Local Root Privilege Escalation in Deepin lastore-daemon

This repository contains a single Metasploit module: 'lastore-daemon D-Bus Privilege Escalation' for Linux. The exploit targets Deepin Linux systems where the lastore-daemon D-Bus configuration allows users in the sudo group to install arbitrary system packages without a password, leading to privilege escalation. The module works by building a malicious Debian package containing a Metasploit payload, uploading it to a writable directory (default: /tmp), and using the D-Bus interface of lastore-daemon to install the package as root. After installation, the payload is executed with root privileges, and the package is then removed. The exploit is operational, allowing for customizable payloads (e.g., reverse shell, meterpreter) and is suitable for post-exploitation scenarios where the attacker already has user-level access. The code interacts with several fingerprintable endpoints, including D-Bus object paths and interfaces, as well as file system locations. The module is well-structured, with clear separation of functions for package creation, payload upload, D-Bus communication, and cleanup.