CVE-2025-55182-GUI

CVE-2025-55182 Vulnerability Detection and Exploitation Tool GUI Version Project Overview This project is a graphical detection and exploitation tool targeting the high-risk CVE-2025-55182 vulnerability, developed with Python + tkinter to provide a fully graphical interface. It eliminates the nee...

CVE-2025-55182

👻 CVE-2025-55182 Go exploit Interactive RCE exploitation tool for CVE-2025-55182 React Server Components 🎯 What Is This? CVE-2025-55182 is a minimal, interactive RCE exploitation tool targeting CVE-2025-55182 , a critical vulnerability in React Server Components RSC affecting React 19.0.0 - 19.2....

CVE-2025-55182-react2shell

react2shell CVE-2025-55182 toolkit. Scanner + exploit for unauthenticated RCE in Next.js via RSC payload injection. Node.js exploit: zero dependencies. Bash scanner: checks single URLs or bulk lists. Exploit Single command with output ./react2shell.mjs -t http://target:3000 -c "id" Interactive...

CVE-2025-55182-Dockerized

CVE-2025-55182 - Dockerized Proof of Concept This repository contains a dockerized proof of concept for CVE-2025-55182, a critical remote code execution vulnerability in React Server Components RSC that affects Next.js applications using Server Actions. Credits The original proof of concept and...

CVE-2025-55182_Vulnerable-Application

CVE-2025-55182 Vulnerable Lab Educational testing lab using vulnerable React Server Components to demonstrate security vulnerabilities in modern web frameworks. ⚠️ Important Disclaimer This application is intentionally vulnerable and should ONLY be used for educational purposes in controlled...

CVE-2025-55182

CVE-2025-55182 Scanner & Exploit Lab This repository contains a comprehensive scanner and exploit tool for CVE-2025-55182 , a critical Remote Code Execution RCE vulnerability in React Server Components RSC. It also includes a realistic "Lab Environment" to safely test and understand the...

React2ShellPoC

Understanding CVE-2025-55182 React2Shell: A Deep Dive into Remote Code Execution via React Server Components Overview CVE-2025-55182, also known as React2Shell , is a critical remote code execution RCE vulnerability affecting React Server Components. This flaw enables unauthenticated attackers to...

CVE-2025-55182

CVE-2025-55182 - React Server Components RCE Exploit Python CLI exploit for CVE-2025-55182, a critical RCE vulnerability in React Server Components via react-server-dom-webpack. Based on: ejpir/CVE-2025-55182-poc Quick Start Docker Testing Unpack src.zip zip -r src.zip src Build and run vulnerabl...

http-react2shell

React2Shell Nmap Detection Script NSE Detection for CVE-2025-55182 / CVE-2025-66478 – React Server Components / Next.js This repository contains a Nmap Scripting Engine NSE script written in Lua designed to safely detect the critical vulnerability known as React2Shell, affecting React Server...

PunchingBag-for-React2Shell

🥊 PunchingBag - CVE-2025-55182 Security Research Platform ⚠️ EDUCATIONAL PURPOSE ONLY : This is an intentionally vulnerable application designed for authorized security research and CTF challenges. Do NOT use these techniques on unauthorized systems. A deliberately vulnerable Next.js 15.1.6...

CVE-2025-55182-React2Shell-Lab

CyberSec Blog CTF - React2Shell PoC This repository provides a vulnerable CTF Capture The Flag environment based on a cybersecurity blog using Next.js and React Server Components. CVE-2025-55182 : Pre-authentication Remote Code Execution RCE vulnerability in React Server Components versions 19.0....

CVE-2025-55182-Exploit

CVE-2025-55182 – React Server Components RCE Exploit ⚠️ Disclaimer: For authorized security testing and research purposes only. Do not use against systems without explicit permission. Overview This is an improved version of the exploit script for CVE-2025-55182 React Server Components Remote Code...

CVE-2025-55182-scanner

RSC Surface & Crash Detector This tool is a non-intrusive security detection script designed to identify exposed React Server Components RSC surfaces and verify crash-based vulnerability behavior related to: CVE-2025-55182 CVE-2025-66478 It is intended for defensive security testing, WAF...

NextJS-app-CVE-2025-55182

Next.js CVE-2025-55182 Proof of Concept This is a proof-of-concept Next.js application vulnerable to CVE-2025-55182 also known as "React2Shell", a critical Remote Code Execution RCE vulnerability in React Server Components. ⚠️ WARNING This application is intentionally vulnerable and should ONLY be...

PoC_CVE-2025-55182

Next.js React2Shell CVE-2025-55182 Exploit Tool A proof-of-concept tool for demonstrating the critical React2Shell vulnerability CVE-2025-55182 / CVE-2025-66478 on authorized, local testing environments only. ⚠️ CRITICAL WARNING: ACTIVE EXPLOITATION This vulnerability CVSS 10.0 is being actively...

RSC-Infra-Scanner

RSC Infra Scanner rscinfrascan.py is a fast, asynchronous Python tool that fingerprints domains for likely Next.js App Router / React Server Components RSC infrastructure. It does not exploit any vulnerabilities. It only performs passive HTTP/HTML/header fingerprinting to help you identify target...

r2s

R2S - React2Shell Scanner A web-based vulnerability scanner for CVE-2025-55182 , a critical Remote Code Execution RCE vulnerability in React Server Components. Live Scanner: https://r2s.mxm0z.com About CVE-2025-55182 CVE-2025-55182 is a critical CVSS 10.0 vulnerability in the React Server...

CVE-2025-55182

CVE-2025-55182 Vulnerable Application Build and run: docker compose build docker compose run --rm --entrypoint 'npm install' node docker compose run --rm --entrypoint 'npm run build' node docker compose up POC from https://github.com/msanft/CVE-2025-55182: node poc.js Experimentation with...

React-site-CVE-2025-55182

React Site - CVE-2025-55182 README: Vulnerable Next.js project React RSC landing page This repository contains an example of a multi-page corporate landing page built with Next.js 15.0.0 + React 19.0.0. The site mimics a structure similar to t1.ru: home, products, cases, media, about, contacts. W...

nextjs-rce-incident-response

Next.js RCE Incident Response — CVE-2025-55182 Type: Live Production Incident Response Vulnerability: CVE-2025-55182 — React Server Components Insecure Deserialization RCE Affected System: Next.js frontend + remote production server Role: Cyber Security Intern — SenseLive Technologies Date:...