react2shelldemo

React2Shell CVE-2025-55182 — Local RSC Security Demo ⚠️ WARNING This repository is for educational and defensive security research only. Do NOT attempt to run this code against: Production systems Public websites Servers you do not own or have explicit permission to test Unauthorized exploitation...

Bot-exploit-CVE-2025-55182

React2Shell Scanner – CVE-2025-55182 🔐 Educational tool for detection of vulnerability CVE-2025-55182 React2Shell in applications that use React Server Components / Next.js. 📌 About CVE-2025-55182 CVE-2025-55182 , known as React2Shell , is a critical vulnerability affecting React Server Component...

CVE-2025-55182-POC-SCANNER

CVE-2025-55182: Critical Pre-Authentication RCE in React Server Components Security Research byschema.cx "Control is an illusion. It's the systems we build that control us—unless we understand them first." 📋 Table of Contents Disclaimer & Legal Notice Executive Summary Technical Description...

CVE-2025-55182

React2Shell Ultimate Scanner Professional Next.js RSC RCE Vulnerability Scanner for CVE-2025-55182 🎯 Overview React2Shell Ultimate is a comprehensive vulnerability scanner for CVE-2025-55182 - a critical Remote Code Execution RCE vulnerability affecting Next.js applications using React Server...

CVE-2025-55182-Exploit

CVE-2025-55182 – React Server Components RCE Exploit ⚠️ Disclaimer: For authorized security testing and research purposes only. Do not use against systems without explicit permission. Overview This is an improved version of the exploit script for CVE-2025-55182 React Server Components Remote Code...

CVE-2025-55182-Simple-Scanner

CVE-2025-55182: React Server Components RCE Scanner A comprehensive toolkit for detecting and exploiting CVE-2025-55182 , a Critical Remote Code Execution vulnerability in Next.js applications using React Server Components. This repository features a unified Bash scanner Single & Mass mode,...

PoC_CVE-2025-55182

Next.js React2Shell CVE-2025-55182 Exploit Tool A proof-of-concept tool for demonstrating the critical React2Shell vulnerability CVE-2025-55182 / CVE-2025-66478 on authorized, local testing environments only. ⚠️ CRITICAL WARNING: ACTIVE EXPLOITATION This vulnerability CVSS 10.0 is being actively...

cve-2025-55182-mitigator

cve-2025-55182-mitigator Defensive scanner + mitigation guidance for CVE-2025-55182 React Server Components / Flight protocol insecure deserialization. This tool is intended to help you: identify repos that are likely vulnerable based on dependency versions quickly apply the definitive mitigation...

CVE-2025-55182

CVE-2025-55182 Toolkit & Lab Educational Only Lightweight Go toolkit plus a Dockerized Next.js lab to explore and triage CVE-2025-55182. For educational and authorized testing only. Features Root-cause writeup, visuals, and lab: see React2ShellDeconstructingaPerfect10RCE.pdf and the attack-path...

react2shell-lab

React2Shell Vulnerability Lab This is a deliberately vulnerable Next.js application for testing CVE-2025-55182 and CVE-2025-66478 React Server Components RCE. ⚠️ WARNING : This application is intentionally vulnerable. Use only in isolated lab environments. Vulnerability Details CVE-2025-55182 /...

React2Shell-CVE-2025-55182

CVE-2025-55182 - React2Shell | | | / \ / | | / || | | | | | | | | | | | / | | | | \ | || | | | | | | | | | / \ | | | / / | | || || | || \// \| || ||/|| ||||| CVE-2025-55182 Remote Code Execution Scanner for React Server Components RSC Credits Role| Name| Link ---|---|--- Original Research|...

CVE-2025-55182-PoC-exploit

CVE-2025-55182-PoC-exploit Next.js RCE a través de React Server Functions ❯ python3 cve-2025-55182-exploit.py 0:"a":"$@1","f":"","b":"3OmR5Ifk9dmFJ1coB7-Wc" 1:E"digest":"uid=0root gid=0root groups=0root,0root,1bin,2daemon,3sys,4adm,6disk,10wheel,11floppy,20dialout,26tape,27video"...

POC-CVE-2025-55182

POC-CVE-2025-55182 credit : https://github.com/Malayke/Next.js-RSC-RCE-Scanner-CVE-2025-66478 usage: CVE-2025-55182-Exp.py -h -u URL -l LIST -c COMMAND -i --revshell LHOST LPORT -t THREADS --proxy PROXY --timeout TIMEOUT -v Usage Single target exploit python3 CVE-2025-55182-Exp.py -u...

react2shell-audit

React2Shell Audit CVE-2025-55182 React2Shell Audit is a lightweight, recursive Bash script designed to detect local Next.js and React Server DOM installations vulnerable to CVE-2025-55182 React2Shell and CVE-2025-66478. 🚨 The Vulnerability React2Shell is a critical remote code execution RCE...

Next.js-RCE-CVE-2025-55182

🔍 Next.js Security Testing Tool Professional security assessment utility for Next.js applications ⚠️ Disclaimer This tool is intended for authorized security testing and research purposes only. ✅ Use only on systems you own or have explicit permission to test ✅ For bug bounty programs with proper...

cve-2025-55182

CVE-2025-55182 Python Exploit Python 3 script that can be used to demonstrate CVE-2025-55182. It exploits a server-side JavaScript injection vulnerability in Next.js/React applications, allowing remote code execution via malformed multipart form data. ⚠️ For educational and authorized testing...

react2shell-scanner

React2Shell Vulnerability Scanner A safe, non-invasive scanner for detecting React Server Components RSC and Next.js Remote Code Execution vulnerabilities CVE-2025-55182 & CVE-2025-66478. Overview This scanner helps organizations identify whether their web services are vulnerable to the React2She...

react-cve-2025-55182

react-cve-2025-55182 This is a dump of malware and other suspicious junk I found on the server for my wedding website following the react server side rendering code execution exploit. Its a dinky digital ocean droplet running a fairly pedestrian next js app. The CVE:...

React2Shell-CVE-2025-55182

🔥React2Shell - CVE-2025-55182 / CVE-2025-66478 Proof of Concept Critical Security Vulnerability Demo - CVSS 10.0 - Remote Code Execution in React Server Components ⚠️DISCLAIMER FOR EDUCATIONAL PURPOSES ONLY! This repository demonstrates a critical security vulnerability. Never use on production...

CVE-2025-55182

CVE-2025-55182 Proof-of-Concept for CVE-2025-55182, a critical unauthenticated RCE in React Server Components. ⚠️ Disclaimer This document is provided strictly for educational, defensive, and authorized security research purposes. Do NOT attempt to exploit systems or applications without explicit...