PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

suForce: Linux Local Account Password Brute-Forcing Tool via 'su'

github.com | tool | #linux | #red-team | #post-exploitation | #password-brute-force | #su | #bash-tool | #credential-access
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

suForce is a lightweight Bash tool for Linux post-exploitation that automates local password brute-forcing of system users (including root) through the standard su binary using a wordlist.

Why it matters

Provides an immediate, dependency-free local password testing option during Linux post-exploitation and privilege escalation when external auditing tools cannot be dropped.
Published
Collected

Related coverage

research · github.com
Infinity Core: Linux Kernel Core Subsystems LPE and Container Escape Research
Unlike most modern Linux kernel exploits that depend on networking, eBPF, or unprivileged user namespaces, these vulnerabilities reside in fundamental kernel core subsystems, rendering standard container sandboxes and Android application domain restrictions ineffective against local privilege escalation.
High · vulnerability · codeberg.org
cowcups: CUPS cups-fontpath Local Privilege Escalation (LPE) to Root PoC
Demonstrates an effective local root privilege escalation chain in default CUPS environments by abusing printer discovery and Ghostscript font search paths.
blog · netspi.com
Using strace to monitor SSH connections on Linux
Instead of replacing SSH binaries on a compromised Linux host, testers can attach strace to running sshd via ptrace and read write() system calls to capture passwords and session content live.
tool · github.com
Brotli Client Checker: Test Server for Brotli Decoder Vulnerability (CVE-2026-111497)
Provides security teams and developers with a simple, zero-dependency mechanism to test whether backend microservices, crawlers, and HTTP clients are susceptible to the widespread Node2Shell/HTTP2Shell Brotli decoder flaw.
tool · github.com
node2shell-scanner: High-Fidelity Remote Detection Tool for Node.js Brotli OOB Write (CVE-2026-111497)
Provides defenders and security teams with a safe, non-destructive, and high-fidelity method to scan large attack surfaces and confirm Node.js exposure to the critical Brotli decoder flaw.
tool · github.com
ipatool (DrWhax Fork): App Store CLI with Native FairPlay Decryption Pipeline & MCP Integration
Significantly streamlines iOS security auditing and reverse engineering by providing an all-in-one CLI and MCP workflow to retrieve App Store packages and decrypt FairPlay binaries for static analysis.
Back