Nextjs_RCE_Exploit_Tool

Next.js RCE Exploit Tool CVE-2025-55182 !CAUTION 免责声明 / Disclaimer 本工具仅供安全研究与教学 使用。用户在使用本工具进行测试时，必须确保已获得目标系统的合法授权 。 严禁用于非授权的渗透测试、恶意攻击或任何非法用途。用户感知和利用漏洞所产生的一切风险与法律后果由用户自行承担 ，与本项目开发者无关。 如果不接受此条款，请立即停止下载或使用本工具。 本工具基于公开文章开发，不提供编译好的二进制发布版本，请自行审计代码并编译。 🙏 致谢 / Credits...

React19-fix-vibecoders

React 19 & Next.js Security Fix Prompts for AI Agents 🚨 CRITICAL SECURITY VULNERABILITY - CVE-2025-55182 & CVE-2025-66478 This repository contains reusable prompts to help AI coding assistants automatically fix critical React/Next.js security vulnerabilities. 📋 What's Inside SECURITYFIXPROMPT.md...

CVE-2025-55182-Exploit-scanner

This repository does not have a README...

react2shell-scanner

React2Shell Vulnerability Scanner A safe, non-invasive scanner for detecting React Server Components RSC and Next.js Remote Code Execution vulnerabilities CVE-2025-55182 & CVE-2025-66478. Overview This scanner helps organizations identify whether their web services are vulnerable to the React2She...

CVE-2025-55182

This repository does not have a README...

ore_react2shell_scanner

Rapticore Security Research - React2Shell Scanner A security assessment toolkit developed by the Rapticore Security Research Team for detecting React Server Components RSC vulnerabilities including CVE-2025-55182 React2Shell - a critical Remote Code Execution vulnerability. Overview This toolkit...

React2Shell

React2Shell – Advanced Discovery & Exploitation Framework An advanced React Server Components RSC vulnerability scanner and exploiter for CVE-2025-55182 and CVE-2025-66478 affecting Next.js applications. This tool expands upon the original React2Shell research and proof-of-concept by introducing...

HTB-Reactor-Linux-Machine-Walkthrough

HTB: Reactor !CAUTION Spoiler warning. This is a full walkthrough including flags. If you want to solve the machine yourself, close this now and come back when you're stuck. Machine Info Field| Details ---|--- Name| Reactor OS| Ubuntu 24.04 LTS Noble Difficulty| Medium CVE| CVE-2025-55182 CVSS 10...

React-Next-Scanner

React-Next-Scanner Safe CLI scanner for CVE-2025-55182 and CVE-2025-66478 This tool provides a lightweight, non-exploitative vulnerability scanner focused on modern JavaScript stacks, specifically: API services affected by CVE-2025-55182 Next.js applications affected by CVE-2025-66478 It works on...

cve-2025-55182

cve-2025-55182 A collection of various tools for testing and protecting against cve-2025-55182. They are offered without warranty, the user assumes all risk. This is not official F5 Inc. product. Based on the NIST-linked POC at https://github.com/ejpir/CVE-2025-55182-research NIST CVE Disclosure:...

nextjs-cve-version-confusion

Next.js CVE-2025-55182 Version Confusion Reproduction This repository demonstrates the version string discrepancy in Next.js 16.0.7+ that causes confusion when verifying CVE-2025-55182 patch status. The Issue After upgrading to Next.js 16.0.8, users checking their React version see...

POC2-CVE-2025-55182

React2Shell Ultimate - CVE-2025-66478 Scanner The most comprehensive scanner for Next.js RSC Remote Code Execution vulnerability ╔════════════════════════════════════════════════════════════════════════╗ ║ ║ ║ | \ | || / || | | | | ║ ║ | | / / |/ | | / /\ | ' \ / \ | | ║ ║ | / | | | | / / | | |...

CVE-2025-55182_Vulnerable-Application

CVE-2025-55182 Vulnerable Lab Educational testing lab using vulnerable React Server Components to demonstrate security vulnerabilities in modern web frameworks. ⚠️ Important Disclaimer This application is intentionally vulnerable and should ONLY be used for educational purposes in controlled...

React2shell-ultimate-scanner

CVE-2025-55182 Advanced Scanner 🚀 A professional and automated security scanner to detect and validate CVE-2025-55182 , a critical vulnerability affecting Next.js React Server Components. Designed for security researchers, penetration testers, and bug bounty hunters who want fast, clean, and...

nextjs-security-scanner

日本語版は README.ja.md を参照してください。 nextjs-security-scanner Bash script to detect CVE-2025-55182 React2Shell and credential exposure in Next.js projects. Zero dependencies. CVE-2025-55182: React2Shell CVSS: 10.0 CRITICAL | CWE-502: Deserialization of Untrusted Data | SNORT SID: 65554 Unauthenticated...

React-Server-Components-Remote-Code-Execution-CVE-2025-55182-

This repository does not have a README...

CVE-2025-55182-poc-json

CVE-2025-55182-poc-json CVE-2025-55182-poc-json en0f...

CVE-2025-55182-Lab

CVE-2025-55182 – Local RCE Lab React Server Components This repository is a small local lab to understand how CVE-2025-55182 works in practice on a deliberately vulnerable React Server Components / Next.js application. It is meant for education, blue teaming and secure development awareness only...

test-vuln

test-vuln a controlled environment to test CVE-2025-55182...

react2shell-scanner-rust

react2shell-scanner-rust Detect CVE-2025-55182 & CVE-2025-66478 in Next.js/RSC applications. Install cargo build --release Usage ./scanner -u https://example.com ./scanner -l hosts.txt -t 20 -o results.json ./scanner -u https://example.com --crawl --max-depth 3 ./scanner -u https://example.com...