CVE-2025-55184-POC-Expolit

🔥 CVE-2025-55184 Advanced Exploitation Tool Professional React Server Components DoS Exploitation Framework "KEEP LEARNING KEEP HACKING" - CyberTechAjju 🚀 Quick Start • 📖 Documentation • 💻 Features • ⚠️ Disclaimer 🎯 About CVE-2025-55184 CVE-2025-55184 is a high-severity Denial of Service DoS...

nextjs-cve-2026-23870-checker

@emstack/nextjs-cve-2026-23870-checker CLI checker and fixer for all 13 vulnerabilities in the Next.js May 2026 Security Release, including CVE-2026-23870 DoS in React Server Components. Quickstart Interactive mode recommended npx @emstack/nextjs-cve-2026-23870-checker Check a project npx...

CVE-2025-55182

CVE-2025-55182 - React2Shell PoC A proof of concept exploit for CVE-2025-55182, a critical CVSS 10.0 unauthenticated remote code execution vulnerability in React Server Components. Credit Discovered byLachlan Davidson - Disclosed to Meta/React team on November 29, 2025. Vulnerability Overview The...

react2shell-rce-autobot

🔍 React2Shell Dork Scanner 🚨 About the Vulnerability React2Shell is a critical Remote Code Execution RCE vulnerability that affects: Target| Versi Vulnerable ---|--- ⚛️ react-server-dom-webpack| 19.0.0, 19.1.0, 19.1.1, 19.2.0 ⚛️ react-server-dom-turbopack| 19.0.0, 19.1.0, 19.1.1, 19.2.0 ⚛️...

react2shell-CVE-2025-55182-poc

CVE-2025-55182 React2Shell PoC with WAF Bypass A clean, reliable Python proof-of-concept exploit for CVE-2025-55182 aka React2Shell, a critical remote code execution vulnerability in React Server Components used by Next.js App Router and similar frameworks. This PoC includes dynamic WAF bypass...

CVE-2025-55182

CVE-2025-55182 Scanner This repository contains a scanner tool for CVE-2025-55182 RCE and CVE-2025-55183 Source Code Disclosure in Next.js React Server Components RSC. ⚠️ Disclaimer This tool is for educational and authorized testing purposes only. Do not use this tool on systems you do not own or...

Next.js-RSC-RCE-Scanner-Burp-Suite-Extension

Next.js RSC RCE Scanner Burp Suite Extension A high-fidelity Burp Suite extension to detect the Next.js / React Server Components RSC Remote Code Execution vulnerability CVE-2025-55182 & CVE-2025-66478. This extension implements the detection logic discovered by the Searchlight Cyber Security...

react2shell-ultimate

React2Shell Ultimate Scanner v2.0 Professional Next.js RSC RCE Vulnerability Scanner for CVE-2025-66478 🎯 Overview React2Shell Ultimate is a comprehensive vulnerability scanner for CVE-2025-66478 - a critical Remote Code Execution RCE vulnerability affecting Next.js applications using React Serve...

CVE-2025-55182

CVE-2025-55182: React Server Components Unsafe Deserialization Vulnerability Overview CVE-2025-55182 also known as React2Shell is a critical unsafe deserialization vulnerability discovered in the React Flight Protocol, affecting the payload of React Server Components RSC. This vulnerability resid...

CVE-2025-55183-poc

CVE-2025-55183-poc – Next.js React Server Components Server Function Source Code Disclosure This repository contains detection tooling for a source code disclosure vulnerability in Next.js React Server Components RSC / Server Actions , tracked as CVE-2025-55183. In vulnerable applications, a...

React2Shell

React2Shell CVE-2025-55182 Scanner & Exploit Toolkit for Next.js/React Server Components RCE. Repository Structure React2Shell/ ├── browser-extension/ Chrome extension for browser-based detection │ ├── manifest.json │ ├── content.js │ ├── popup.html/js │ └── background.js ├── cli/ Command-line...

CVE-2025-55182

CVE-2025-55182 / CVE-2025-66478 — Next.js Middleware / RSC Bypass Analysis The author assumes no liability for misuse or damage caused by this research Provided strictly for educational and defensive purposes Description This repository contains a small laboratory and Proof-of-Concept analysis fo...

react2shellpoc

This repository contains a proof‑of‑concept demonstrating how a specific class of React Server Component vulnerabilities behaves inside a controlled, legal training environment. Manual ┌──kali㉿kali-/Documents/tools/2025-55182 └─$ python exploit.py -h /\ /\ /\ /\ /\ /\ || CVE-2025-55182 React Serv...

react2shell-burp

React2Shell RCE Scanner and Validator CVE-2025-55182 Creator: j0lt Collaborator: https://github.com/shashank18 A Burp Suite extension that detects and validates the React2Shell vulnerability CVE-2025-55182 — a pre-authentication remote code execution flaw in React Server Components. The extension...

rschunter

RSC Hunter A powerful, multi-threaded scanner and exploit tool for React Server Component RSC vulnerabilities. This tool is designed to identify and exploit RCE vulnerabilities in RSC implementations, supporting various bypass techniques and strategies. Note : Due to the enormous complexity of...

CVE-2025-55182-research

CVE-2025-55182 - React Server Components RCE NOTE: Written by AI/Claude https://github.com/ejpir/CVE-2025-55182-bypass TL;DR CVE-2025-55182 is a critical RCE vulnerability in React's Flight Protocol. The attack chains path traversal + fake chunk injection + $B handler abuse to execute...

CVE-2025-55182

CVE-2025-55182 This vulnerability allows RCE in React Server Functions, e.g. as offered by Next.js through insecure prototype references. I'm not an expert in React or Next.js, so take all the information here with a grain of salt. Background React offers Server Functions^1, which can be seen as...

CVE-2025-55182-Scanner

CVE-2025-55182 - React Server Components RCE Scanner A comprehensive security testing toolkit for CVE-2025-55182, a critical pre-authentication remote code execution vulnerability in React Server Components. 🎓 NEW: Complete Educational Guide Available! Want to understand this vulnerability 100%? ...

CVE-2025-55182-golang-PoC

CVE-2025-55182 React Server Components RCE - Go PoC ⚠️ FOR AUTHORIZED SECURITY TESTING ONLY ⚠️ Description CVE-2025-55182 also known as CVE-2025-66478 is a critical Remote Code Execution vulnerability in React Server Components Flight protocol. This tool is a Go implementation of the PoC for...

vulnerable-next-js-poc

CVE-2025-55182 React2Shell - Proof of Concept ⚠️ SECURITY RESEARCH ONLY This repository contains a proof of concept for CVE-2025-55182 , a critical remote code execution vulnerability in React Server Components. This is for authorized security testing and research purposes only. Vulnerability...