> For the complete documentation index, see [llms.txt](https://red.infiltr8.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://red.infiltr8.io/redteam/privilege-escalation/linux/polkit-exploits.md).

# Polkit Exploits

## Theory

[Polkit ](https://gitlab.freedesktop.org/polkit/polkit/)is a system service installed by default on many Linux distributions. It’s used by [systemd](https://systemd.io/), so any Linux distribution that uses systemd also uses polkit

When you try to perform an action which requires a higher level of privileges, the policy toolkit can be used to determine whether you have the requisite permissions. It is integrated with systemd and is much more configurable than the traditional sudo system. Indeed, it is sometimes referred to as the "sudo of systemd".

## Practice

{% content-ref url="/pages/e4Yd747GNK1eYXnF4GC6" %}
[D-Bus Authentication Bypass](/redteam/privilege-escalation/linux/polkit-exploits/d-bus-authentication-bypass.md)
{% endcontent-ref %}

{% content-ref url="/pages/M4H43eNqIUHc2MJ0P8Z6" %}
[PwnKit](/redteam/privilege-escalation/linux/polkit-exploits/pwnkit.md)
{% endcontent-ref %}