355 matches found
RSC-Detect-CVE-2025-55182
š RSC-Detect - React Server Components Detector Lightweight detection utility for identifying React Server Components and Next.js applications šÆ Purpose RSC-Detect is a simple, focused tool designed to identify websites using React Server Components RSC and Next.js framework. It's useful for:...
Torito-R2S
Torito React2Shell Scanner & Exploit Tool CVE-2025-55182 / 66478 Detection-first scanner for Next.js RSC targets with optional PoC confirm and exploit/shell modes. Use only on systems you are authorized to test. Requirements Python 3.9+ pip install -r requirements.txt Subfinder binary in PATH for...
CVE-2025-55182-burpscanner
CVE-2025-55182-burpscanner A Burp Suite passive scanning plugin for detecting CVE-2025-55182, using JDK 17 Plugin Usage: Default scanning of history / right-click active scan. When a vulnerability is detected, it automatically goes to the CVE-2025-55182 module. Deduplication Deduplication Mechani...
react2shell-detector
React2Shell Detector A Chrome extension for detecting React2Shell vulnerabilities CVE-2025-55182 & CVE-2025-66478 in web applications. Overview React2Shell Detector is a browser extension that helps security researchers and web developers identify potential React2Shell vulnerabilities in web...
check-react-rce-cve-2025-55182
React RCE Vulnerability Scanner CVE-2025-55182 A comprehensive security scanning tool to detect CVE-2025-55182 and CVE-2025-66478 vulnerabilities in React and Next.js projects using React Server Components RSC. šØ Overview This tool scans your project for vulnerable versions of React, Next.js, and...
CVE-2025-55182
CVE-2025-55182 A command-line tool for detecting CVE-2025-55182 and CVE-2025-66478 in Next.js applications using React Server Components. š Installation root@kitploit: wget -q -O /usr/bin/CVE-2025-55182 https://raw.githubusercontent.com/rix4uni/CVE-2025-55182/refs/heads/main/CVE-2025-55182 && chm...
RSC-Detect-CVE-2025-55182
š RSC-Detect - React Server Components Detector Lightweight detection utility for identifying React Server Components and Next.js applications šÆ Purpose RSC-Detect is a simple, focused tool designed to identify websites using React Server Components RSC and Next.js framework. It's useful for:...
rsc_detect_CVE-2025-55182
what's it For CVE-2025-55182 and CVE-2025-66478 Security Response, it is not a POC, just to find whether a website uses React Server Components RSC or Next.js. Feature definition for detecting whether a website uses React Server Components RSC or Next.js ēØäŗę£ęµē½ē«ęÆå¦ä½æēØäŗ React Server Components RSC ę...
CVE-2025-55182-advanced-scanner-
CVE-2025-55182 Scanner Simple command-line tool for detecting and exploiting CVE-2025-55182 React Server Components RCE in Next.js applications. Installation root@kitploit: chmod +x scanner.sh Usage root@kitploit: Scan with default command id ./scanner.sh -d example.com Execute custom command...
CVE-2025-55182-exploit
CVE-2025-55182-exploit TL;DR This is for legal penetration testing purposes only. Do not engage in any illegal activities. How to use python3 exploit.py Demo Video...
react2shell-scanner
react2shell-scanner A command-line tool for detecting CVE-2025-55182 and CVE-2025-66478 in Next.js applications using React Server Components. For technical details on the vulnerability and detection methodology, see our blog post:...
react2shellVulnApp
React2Shell Vulnerable Banking Application Lab Deliberately vulnerable banking app for CVE-2025-55182 React and CVE-2025-66478 Next.js to learn, detect, and safely exercise React2Shell. Runs unpatched React 19.0.0 and Next.js 15.0.3. Overview Fictional SecureBank built with Next.js App Router and...
ReactOOPS-WriteUp
ReactOOPS - HTB Web Challenge Writeup Author : TheStingR - Team ISP1337Hackers Challenge : ReactOOPS Web Platform : Hack The Box Difficulty : Very Easy - RETIRED Date Solved : December 13, 2025 Table of Contents 1. Executive Summary 2. Challenge Description 3. Vulnerability Analysis 4...
Next.js-Exploit-Tool
Next.js-Exploit-Tool Next.js-Exploit-Tool å¾å½¢å综åå©ēØå·„å ·ć ē®ä» äøę¬¾é对 CVE-2025-55182 ēē¬ē«å®å ØčÆä¼°å·„å ·ļ¼åŗäŗ Go å¼åļ¼ęä¾å¾å½¢åēé¢ļ¼GUIļ¼ļ¼ēØäŗåæ«éå®ęę¼ę“ę£ęµäøéŖčÆć ę“ę°ę„åæ v1.3.0 ę°å¢ Godzilla å„ęÆę å å马ęÆę å®ē°äŗåŗäŗ Node.js ē Godzilla å åé©¬ę³Øå „åč½ļ¼...
CVE-2025-55182-zoomeye
Zoomeye Next.js RCE Scanner Author: im-ezboy Scanner for Next.js RCE CVE-2025-55182 using Zoomeye search. Finds targets via Zoomeye queries and tests them with the supplied exploit payload. Features Two focused Zoomeye dorks by default: http.header="Vary: RSC, Next-Router-State-Tree"...
Next.js-RCE-Scanner-BurpSuite-Extension-
CVE-2025-55182 Next.js RCE Burp Extension Plugin Features Passive Scanning : Automatically detect all Next.js sites passing through Burp Memory Shell Injection v2.2 New! Right-click on the target request, select Inject AntSword Memory Shell AntSword, supports both GET and POST types of memory...
React2Shell-CVE-2025-55182-original-poc
Original PoCs for CVE-2025-55182 As public PoCs are circulating and Google's Scanner uses a variation of my original submitted PoC, it's finally a responsible time to share my original PoCs for React2Shell. This repository contains 3 PoCs: 00-very-first-rce-poc - the very first PoC I managed to...
vulnerable-next-js-poc
CVE-2025-55182 React2Shell - Proof of Concept ā ļø SECURITY RESEARCH ONLY This repository contains a proof of concept for CVE-2025-55182 , a critical remote code execution vulnerability in React Server Components. This is for authorized security testing and research purposes only. Vulnerability...
CVE-2025-55182
React2Shell: CVE-2025-55182 Walkthrough Author: Kavienan J Vulnerability discovered by: lachlan2k, who responsibly disclosed it to the React team. For updates on this vulnerability, visit: react2shell.com Table of Contents 1. Introduction 2. Background 3. Understanding ReactFlightReplyServer.js 4...