CVE-2022-3218

This exploit targets WiFi Mouse 1.7.8.5 by sending crafted packets to execute commands via the desktop server software. It leverages the PIN input mechanism to bypass restrictions and execute arbitrary commands, including downloading and running a payload.

This exploit targets WiFi Mouse 1.7.8.5 by leveraging a PIN bypass vulnerability to achieve remote code execution. It sends crafted packets to open a command prompt and execute arbitrary commands via certutil to fetch and run a payload.

This repository contains a functional Python exploit for CVE-2022-3218, which leverages a command injection vulnerability to execute arbitrary commands on a target system. The exploit uses a hex-encoded communication protocol to interact with the target and downloads a payload via certutil.exe.

This Metasploit module exploits an authentication bypass in WiFi Mouse Server (CVE-2022-3218) to achieve remote code execution by opening cmd.exe and injecting commands via the server's input simulation functionality.