Peyara

Vulnerability Description

Peyara Remote Mouse v1.0.1 contains an unauthenticated remote code execution vulnerability in its WebSocket command interface (port 1313). The application fails to validate or sanitize simulated keyboard input commands received via WebSocket connections, allowing attackers to chain malicious keyboard events that execute arbitrary system commands. This vulnerability can be exploited remotely without authentication to gain full system compromise.

Steps:

1. Install Vulnerable Application
   Download and install Peyara Remote Mouse on the target Windows system.

2. Start Netcat Listener
   Open a terminal and execute:

   root@kitploit:~

   nc -nlvp 4444
   

3. Execute Exploit Script

4. Html version exploit