xl337x/cve-2023-31902Pre-auth RCE exploit for Mobile Mouse 3.6.0.4 via TCP (port 9099) and WebSocket (port 35913) with Python scripts for unauthenticated command injection on LAN.
CVE-2023-31902 — Mobile Mouse 3.6.0.4 Remote Code Execution
Summary:
Mobile Mouse is a Windows application that turns your phone into a mouse/keyboard over the network. It listens on port 9099 (TCP) and 35913 (WebSocket) with no authentication by default.
The vulnerability allows an unauthenticated attacker on the same network to send crafted protocol messages that execute arbitrary commands on the Windows host essentially a pre-auth RCE requiring only network access to the port.
Two attack vectors:
| Vector | Port | Script |
|---|
| TCP socket (original) | 9099 | 51010.py / CVE-2023-31902.py |
| WebSocket (newer) | 35913 | i.py / f.py |
Key facts for your OSCP notes:
KEY command) to type and execute arbitrary shell commands51010