrestart. https://www.qualys.com/2024/11/19/needrestart/needrestart.txt

Overview

This was desgined while working through the HackTheBox challenge, 'Conversor'. Slight modifications will be made to generalize it more later. I just didn't like the implementations that I found for my use case so I decided to make my own. Will add more later probably

NOTE: Might change my implementation later to simply upgrade the current session instead of creating a new reverse shell

Usage

This is a bash script that automates the exploit for you, simply run the following command on the system you are testing the exploit on and have a listener like netcat ready to catch the reverse shell:

NOTE: MAKE SURE TO CHANGE IP AND PORT IN THE SCRIPT (default port is 1234)

bash exploit.sh

Disclaimer

Don't do illegal stuff, blah blah blah... Just don't be dumb and enjoy for educational purposes only in controlled environments.