Peyara-FileUpload

Exploit Title: Peyara Remote Mouse v1.0.1 Unauthenticated Arbitrary File Upload Date: 2025-01-06 Exploit Author: tmrswrr Software Link: https://peyara-remote-mouse.vercel.app/ Platform: Windows Version: v1.0.1 Tested on: Windows 10 USAGE : python3 combinedscript.py Create Malicious LNK File...

Peyara

Exploit Title: Peyara Remote Mouse v1.0.1 - Remote Code Execution RCE Date: 2025-05-30 Exploit Author: tmrswrr Software Link:https://peyara-remote-mouse.vercel.app/ Platform: Windows Version: v1.0.1 Tested on: Windows 10 Vulnerability Description Peyara Remote Mouse v1.0.1 contains an...

Peyara Remote Mouse exposure detection

Detects Peyara Remote Mouse = 1.0.1 exposure by checking TCP 1313, an Engine.IO OPEN frame, and a Socket.IO namespace connect handshake. No keyboard injection is performed. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.protocols.websocket.websocketclient import...

Peyara Remote Mouse 1.0.1 unauthenticated keyboard RCE

Peyara Remote Mouse 1.0.1 exposes an unauthenticated Socket.IO WebSocket service on TCP 1313 that accepts remote keyboard events. This module opens cmd.exe on the target and types a command payload one keystroke at a time. !/usr/bin/env python3 -- coding: utf-8 -- import base64 import gzip import...

Weekly Metasploit Update: Modules for SMB-to-Meterpreter, Peyara Remote Mouse RCE exploit, and more

It's Time to Upgrade Your SMB Session This week, Metasploit contributor Dean Welch has added an SMB to Meterpreter session upgrade module. It uses PsExec to facilitate the upgrade. Users can load the module with use windows/manage/smbtometerpreter and specify the session number they wish to...

📄 Peyara Remote Mouse 1.0.1 Unauthenticated Remote Code Execution

This Metasploit module exploits an unauthenticated remote code execution vulnerability in Peyara Remote Mouse 1.0.1. The application exposes a Socket.IO WebSocket service on TCP port 1313 and accepts unauthenticated keyboard input events. The module sends keyboard events to open the Windows comma...

Peyara Remote Mouse 1.0.1 Unauthenticated Remote Code Execution

This module exploits an unauthenticated remote code execution vulnerability in Peyara Remote Mouse 1.0.1. The application exposes a Socket.IO WebSocket service on TCP port 1313 and accepts unauthenticated keyboard input events. The module sends keyboard events to open the Windows command prompt a...