react2shellVulnApp

React2Shell Vulnerable Banking Application Lab Deliberately vulnerable banking app for CVE-2025-55182 React and CVE-2025-66478 Next.js to learn, detect, and safely exercise React2Shell. Runs unpatched React 19.0.0 and Next.js 15.0.3. Overview Fictional SecureBank built with Next.js App Router and...

rsc_detect_CVE-2025-55182

what's it For CVE-2025-55182 and CVE-2025-66478 Security Response, it is not a POC, just to find whether a website uses React Server Components RSC or Next.js. Feature definition for detecting whether a website uses React Server Components RSC or Next.js 用于检测网站是否使用了 React Server Components RSC 或...

JEFAZO-CVE-2025-55182-Checker

JEFAZO-CVE-2025-55182-Checker Description JEFAZO-CVE-2025-55182-Checker is a passive analysis tool designed to identify indicators related to CVE-2025-55182 in applications built with Next.js and React Server Components RSC. The tool performs safe and non-intrusive checks, without attempting to...

CVE-2025-55182

CVE-2025-55182 React2Shell Exploit PoC ⚠️ WARNING: This project intentionally uses vulnerable software for security research purposes only. Credits All credits for the PoC go to @maple3142 Setup & Running Docker root@kitploit: docker-compose up --build The app will be available at...

vulnerable-next-js-poc

CVE-2025-55182 React2Shell - Proof of Concept ⚠️ SECURITY RESEARCH ONLY This repository contains a proof of concept for CVE-2025-55182 , a critical remote code execution vulnerability in React Server Components. This is for authorized security testing and research purposes only. Vulnerability...

CVE-2025-55182-burpscanner

CVE-2025-55182-burpscanner A Burp Suite passive scanning plugin for detecting CVE-2025-55182, using JDK 17 Plugin Usage: Default scanning of history / right-click active scan. When a vulnerability is detected, it automatically goes to the CVE-2025-55182 module. Deduplication Deduplication Mechani...

ReactOOPS-WriteUp

ReactOOPS - HTB Web Challenge Writeup Author : TheStingR - Team ISP1337Hackers Challenge : ReactOOPS Web Platform : Hack The Box Difficulty : Very Easy - RETIRED Date Solved : December 13, 2025 Table of Contents...

React2Shell

🚀 R2S - Next.js RSC Exploit Framework Advanced Post-Exploitation Framework for Next.js React Server Components RCE Features • Installation • Usage • Commands • Examples 📋 Overview R2S is a comprehensive exploitation and post-exploitation framework targeting the Next.js React Server Components...

CHECK-CVE-2025-55182-AND-CVE-2025-66478

CHECK-CVE-2025-55182-AND-CVE-2025-66478 This script detects if a server is affected by RSC/Next.js RCE vulnerabilities CVE-2025-55182 and CVE-2025-66478. It checks the server response for specific vulnerability signatures. Those signatures should be specific according to Searchlight Cyber So the...

RSC-Detect-CVE-2025-55182

🔎 RSC-Detect - React Server Components Detector Lightweight detection utility for identifying React Server Components and Next.js applications 🎯 Purpose RSC-Detect is a simple, focused tool designed to identify websites using React Server Components RSC and Next.js framework. It's useful for:...

CVE-2025-55182

React2Shell: CVE-2025-55182 Walkthrough Author: Kavienan J Vulnerability discovered by: lachlan2k, who responsibly disclosed it to the React team. For updates on this vulnerability, visit: react2shell.com Table of Contents 1. Introduction 2. Background 3. Understanding ReactFlightReplyServer.js 4...

check-react-rce-cve-2025-55182

React RCE Vulnerability Scanner CVE-2025-55182 A comprehensive security scanning tool to detect CVE-2025-55182 and CVE-2025-66478 vulnerabilities in React and Next.js projects using React Server Components RSC. 🚨 Overview This tool scans your project for vulnerable versions of React, Next.js, and...

