react2shell-detector

React2Shell Detector A Chrome extension for detecting React2Shell vulnerabilities CVE-2025-55182 & CVE-2025-66478 in web applications. Overview React2Shell Detector is a browser extension that helps security researchers and web developers identify potential React2Shell vulnerabilities in web...

ore_react2shell_scanner

Rapticore Security Research - React2Shell Scanner A security assessment toolkit developed by the Rapticore Security Research Team for detecting React Server Components RSC vulnerabilities including CVE-2025-55182 React2Shell - a critical Remote Code Execution vulnerability. Overview This toolkit...

react2shell-exploit

react2shell-exploit for BURPSUITE React2Shell: CVE-2025-55182...

react2shell-vulnlab

React2Shell Tribune — VULNERABLE WEB APPLICATION LAB A modern Next.js web app themed as a news / blog portal for CVE-2025-55182 React and CVE-2025-66478 Next.js to learn, detect, and safely exercise React2Shell. Runs unpatched React 19.0.0 and Next.js 15.0.3. Overview Fictional news portal built...

CVE-2025-55182-Waf

Next.js/React RSC Scanner & Exploit - RCE This tool is designed for security researchers and penetration testers to detect and exploit the CVE-2025-55182 vulnerability in Next.js/React RSC applications. It provides multiple scanning modes, exploitation features, and WAF bypass techniques...

react2shellVulnApp

React2Shell Vulnerable Banking Application Lab Deliberately vulnerable banking app for CVE-2025-55182 React and CVE-2025-66478 Next.js to learn, detect, and safely exercise React2Shell. Runs unpatched React 19.0.0 and Next.js 15.0.3. Overview Fictional SecureBank built with Next.js App Router and...

react2shellexploitvisualized

React2Shell CVE-2025-55182 Visualization An interactive educational visualization explaining the React2Shell vulnerability - a critical CVSS 10.0 remote code execution flaw in React Server Components. What This Is A 5-step narrated walkthrough that explains: 1. Traditional SSR - How server-side...

ReactOOPS-WriteUp

ReactOOPS - HTB Web Challenge Writeup Author : TheStingR - Team ISP1337Hackers Challenge : ReactOOPS Web Platform : Hack The Box Difficulty : Very Easy - RETIRED Date Solved : December 13, 2025 Table of Contents...

vulnerable-next-js-poc

CVE-2025-55182 React2Shell - Proof of Concept ⚠️ SECURITY RESEARCH ONLY This repository contains a proof of concept for CVE-2025-55182 , a critical remote code execution vulnerability in React Server Components. This is for authorized security testing and research purposes only. Vulnerability...

CVE-2025-55182-zoomeye

Zoomeye Next.js RCE Scanner Author: im-ezboy Scanner for Next.js RCE CVE-2025-55182 using Zoomeye search. Finds targets via Zoomeye queries and tests them with the supplied exploit payload. Features Two focused Zoomeye dorks by default: http.header="Vary: RSC, Next-Router-State-Tree"...

react2shellpoc

This repository contains a proof‑of‑concept demonstrating how a specific class of React Server Component vulnerabilities behaves inside a controlled, legal training environment. Manual root@kitploit: ┌──kali㉿kali-/Documents/tools/2025-55182 └─$ python exploit.py -h /\ /\ /\ /\ /\ /\ ||...

CVE-2025-55182

React2Shell: CVE-2025-55182 Walkthrough Author: Kavienan J Vulnerability discovered by: lachlan2k, who responsibly disclosed it to the React team. For updates on this vulnerability, visit: react2shell.com Table of Contents 1. Introduction 2. Background 3. Understanding ReactFlightReplyServer.js 4...

CVE-2025-55182-Next.js-RCE

🔍 Next.js Security Testing Tool Professional security assessment utility for Next.js applications ⚠️ Disclaimer This tool is intended for authorized security testing and research purposes only. ✅ Use only on systems you own or have explicit permission to test ✅ For bug bounty programs with proper...

CVE-2025-55182

CVE-2025-55182 React2shell exploit CVE-2025-55182+CVE-2025-66478...

Nextjs_Exploit_Tool

Next.js RSC RCE Exploit Tool CVE-2025-55182 Project Introduction CVE-2025-55182 is a high-severity vulnerability in Next.js's Server Component RSC processing chain. An attacker can craft special multipart/form-data requests and forged RSC response chunks to induce the server to execute arbitrary...

Next.js-RSC-RCE-Scanner-Burp-Suite-Extension

Next.js RSC RCE Scanner Burp Suite Extension A high-fidelity Burp Suite extension to detect the Next.js / React Server Components RSC Remote Code Execution vulnerability CVE-2025-55182 & CVE-2025-66478. This extension implements the detection logic discovered by the Searchlight Cyber Security...

Torito-R2S

Torito React2Shell Scanner & Exploit Tool CVE-2025-55182 / 66478 Detection-first scanner for Next.js RSC targets with optional PoC confirm and exploit/shell modes. Use only on systems you are authorized to test. Requirements Python 3.9+ pip install -r requirements.txt Subfinder binary in PATH for...

react2shell-exploit

🐺 React2Shell-Exploit-Kensei CVE-2025-55182 - Next.js RCE Remote Code Execution Exploit framework + vulnerable lab + Burp Suite & Nuclei validation. Complete exploitation framework and vulnerable lab environment for security research and penetration testing. root@kitploit:...

check-react-rce-cve-2025-55182

React RCE Vulnerability Scanner CVE-2025-55182 A comprehensive security scanning tool to detect CVE-2025-55182 and CVE-2025-66478 vulnerabilities in React and Next.js projects using React Server Components RSC. 🚨 Overview This tool scans your project for vulnerable versions of React, Next.js, and...

RSC-Detect-CVE-2025-55182

🔎 RSC-Detect - React Server Components Detector Lightweight detection utility for identifying React Server Components and Next.js applications 🎯 Purpose RSC-Detect is a simple, focused tool designed to identify websites using React Server Components RSC and Next.js framework. It's useful for:...