Skip to content

Latest commit

 

History

4 Commits

Folders and files

NameName
Last commit message
Last commit date
 
 
 
 
 
 

Repository files navigation

hsu

An insecure su command for macOS, that doesn't need a password and allows login as service accounts. Keep in mind this isn't an exploit, and it still requires sudo to be set up.

Screenshot 2025-09-30 at 3 44 58 PM

Setup

Clone the repo, sh install.sh

Precompiled binaries can be found in the Releases page (universal, arm64, x86_64 -amd64- ).
They must be unquarantined with xattr -c path/to/hsu, set ownership to root with sudo chown root:wheel path/to/hsu and given the setuid bit with sudo chmod u+s path/to/hsu

About

insecure, unchecked setuid binary (macOS)

Resources

Stars

1 star

Watchers

0 watching

Forks

Releases

Packages

Contributors

Languages