react2shell

React2Shell Herramienta CLI + plantillas de Nuclei para detectar dos vulnerabilidades críticas de RCE en React Server Components y Next.js Server Actions. El escáner fue reescrito basándose en la vulnerabilidad react2shell divulgada. Resumen de vulnerabilidades CVE-2025-55182 – RCE por...

React2Shell

⚛️ React2Shell CVE-2025-55182 Advanced Exploitation Toolkit for Next.js Server Actions CVE-2025-55182. React2Shell is a powerful, interactive shell wrapper designed to exploit the React2Shell vulnerability. It goes beyond simple RCE by providing command history, file transfer capabilities, and...

RscScan-cve-2025-55182

RscScan - Next.js Server Actions 漏洞扫描器 专业的跨平台 Next.js Server Actions RCE 漏洞扫描工具 功能 • 安装 • 使用 • 视频演示 • 截图 ⚠️ 法律免责声明 本工具仅用于教育和授权的安全测试目的。 ❌ 请勿 在您不拥有或未获得明确书面许可的系统上使用此工具 ❌ 请勿 将此工具用于恶意目的 ✅ 请 仅在授权的渗透测试任务中使用此工具 ✅ 请 仅将此工具用于教育研究和学习 未经授权访问计算机系统是违法的。 滥用此工具可能会根据《计算机欺诈和滥用法案》（CFAA）及全球类似法律导致刑事起诉。...

CVE-2025-55182-poc

CVE-2025-55182-poc Une preuve de concept PoC pour CVE-2025-55182 , ciblant une vulnérabilité d'exécution de code à distance RCE non authentifiée dans les Server Actions de Next.js. Cette preuve de concept exploite la pollution de prototype lors de la désérialisation de charges utiles multipart de...

CVE-2025-55182-Exploit-PoC-Scanner

CVE-2025-55182 - Exploit RCE de React Server Components v2.0 Una herramienta integral de investigación de seguridad para probar las vulnerabilidades CVE-2025-55182 y CVE-2025-66478 en React Server Components RSC y Next.js Server Actions. Resumen de la vulnerabilidad...

CVE-2025-55182-Auto-Scanner

CVE-2025-55182 Scanner es una herramienta de alto rendimiento para detectar endpoints vulnerables de Next.js Server Action. Utiliza escaneo multihilo, detección basada en confianza y múltiples indicadores de respuesta para identificar posibles vulnerabilidades de ejecución remota de código RCE...

react2shell_analyzer

React2Shell Analyzer 一款强大的HTTP代理分析器，用于检查浏览器/PoC与Next.js服务器之间的Next.js Server Actions流量。 GitHub 仓库 https://github.com/Benrich127N/react2shellanalyzer.git 功能特性 🔍 请求头检查 ：记录所有请求和响应头 📦 多部分分析 ：解析并显示多部分表单段 ⚠️ 模式检测 ：识别可疑模式： React Flight 令牌 $@, $K: 原型污染尝试 proto, constructor.prototype Server Action 引用 🎨 彩色输出...

Cerberus-React2Shell-Scanner-Exploit

Cerberus React2Shell - Framework de Explotación Armado root@kitploit: ██████╗ ███████╗██████╗ ██████╗ ███████╗██████╗ ██╗ ██╗ ██╔════╝ ██╔════╝██╔══██╗██╔══██╗██╔════╝██╔══██╗██║ ██║ ██║ █████╗ ██████╔╝██████╔╝█████╗ ██████╔╝██║ ██║ ██║ ██╔══╝ ██╔══██╗██╔══██╗██╔══╝ ██╔══██╗██║ ██║ ╚██████╗...

react-cve-2025-55182

CVE-2025-55182: React/Next.js Test Project Status: Experimental / Proof of Concept This repository serves as a controlled research environment and Proof-of-Concept PoC framework for analyzing CVE-2025-55182. It demonstrates a Prototype Pollution vulnerability within the context of Next.js Server...

react2shell-poc

React2Shell PoC CVE-2025-55182 Skrip Proof of Concept PoC...

GHSA-955P-X3MX-JCVP Next.js: Unauthenticated disclosure of internal Server Function endpoints

Impact In Next.js applications using App Router, Server Actions use server or use cache endpoints can be disclosed bypassing any authentication on the pages where these endpoints are usually used. Server Action IDs can be disclosed to unauthenticated users via publicly served client artifacts for...

Exploit for Deserialization of Untrusted Data in Facebook React

React2Shell Scanner A comprehensive vulnera...

GHSA-7M27-7GHC-44W9 Next.js Allows a Denial of Service (DoS) with Server Actions

Impact A Denial of Service DoS attack allows attackers to construct requests that leaves requests to Server Actions hanging until the hosting provider cancels the function execution. Note: Next.js server is idle during that time and only keeps the connection open. CPU and memory footprint are low...