Next.js-RSC-RCE-Scanner-CVE-2025-66478

Next.js RSC RCE Scanner and POC/Exploit Collection CVE-2025-66478 A command-line scanner for batch detection of Next.js application versions and determining if they are affected by CVE-2025-66478 vulnerability. This Scanner do not exploit the vulnerability Vulnerability Description...

react2shell-PoC

React2Shell Nuclei template for detecting React2Shell CVE-2025-55182 and CVE-2025-66478...

react2shell-scanner

react2shell-scanner A command-line tool for detecting CVE-2025-55182 and CVE-2025-66478 in Next.js applications using React Server Components. For technical details on the vulnerability and detection methodology, see our blog post:...

react2shell-detector

React2Shell Detector A Chrome extension for detecting React2Shell vulnerabilities CVE-2025-55182 & CVE-2025-66478 in web applications. Overview React2Shell Detector is a browser extension that helps security researchers and web developers identify potential React2Shell vulnerabilities in web...

ReactOOPS-WriteUp

ReactOOPS - HTB Web Challenge Writeup Author : TheStingR - Team ISP1337Hackers Challenge : ReactOOPS Web Platform : Hack The Box Difficulty : Very Easy - RETIRED Date Solved : December 13, 2025 Table of Contents...

react2shell-vulnlab

React2Shell Tribune — LABORATORIO DE APLICACIONES WEB VULNERABLES Una aplicación web moderna de Next.js con temática de portal de noticias/blogs para CVE-2025-55182 React y CVE-2025-66478 Next.js para aprender, detectar y practicar de forma segura React2Shell. Ejecuta React 19.0.0 y Next.js 15.0....

react2shell-ultimate

Escáner React2Shell Ultimate v2.0 Escáner profesional de vulnerabilidades RCE RSC Next.js para CVE-2025-66478 🎯 Descripción general React2Shell Ultimate es un escáner integral de vulnerabilidades para CVE-2025-66478: una vulnerabilidad crítica de ejecución remota de código RCE que afecta a...

CVE-2025-55182

CVE-2025-55182 React2shell exploit CVE-2025-55182+CVE-2025-66478...

CVE-2025-66478

CVE-2025-66478 - Analysis of Real Attack Logs for Next.js Server Actions RCE Vulnerability Overview This project collects real attack logs recorded from a Next.js 15.1.2 application running in a Docker container exposed to the internet. These logs show how the CVE-2025-66478 vulnerability is bein...

react2shell

React2Shell Herramienta CLI + plantillas de Nuclei para detectar dos vulnerabilidades críticas de RCE en React Server Components y Next.js Server Actions. El escáner fue reescrito basándose en la vulnerabilidad react2shell divulgada. Resumen de vulnerabilidades CVE-2025-55182 – RCE por...

React2Shell_Hunter

React2Shell Hunter AWS Organization-Wide Detection Toolkit for CVE-2025-55182 & CVE-2025-66478 ⚠️ IMPORTANT DISCLAIMER - PLEASE READ BEFORE USE This toolkit has NOT been tested in a production AWS environment. Due to infrastructure constraints, this project was developed and validated through code...

CHECK-CVE-2025-55182-AND-CVE-2025-66478

CHECK-CVE-2025-55182-AND-CVE-2025-66478 This script detects if a server is affected by RSC/Next.js RCE vulnerabilities CVE-2025-55182 and CVE-2025-66478. It checks the server response for specific vulnerability signatures. Those signatures should be specific according to Searchlight Cyber So the...

poc-cve-next

PoC for Next.js Vulnerability. Credits where credits are due. This was written in go but I got inspiration from: github.com/namest504/CVE-2025-66478 For more info visit that repo. Cheers! Disclaimer This code is provided for security research and educational purposes only. Using this tool against...

-vercel-application-is-vulnerable-to-CVE-2025-66478.

-vercel-application-is-vulnerable-to-CVE-2025-66478. bug bounty...

react2shellVulnApp

React2Shell Vulnerable Banking Application Lab Deliberately vulnerable banking app for CVE-2025-55182 React and CVE-2025-66478 Next.js to learn, detect, and safely exercise React2Shell. Runs unpatched React 19.0.0 and Next.js 15.0.3. Overview Fictional SecureBank built with Next.js App Router and...

next-cve-2025-66478

NextJS CVE-2025-66478 Scans all projects vulnerable to CVE-2025-66478 projects in the current working directory and reports them. Learn more about CVE-2025-66478 Warning This script doesn't fix any vulnerabilities. This is just for locating them. Please refer to this article to learn more about t...

React2Shell

RSC Sentinel A Firefox extension for detecting React2Shell vulnerabilities CVE-2025-55182 & CVE-2025-66478 in web applications. 👁️ Overview RSC Sentinel is a Firefox browser extension for security researchers and educators who want to observe React Server Components RSC and Next.js App Router...

react2shell-scanner

react2shell-scanner A high-fidelity command-line vulnerability scanner for detecting CVE-2025-55182 and CVE-2025-66478 Remote Code Execution in Next.js applications using React Server Components RSC. 🚨 Vulnerability Overview These critical vulnerabilities affect Next.js applications using React...

react2shell-scanner-CVE-2025-55182

React2Shell Enterprise Scanner High-fidelity vulnerability scanner for CVE-2025-55182 and CVE-2025-66478 - Remote Code Execution vulnerabilities in React Server Components / Next.js. 📖 For detailed technical analysis, exploit mechanics, and IOC data, seeSECURITY-RESEARCH.md ⚠️ DISCLAIMER This tool...

evilact

evilact Fast vulnerability scanner for CVE-2025-55182 and CVE-2025-66478 in Next.js applications using React Server Components. Supports bulk scanning, RCE confirmation, and high-performance concurrent checks. Install root@kitploit: git clone https://github.com/cypholab/evilact.git cd evilact go...