CVE-2025-55182-zoomeye

Zoomeye Next.js RCE Scanner Author: im-ezboy Scanner for Next.js RCE CVE-2025-55182 using Zoomeye search. Finds targets via Zoomeye queries and tests them with the supplied exploit payload. Features Two focused Zoomeye dorks by default: http.header="Vary: RSC, Next-Router-State-Tree"...

CVE-2025-55182_full_exploit

CVE-2025-55182fullexploit this repo have CVE-2025-55182 full exploit with RCE Step to run the exploit 1. Install Dependencies pip install -r requirements.txt 2. Run exploit python3 exploit.py targetlist.txt "command"...

Next.js-RCE-Scanner-BurpSuite-Extension-

CVE-2025-55182 Next.js RCE Burp 확장 플러그인 기능 패시브 스캔 : Burp를 통과하는 모든 Next.js 사이트를 자동으로 탐지합니다. 메모리 웹셸 주입 v2.2 New! 대상 요청을 우클릭하고 AntSword 메모리 웹셸 주입을 선택합니다. GET 및 POST 두 가지 유형의 메모리 웹셸을 지원합니다. 연결 주소 : http://target/qaz 연결 비밀번호 : nb 인코더 : default 특정 인코더 불필요 주입에 성공하면 AntSword로 해당 주소에 직접 연결하여 관리할 수 있습니다. 취...

react2shell-scanner

react2shell-scanner Инструмент командной строки для обнаружения CVE-2025-55182 и CVE-2025-66478 в приложениях Next.js, использующих React Server Components. Технические подробности об уязвимости и методологии обнаружения см. в нашем блоге:...

React2Shell-CVE-2025-55182

HackIndex.IO - React2Shell - CVE-2025-55182 + CVE-2025-66478 React2Shell 취약점을 위한 HackIndex.io 샌드박스 환경입니다. 포트 3000에서 웹 앱을, 포트 2222에서 SSH 서버를 시작합니다. 환경 시작 root@kitploit: docker compose up --build --force-recreate SSH 웹 관리자 포트 2222 webadmin - TrainingPassword123! root@kitploit: ssh...

Suricata-Rule-for-Detecting-CVE-2025-55182

CVE‑2025‑55182용 Suricata 탐지 규칙 Next.js Action Poisoning → Node.js execSync RCE 📌 설명 이 문서는 Suricata 규칙 SID 900304 이 CVE‑2025‑55182 의 악용 시도를 탐지하는 방법을 설명합니다. CVE‑2025‑55182는 Action Poisoning 을 가능하게 하여 임의의 Node.js RCE 로 이어지는 Next.js의 치명적인 취약점입니다. 구체적으로 다음 경로를 통해 발생합니다: 프로토타입 오염Prototype Pollution 내부...

react2shell-scanner

react2shell-guard CVE-2025-55182 에 대한 보안 스캐너 - React Server Components의 중요한 CVSS 10.0 인증되지 않은 원격 코드 실행 취약점입니다. ⚠️ 면책 조항 이것은 보안 스캐너 이며, 익스플로잇 도구가 아닙니다. 개발자와 보안 팀이 프로젝트의 취약한 종속성을 식별하는 데 도움을 주기 위해 설계되었습니다. 이것은 커뮤니티 기반 오픈 소스 프로젝트 이며, 명시적이든 묵시적이든 어떠한 종류의 보증 없이 "있는 그대로" 제공됩니다. 저자와 기여자는 이 도구 사용으로 인해 발생하는...

POC-CVE-2025-55182

CVE-2025-55182 高度なスキャナー CVE-2025-55182 向けのフル機能の悪用ユーティリティ — Next.js の React Server Components を介したリモートコード実行。 このスキャナーはマルチパートペイロードを自動的に生成し、process.mainModule.require'childprocess'.execSync を悪用して、脆弱なインスタンス上で任意の OS コマンド実行を実現します。 機能 ペイロード自動生成 — 手動エンコード不要 クリーンな STDOUT 抽出を伴うコマンド実行 プロトコルの自動検出（欠けている場合は...