02 Feb Three Pages This week’s issue for discussion is a very old bug in the Linux polkit package,? which is a local privilege escalat
Three Pages
This week's issue for discussion is a very old bug in the Linux polkit package, which is a local privilege escalation attack against the 'pkexec' program.
This was actually discovered back in 2013 – https://ryiron.wordpress.com/2013/12/16/argv-silliness/ (Links to an external site.) – but wasn't really understood to be exploitable at that time. One axiom of security is that security flaws only get worse with time, and this is a perfect example. An oddity in pkexec was found by Qualys to be exploitable. https://blog.qualys.com/vulnerabilities-threat-research/2022/01/25/pwnkit-local-privilege-escalation-vulnerability-discovered-in-polkits-pkexec-cve-2021-4034 (Links to an external site.)
Read the blog above, and discuss how factual it is. For example, is polkit actually installed by default everywhere? What's the impact of this issue? What does it allow someone to do if polkit is in fact installed? What mitigations are available to remove the impact?
Part 2
Use the research sources and tools described in Chapter 1 and the lecture slides to collect what information you can on a company of your choice. Prepare a short report (no more than 4-5 pages) and deliver by the next class.
Please use a tool such as Maltego or Recon-NG to create your report – these are available from Kali.
Important: This is a footprinting exercise, NOT a scanning exercise. Passive lookups only!
Our website has a team of professional writers who can help you write any of your homework. They will write your papers from scratch. We also have a team of editors just to make sure all papers are of HIGH QUALITY & PLAGIARISM FREE. To make an Order you only need to click Ask A Question and we will direct you to our Order Page at WriteDemy. Then fill Our Order Form with all your assignment instructions. Select your deadline and pay for your paper. You will get it few hours before your set deadline.
Fill in all the assignment paper details that are required in the order form with the standard information being the page count, deadline, academic level and type of paper. It is advisable to have this information at hand so that you can quickly fill in the necessary information needed in the form for the essay writer to be immediately assigned to your writing project. Make payment for the custom essay order to enable us to assign a suitable writer to your order. Payments are made through Paypal on a secured billing page. Finally, sit back and relax.