react2shell-exploit

react2shell-exploit for BURPSUITE React2Shell: CVE-2025-55182...

check-react-rce-cve-2025-55182

React RCE Vulnerability Scanner CVE-2025-55182 A comprehensive security scanning tool to detect CVE-2025-55182 and CVE-2025-66478 vulnerabilities in React and Next.js projects using React Server Components RSC. 🚨 Overview This tool scans your project for vulnerable versions of React, Next.js, and...

rsc_detect_CVE-2025-55182

what's it For CVE-2025-55182 and CVE-2025-66478 Security Response, it is not a POC, just to find whether a website uses React Server Components RSC or Next.js. Feature definition for detecting whether a website uses React Server Components RSC or Next.js 用于检测网站是否使用了 React Server Components RSC 或...

RSC-Detect-CVE-2025-55182

🔎 RSC-Detect - React Server Components Detector Lightweight detection utility for identifying React Server Components and Next.js applications 🎯 Purpose RSC-Detect is a simple, focused tool designed to identify websites using React Server Components RSC and Next.js framework. It's useful for:...

react2shell

React2Shell: RCE 0-day in React Server Components CVE-2025-55182 React and CVE-2025-66478 Next.js This repository contains exploit code for authorized security testing and educational purposes only. See also: Multiple researchers have published analyses of this vulnerability. Check the References...

Next.js-Exploit-Tool

Next.js-Exploit-Tool Next.js-Exploit-Tool 图形化综合利用工具。 简介 一款针对 CVE-2025-55182 的独立安全评估工具，基于 Go 开发，提供图形化界面（GUI），用于快速完成漏洞检测与验证。 更新日志 v1.3.0 新增 Godzilla 哥斯拉 内存马支持 实现了基于 Node.js 的 Godzilla 内存马注入功能，本 Payload 需配合北辰师傅的项目GodzillaNodeJsPayload 使用。 致谢 Credits ：特别感谢 北辰师傅开源的 GodzillaNodeJsPayload 项目。 新增网络代理支持...

CVE-2025-55182-bypass

CVE-2025-55182-bypass CVE-2025-55182-bypass-waf...

CVE-2025-55182

React2Shell: CVE-2025-55182 Walkthrough Author: Kavienan J Vulnerability discovered by: lachlan2k, who responsibly disclosed it to the React team. For updates on this vulnerability, visit: react2shell.com Table of Contents 1. Introduction 2. Background 3. Understanding ReactFlightReplyServer.js 4...

Nextjs_RCE_Exploit_Tool

Next.js RCE Exploit Tool CVE-2025-55182 !CAUTION 免责声明 / Disclaimer 本工具仅供安全研究与教学 使用。用户在使用本工具进行测试时，必须确保已获得目标系统的合法授权 。 严禁用于非授权的渗透测试、恶意攻击或任何非法用途。用户感知和利用漏洞所产生的一切风险与法律后果由用户自行承担 ，与本项目开发者无关。 如果不接受此条款，请立即停止下载或使用本工具。 本工具基于公开文章开发，不提供编译好的二进制发布版本，请自行审计代码并编译。 🙏 致谢 / Credits...

react2shell-scanner

react2shell-scanner A command-line tool for detecting CVE-2025-55182 and CVE-2025-66478 in Next.js applications using React Server Components. For technical details on the vulnerability and detection methodology, see our blog post:...

React2Shell-CVE-2025-55182-original-poc

Original PoCs for CVE-2025-55182 As public PoCs are circulating and Google's Scanner uses a variation of my original submitted PoC, it's finally a responsible time to share my original PoCs for React2Shell. This repository contains 3 PoCs: 00-very-first-rce-poc - the very first PoC I managed to...

Next.js-RSC-RCE-Scanner-Burp-Suite-Extension

Next.js RSC RCE Scanner Burp Suite Extension A high-fidelity Burp Suite extension to detect the Next.js / React Server Components RSC Remote Code Execution vulnerability CVE-2025-55182 & CVE-2025-66478. This extension implements the detection logic discovered by the Searchlight Cyber Security...

CVE-2025-55182

🔔 ⚠️ Unauthorized penetration testing is prohibited Build Steps go get fyne.io/fyne/v2@latest go build -ldflags="-s -w" . Screenshots...

CVE-2025-55182-React-19.2.0

Exploitation Steps: 1. Download all files in this repository 2. Extract file.zip and name it rh-test 3. Run using npm run dev or yarn dev or pnpm dev or bun dev. 4. Open http://localhost:3000 in browser 5. Open a new terminal and run the command python3 react-exp.py http://localhost:3000 Follow...

CVE-2025-55182-zoomeye

Zoomeye Next.js RCE Scanner Author: im-ezboy Scanner for Next.js RCE CVE-2025-55182 using Zoomeye search. Finds targets via Zoomeye queries and tests them with the supplied exploit payload. Features Two focused Zoomeye dorks by default: http.header="Vary: RSC, Next-Router-State-Tree"...

react2shell-scanner

React2Shell Scanner – with PoC CVE-2025-55182 – React Server Components RCE PoC Educational exploit client for the Hidden Investigations React2Shell lab. This repository contains a single-host proof-of-concept PoC exploit tool for the React2Shell vulnerability CVE-2025-55182 targeting misconfigur...

exploit-react-CVE-2025-55182

FOX-RSC TOOL CVE-2025-55182 & CVE-2025-66478 LEGAL DISCLAIMER EN: This tool is a Proof of Concept PoC intended for security research and educational purposes only. Using this tool on systems without explicit permission is illegal and punishable by law. The author Tiger-Foxx assumes no...

react2shell-test-server

React2Shell Test Server A test server for demonstrating and testing React2Shell CVE-2025-55182 vulnerability Description We have been researching the React2Shell RCE CVE-2025-55182 since it was released, and we worked on preventing this vulnerability with our customers. We are open-sourcing this...

React2Shell-Toolbox

React2Shell Toolbox A security testing toolkit built with Electron + Vue 3, focused on React Server Actions vulnerability detection and exploitation. 中文文档 | English Overview React2Shell Toolbox is a security testing tool designed for Next.js React Server Actions prototype pollution vulnerability...

Next.js-RCE-Scanner-BurpSuite-Extension-

CVE-2025-55182 Next.js RCE Burp Extension Plugin Features Passive Scanning : Automatically detect all Next.js sites passing through Burp Memory Shell Injection v2.2 New! Right-click on the target request, select Inject AntSword Memory Shell AntSword, supports both GET and POST types of memory...