Peyara

漏洞标题：Peyara Remote Mouse v1.0.1 - 远程代码执行（RCE） 日期：2025-05-30 漏洞作者：tmrswrr 软件链接：https://peyara-remote-mouse.vercel.app/ 平台：Windows 版本：v1.0.1 测试环境：Windows 10 漏洞描述 Peyara Remote Mouse v1.0.1 的 WebSocket 命令接口（端口 1313）存在一个未经验证的远程代码执行漏洞。该应用程序未能验证或清理通过 WebSocket...

Peyara-FileUpload

漏洞利用标题：Peyara Remote Mouse v1.0.1 未经认证的任意文件上传 日期：2025-01-06 漏洞利用作者：tmrswrr 软件链接：https://peyara-remote-mouse.vercel.app/ 平台：Windows 版本：v1.0.1 测试环境：Windows 10 root@kitploit: 用法 : python3 combinedscript.py 创建恶意 LNK 文件 evil.lnk root@kitploit: $WshShell = New-Object -ComObject WScript.Shell $Shortcut ...

Weekly Metasploit Update: Modules for SMB-to-Meterpreter, Peyara Remote Mouse RCE exploit, and more

It's Time to Upgrade Your SMB Session This week, Metasploit contributor Dean Welch has added an SMB to Meterpreter session upgrade module. It uses PsExec to facilitate the upgrade. Users can load the module with use windows/manage/smbtometerpreter and specify the session number they wish to...

Peyara Remote Mouse 1.0.1 Unauthenticated Remote Code Execution

This module exploits an unauthenticated remote code execution vulnerability in Peyara Remote Mouse 1.0.1. The application exposes a Socket.IO WebSocket service on TCP port 1313 and accepts unauthenticated keyboard input events. The module sends keyboard events to open the Windows command prompt a...