PoC-for-Next.js-Middleware

PoC for Next.js Middleware Bypass CVE-2025-29927 This is a proof-of-concept for a fictional Next.js middleware bypass vulnerability CVE-2025-29927. Use only for educational and authorized security research. 🚀 Features...

alpr-dashboard-patches

ALPR Dashboard runtime patches Two drop-in patches for the algertc/alpr-dashboard Docker project. Both are deployable without modifying or rebuilding the upstream image. What's here logger-fix/ — async logger + cleanup throttle Replaces the built-in sync log transport full-file read + rewrite on...

NextBypass

NextBypass 🚨 Next.js Middleware Authorization Bypass Tool CVE-2025-29927 Features Exploit CVE-2025-29927 via x-middleware-subrequest header Auto-browser integration Proxy/Bookmarklet Vulnerability scanning & log analysis Network traffic monitoring Installation root@kitploit: git clone...

poc-cve-2025-29927

Next.js Middleware Bypass CVE-2025-29927 Proof of Concept This repository contains a proof of concept POC for CVE-2025-29927 , a critical vulnerability in Next.js that allows attackers to bypass authorization checks implemented in middleware. 📋 Table of Contents 1. Running the POC Application 2...

CVE-2025-29927-PoC

This repository does not have a README...

NextSecureScan

NextSecureScan - Next.js-CVE-2025-29927 Middleware Vulnerability Scanner NextSecureScan is a comprehensive security scanner specifically designed to identify middleware-related authorization bypass vulnerabilities CVE-2025-29927 in Next.js applications. This scanner leverages explicit header...

CVE-2025-29927-Proof-of-Concept

Walkthrough Step 1 5 min Hint Which network services are exposed by the target? — — — Solution root@kitploit: kali@kali:$ nmap kali@kali:$ nmap -sC -sV -p Step 2 5 min Hint 1 The landing page only reveals a login page, but web servers often expose additional paths. Hint 2 Try using a directory...

CVE-2025-29927-NextJS

📦 Next.js CVE-2025-29927 - Proof of Concept This repository contains a minimal Proof of Concept PoC for exploiting CVE-2025-29927, a high-severity vulnerability affecting specific versions of Next.js that allows unauthorized access to internal application files through crafted URLs. ⚠️ Disclaimer...

ghost-route

👻 Ghost Route A Python script to check Next.js sites for corrupt middleware vulnerability CVE-2025-29927. The corrupt middleware vulnerability allows an attacker to bypass authentication and access protected routes by send a custom header x-middleware-subrequest. Next JS versions affected: 11.1.4...

Next.JS-CVE-2025-29927

Next.js Vulnerability Scanner CVE-2025-29927 A security tool to detect and verify Next.js applications vulnerable to CVE-2025-29927 Authentication Bypass. Features 🎯 Accurate Next.js detection with multiple verification methods 🔍 Precise version comparison to identify vulnerable instances 🛡️...

Nextjs-middleware-vulnerable-appdemo-CVE-2025-29927

Vulnerable Next.js App for Pentesting Practice This is a Next.js application intentionally designed to be vulnerable to CVE-2025-29927: The Next.js Middleware Authorization Bypass Vulnerability. ⚠️ Disclaimer This application is for educational and ethical hacking purposes only. Do not deploy it t...

exploit-CVE-2025-29927

Exploit for CVE-2025-29927 Next.js - Authorization Bypass Like this repo? Give us a ⭐! For educational and authorized security research purposes only. Exploit Author @UNICORDev by @NicPWNs and @Dev-Yeoj Vulnerability Description Next.js is a React framework for building full-stack web application...

nextjs-cve-2025-29927-poc

Next.js POC for CVE-2025-29927 Authorization Bypass in Next.js Middleware · CVE-2025-29927 · GitHub Advisory Database Next.js and the corrupt middleware: the authorizing artifact - zherowebsecurity- What is this? This vulnerability allow to bypass middleware logics. src/middleware.ts:...

next-js-auth-bypass

Hello World - Next.js 12.2 A simple proof of concept Next.js 12.2 application. 🚀 Quick Start 1. Install Dependencies root@kitploit: npm install 2. Run the Development Server root@kitploit: npm run dev The application will be available at http://localhost:3000 🛠️ Available Scripts npm run dev -...

CVE-2025-29927-NextJs-Middleware-Simulation

CVE-2025-29927: Next.js Middleware Authorization Bypass Simulation This repository demonstrates the exploitation of CVE-2025-29927 , a critical vulnerability in Next.js that allows attackers to bypass middleware-based authorization checks. The flaw stems from improper handling of the internal...

CVE-2025-29927

CVE-2025-29927 in Next.js 15.2.0 How to Run: root@kitploit: git clone https://github.com/nyctophile0969/CVE-2025-29927 cd CVE-2025-29927 npm install [email protected] npm run dev...

CVE-2025-29927-PoC

CVE-2025-29927: Next.js Middleware Bypass Vulnerability PoC This repository demonstrates the CVE-2025-29927 vulnerability in Next.js, where the internal header x-middleware-subrequest can be used to bypass middleware checks like authentication. Affected Versions Next.js 15.x 15.2.3 Next.js 14.x...

nextjs-middleware-bypass-demo

CVE-2025-29927 Demo Original writeup: https://zhero-web-sec.github.io/research-and-things/nextjs-and-the-corrupt-middleware Setup First, run the development server: root@kitploit: npm i npm run dev Open http://localhost:3000 with your browser to see the result. Trying out the bypass curl -I...

Automated-Next.js-Security-Scanner-for-CVE-2025-29927

Next.js CVE-2025-29927 Vulnerability Scanner Overview This script scans a list of URLs to detect if they are using Next.js and determines whether they are vulnerable to CVE-2025-29927. It optionally attempts exploitation using a wordlist. Features Identifies websites using Next.js. Checks Next.js...

CVE-2025-29927

This repository does not have a README...