Dangerous code hidden in plain sight for 12 years

    Dangerous code hidden in plain sight for 12 years
  
Video by: PwnFunction
Upload date: 08 Apr 2022
Archive date: 08 Apr 2022
Video length: 17:59 minutes
▶️ Watch on YouTube
🗄️ Source files

      Report a problem

Description

In this episode we'll explore a local privilege escalation vulnerability in polkit's pkexec. 🐶 Snyk is free forever. Sign up with my link https://snyk.co/pwnfunction ⭐ Code + All Resources: https://github.com/PwnFunction/CVE-2021-4034 ✨ Info ➜ Tools used are: Adobe Animate, Adobe Premiere Pro, Adobe Illustrator & Adobe Auditions. ➜ VSCode: Monokai Pro Theme, Jetbrains Mono Font, SF Mono Font. ➜ Video Production time: 80-ish hours. ➜ About 2.5L of Almond milk were consumed during the video creation. 💬 Discord: https://discord.gg/6KKQHvgJwv 🐤 Twitter: https://twitter.com/PwnFunction 🎵 Track: Lost Sky - Dreams NCS link: https://www.youtube.com/watch?v=SHFTHDncw0g

Full info JSON dump

{'_id': ObjectId('6404c3ff541bd015784ba3cb'), 'id': 'eTcVLqKpZJc', 'title': 'Dangerous code hidden in plain sight for 12 years', 'description': "In this episode we'll explore a local privilege escalation vulnerability in polkit's pkexec.\n\n🐶 Snyk is free forever. Sign up with my link https://snyk.co/pwnfunction\n\n⭐ Code + All Resources: https://github.com/PwnFunction/CVE-2021-4034\n\n✨ Info\n➜ Tools used are: Adobe Animate, Adobe Premiere Pro, Adobe Illustrator & Adobe Auditions.\n➜ VSCode: Monokai Pro Theme, Jetbrains Mono Font, SF Mono Font.\n➜ Video Production time: 80-ish hours.\n➜ About 2.5L of Almond milk were consumed during the video creation.\n\n💬 Discord: https://discord.gg/6KKQHvgJwv\n🐤 Twitter: https://twitter.com/PwnFunction\n\n🎵 Track: Lost Sky - Dreams\nNCS link: https://www.youtube.com/watch?v=SHFTHDncw0g", 'uploader': 'PwnFunction', 'uploader_id': 'UCW6MNdOsqv2E9AjQkv9we7A', 'uploader_url': 'http://www.youtube.com/channel/UCW6MNdOsqv2E9AjQkv9we7A', 'channel_id': 'UCW6MNdOsqv2E9AjQkv9we7A', 'channel_url': 'https://www.youtube.com/channel/UCW6MNdOsqv2E9AjQkv9we7A', 'duration': 1079, 'view_count': 12417, 'age_limit': 0, 'webpage_url': 'https://www.youtube.com/watch?v=eTcVLqKpZJc', 'categories': ['Education'], 'tags': [], 'playable_in_embed': True, 'is_live': False, 'was_live': False, 'live_status': 'not_live', 'like_count': 1983, 'channel': 'PwnFunction', 'channel_follower_count': 115000, 'upload_date': '20220408', 'availability': 'public', 'webpage_url_basename': 'watch', 'webpage_url_domain': 'youtube.com', 'extractor': 'youtube', 'extractor_key': 'Youtube', 'n_entries': 18, 'playlist_count': 18, 'playlist_index': 1, 'playlist': 'PwnFunction - Videos', 'playlist_id': 'UCW6MNdOsqv2E9AjQkv9we7A', 'playlist_title': 'PwnFunction - Videos', 'playlist_uploader': 'PwnFunction', 'playlist_uploader_id': 'UCW6MNdOsqv2E9AjQkv9we7A', 'display_id': 'eTcVLqKpZJc', 'fulltitle': 'Dangerous code hidden in plain sight for 12 years', 'duration_string': '17:59', 'asr': 44100, 'format_id': '22', 'format_note': '720p', 'source_preference': -1, 'fps': 30, 'height': 720, 'quality': 8, 'has_drm': False, 'tbr': 351.225, 'width': 1280, 'language': '', 'language_preference': -1, 'ext': 'mp4', 'vcodec': 'avc1.64001F', 'acodec': 'mp4a.40.2', 'dynamic_range': 'SDR', 'protocol': 'https', 'video_ext': 'mp4', 'audio_ext': 'none', 'vbr': 351.225, 'abr': 0.0, 'format': '22 - 1280x720 (720p)', 'resolution': '1280x720', 'filesize_approx': 48508387.2, 'epoch': 1649457055, '_status': 'available', '_title_slug': 'dangerous-code-hidden-in-plain-sight-for-12-years'}

Dangerous code hidden in plain sight for 12 years

Description

Full info JSON dump

Categories