JustThinkingHard/HID-Attack

PoC

Full BadUSB attack chain: keystroke-injection payload delivery, C2 client, privilege escalation (CVE-2025-6019), and systemd persistence on Linux.

view exploit source poc_in_githubauthor JustThinkingHardpublished 2025-06-20catalog poc_in_github
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2025-6019US—Exploit
A Local Privilege Escalation (LPE) vulnerability was found in libblockdev. Generally, the "allow_active" setting in Polkit permits a physically present user to take certain actions…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan