nextjs-security-scanner

日本語版は README.ja.md を参照してください。 nextjs-security-scanner Bash script to detect CVE-2025-55182 React2Shell and credential exposure in Next.js projects. Zero dependencies. CVE-2025-55182: React2Shell CVSS: 10.0 CRITICAL | CWE-502: Deserialization of Untrusted Data | SNORT SID: 65554 Unauthenticated...

REACT-CVE-2025-55182-Lab

React-2025 CTF Lab: CVE-2025-55182 Overview This repository contains a Capture The Flag CTF lab designed strictly for educational use and security research. The environment features a vulnerable Next.js 16 e-commerce mock storefront "Quantum Supplies" specifically built to demonstrate and practic...

ReactOOPS-WriteUp

ReactOOPS - HTB Web Challenge Writeup Author : TheStingR - Team ISP1337Hackers Challenge : ReactOOPS Web Platform : Hack The Box Difficulty : Very Easy - RETIRED Date Solved : December 13, 2025 Table of Contents...

react2shellVulnApp

React2Shell Vulnerable Banking Application Lab Deliberately vulnerable banking app for CVE-2025-55182 React and CVE-2025-66478 Next.js to learn, detect, and safely exercise React2Shell. Runs unpatched React 19.0.0 and Next.js 15.0.3. Overview Fictional SecureBank built with Next.js App Router and...

react2shell-scanner

react2shell-scanner A command-line tool for detecting CVE-2025-55182 and CVE-2025-66478 in Next.js applications using React Server Components. For technical details on the vulnerability and detection methodology, see our blog post:...

RSC-Detect-CVE-2025-55182

🔎 RSC-Detect - React Server Components Detector Lightweight detection utility for identifying React Server Components and Next.js applications 🎯 Purpose RSC-Detect is a simple, focused tool designed to identify websites using React Server Components RSC and Next.js framework. It's useful for:...

CVE-2025-55182-burpscanner

CVE-2025-55182-burpscanner A Burp Suite passive scanning plugin for detecting CVE-2025-55182, using JDK 17 Plugin Usage: Default scanning of history / right-click active scan. When a vulnerability is detected, it automatically goes to the CVE-2025-55182 module. Deduplication Deduplication Mechani...

react2shell_detector

React2Shell Detector Heuristic Scanner for React Server Components RSC Vulnerabilities — including React2Shell-style behavior CVE-2025-55182 Overview react2shelldetector.py is a safe, non-invasive security scanner designed to detect systems potentially exposed to React Server Components RSC...

React2Shell-CVE-2025-55182

CVE-2025-55182 - React2Shell root@kitploit: | | | / \ / | | / || | | | | | | | | | | | / | | | | \ | || | | | | | | | | | / \ | | | / / | | || || | || \// \| || ||/|| ||||| CVE-2025-55182 Remote Code Execution Scanner for React Server Components RSC Credits...

CVE-2025-55182-PoC

React2Shell CVE-2025-55182 PoC Usage root@kitploit: Interactive shell ./react2shell -u http://target:3000 Single command ./react2shell -u http://target:3000 -c "id" WAF bypass 128KB junk data ./react2shell -u http://target:3000 -waf 128 Build root@kitploit: go build -o react2shell . Options...

CVE-2025-55182-CVE-2025-66478

CVE-2025-55182-CVE-2025-66478 scanner testing...

CVE-2025-55182

This repository does not have a README...

react2shell-scanner

React2Shell Vulnerability Scanner A safe, non-invasive scanner for detecting React Server Components RSC and Next.js Remote Code Execution vulnerabilities CVE-2025-55182 & CVE-2025-66478. Overview This scanner helps organizations identify whether their web services are vulnerable to the React2She...

CVE-2025-55182-LAB

This repository does not have a README...

CVE-2025-55182

CVE-2025-55182 Scanner root@kitploit: https://github.com/assetnote/react2shell-scanner...

check-react-rce-cve-2025-55182

React RCE Vulnerability Scanner CVE-2025-55182 A comprehensive security scanning tool to detect CVE-2025-55182 and CVE-2025-66478 vulnerabilities in React and Next.js projects using React Server Components RSC. 🚨 Overview This tool scans your project for vulnerable versions of React, Next.js, and...

CVE-2025-55182-poc-json

CVE-2025-55182-poc-json CVE-2025-55182-poc-json en0f...

PoC-react2shell-CVE-2025-55182

PoC-react2shell-CVE-2025-55182 PoC-react2shell-CVE-2025-55182...

react2shell

React2Shell Vulnerability Checker CVE-2025-55182 Detection Tool for Ubuntu Linux and Windows 10/11 Description This tool detects potential React2Shell vulnerabilities CVE-2025-55182 in React projects by checking: package.json and lock files for vulnerable packages nodemodules directory for affect...

React2shell-ultimate-scanner

CVE-2025-55182 Advanced Scanner 🚀 A professional and automated security scanner to detect and validate CVE-2025-55182 , a critical vulnerability affecting Next.js React Server Components. Designed for security researchers, penetration testers, and bug bounty hunters who want fast, clean, and...