355 matches found
WEB-CLI_RCE_React2Shell
REACT2SHELL π― Quick Overview What is this? This tool is a simple Proof-of-Concept PoC exploit for CVE-2025-55182. This is a serious flaw Prototype Pollution found in Next.js applications that use React Server Components. If a target server is vulnerable, this script lets you run operating system...
CVE-2025-55182-exploit
CVE-2025-55182-exploit TL;DR This is for legal penetration testing purposes only. Do not engage in any illegal activities. How to use python3 exploit.py Demo Video...
CVE-2025-55182-burpscanner
CVE-2025-55182-burpscanner A Burp Suite passive scanning plugin for detecting CVE-2025-55182, using JDK 17 Plugin Usage: Default scanning of history / right-click active scan. When a vulnerability is detected, it automatically goes to the CVE-2025-55182 module. Deduplication Deduplication Mechani...
react2shell-toolkit
Next.js RCE Assessment Toolkit A Python toolkit for validating and investigating CVE-2025-55182, also known as React2Shell , in authorized environments. The vulnerability affects React Server Components and can expose applications built with frameworks such as Next.js to unauthenticated remote co...
React2shell-Research
React2shell-Research Analyze and reproduce CVE-2025-55182...
react2shell-scanner
react2shell-scanner A command-line tool for detecting CVE-2025-55182 and CVE-2025-66478 in Next.js applications using React Server Components. For technical details on the vulnerability and detection methodology, see our blog post:...
vulnerable-next-js-poc
CVE-2025-55182 React2Shell - Proof of Concept β οΈ SECURITY RESEARCH ONLY This repository contains a proof of concept for CVE-2025-55182 , a critical remote code execution vulnerability in React Server Components. This is for authorized security testing and research purposes only. Vulnerability...
react2shellVulnApp
React2Shell Vulnerable Banking Application Lab Deliberately vulnerable banking app for CVE-2025-55182 React and CVE-2025-66478 Next.js to learn, detect, and safely exercise React2Shell. Runs unpatched React 19.0.0 and Next.js 15.0.3. Overview Fictional SecureBank built with Next.js App Router and...
Quickcheck-CVE-2025-55182-React-and-CVE-2025-66478-Next.js
GitHub CVE Scanner π Quickly scan GitHub repositories for critical React and Next.js RSC vulnerabilities Overview A browser-based scanner that checks all GitHub repositories for known security vulnerabilities in React Server Components:...
CVE-2025-55182-zoomeye
Zoomeye Next.js RCE Scanner Author: im-ezboy Scanner for Next.js RCE CVE-2025-55182 using Zoomeye search. Finds targets via Zoomeye queries and tests them with the supplied exploit payload. Features Two focused Zoomeye dorks by default: http.header="Vary: RSC, Next-Router-State-Tree"...
CVE-2025-55182
React2Shell: CVE-2025-55182 Walkthrough Author: Kavienan J Vulnerability discovered by: lachlan2k, who responsibly disclosed it to the React team. For updates on this vulnerability, visit: react2shell.com Table of Contents 1. Introduction 2. Background 3. Understanding ReactFlightReplyServer.js 4...
react2shellpoc
This repository contains a proofβofβconcept demonstrating how a specific class of React Server Component vulnerabilities behaves inside a controlled, legal training environment. Manual root@kitploit: βββkaliγΏkali-/Documents/tools/2025-55182 ββ$ python exploit.py -h /\ /\ /\ /\ /\ /\ ||...
Next.js-RCE-Scanner-BurpSuite-Extension-
CVE-2025-55182 Next.js RCE Burp Extension Plugin Features Passive Scanning : Automatically detect all Next.js sites passing through Burp Memory Shell Injection v2.2 New! Right-click on the target request, select Inject AntSword Memory Shell AntSword, supports both GET and POST types of memory...
NextRce
NextRce - Next.js RSC Exploit Tool CVE-2025-55182 Advanced Vulnerability Scanner & Exploiter for Next.js App Router Developed byMitsec π₯ New Feature: WAF Bypass Mode UTF-16LE Standard payloads containing keywords like childprocess or execSync are often blocked by Web Application Firewalls WAFs...
react2shell-exploit
πΊ React2Shell-Exploit-Kensei CVE-2025-55182 - Next.js RCE Remote Code Execution Exploit framework + vulnerable lab + Burp Suite & Nuclei validation. Complete exploitation framework and vulnerable lab environment for security research and penetration testing. root@kitploit:...
Nextjs_Exploit_Tool
Next.js RSC RCE Exploit Tool CVE-2025-55182 Project Introduction CVE-2025-55182 is a high-severity vulnerability in Next.js's Server Component RSC processing chain. An attacker can craft special multipart/form-data requests and forged RSC response chunks to induce the server to execute arbitrary...
react2shell
React2Shell - CVE-2025-55182 Exploit PoC A proof-of-concept exploit for CVE-2025-55182, a critical Remote Code Execution vulnerability in Next.js applications using React Server Components. β οΈ DISCLAIMER THIS TOOL IS FOR EDUCATIONAL AND AUTHORIZED SECURITY TESTING ONLY. β DO NOT use against system...
Next.js-RSC-RCE-Scanner-Burp-Suite-Extension
Next.js RSC RCE Scanner Burp Suite Extension A high-fidelity Burp Suite extension to detect the Next.js / React Server Components RSC Remote Code Execution vulnerability CVE-2025-55182 & CVE-2025-66478. This extension implements the detection logic discovered by the Searchlight Cyber Security...
React2Shell-Toolbox
React2Shell Toolbox A security testing toolkit built with Electron + Vue 3, focused on React Server Actions vulnerability detection and exploitation. δΈζζζ‘£ | English Overview React2Shell Toolbox is a security testing tool designed for Next.js React Server Actions prototype pollution vulnerability...
CVE-2025-55182-research
π CVE-2025-55182-research - Simple Steps to Secure Your System π₯ Download Now Download CVE-2025-55182-research π Description CVE-2025-55182-research helps you understand and mitigate the vulnerabilities associated with CVE-2025-55182. This tool provides a proof of concept POC that shows how to...