Privilege Escalation in Seqrite Endpoint Security (EPS)

This repository contains a local privilege escalation exploit (PoC) for CVE-2023-31497, targeting Quick Heal's Seqrite Endpoint Security (EPS) on Linux systems (Debian/Ubuntu). The vulnerability arises from world-writable permissions on critical installation directories and startup scripts, allowing a local attacker to escalate privileges to root. The main exploit script, 'epscalate.py', provides two exploitation techniques: (1) poisoning world-writable /etc/init.d/ startup scripts to inject a bash reverse shell, and (2) overwriting world-writable daemon binaries with a custom-compiled reverse shell payload (using 'shellcode.c' as a template). The attacker must specify their own IP and port for the reverse shell connection. The exploit is operational, providing a working root shell if successful. The repository is structured with a Python exploit script, a C shellcode template, and supporting documentation. No network endpoints are hardcoded; the attacker supplies their own listener address. The exploit is not part of a framework and is a standalone PoC.