NextJS-app-CVE-2025-55182

Next.js CVE-2025-55182 Proof of Concept This is a proof-of-concept Next.js application vulnerable to CVE-2025-55182 also known as "React2Shell", a critical Remote Code Execution RCE vulnerability in React Server Components. ⚠️ WARNING This application is intentionally vulnerable and should ONLY be...

PoC-RCE-CVE-2025-55182

🔥 RSC RCE Exploit Toolkit Advanced exploitation toolkit for React Server Components Remote Code Execution vulnerabilities For authorized penetration testing and security research only Features • Installation • Usage • Shodan Integration • Examples • Disclaimer 📋 Table of Contents Overview...

r2s

R2S - React2Shell Scanner A web-based vulnerability scanner for CVE-2025-55182 , a critical Remote Code Execution RCE vulnerability in React Server Components. Live Scanner: https://r2s.mxm0z.com About CVE-2025-55182 CVE-2025-55182 is a critical CVSS 10.0 vulnerability in the React Server...

cve-2025-55182-test-lab-windows

CVE-2025-55182 React2Shell Test ⚠️ Warning : Contains a working remote code execution RCE vulnerability. 📋 Table of Contents Overview Vulnerability Information Quick Start Actual Attack Demonstration Test Environment WAF Defense Rules File Structure References Legal Notice Overview Container test...

R2S_CVE-2025-55182

CVE-2025-55182 Scanner Vulnerability scanner for CVE-2025-55182 - Remote Code Execution in Next.js Server Actions. About CVE-2025-55182 Severity: Critical CVSS TBD Affected Versions: Next.js: 15.x 15.5.7, 16.0.x 16.0.7 React: 19.0.0, 19.1.0, 19.1.1, 19.2.0 Impact: Remote attackers can execute...

CVE-2025-55182

React2Shell CVE-2025-55182 - Proof of Concept A comprehensive proof-of-concept exploit and educational resource for CVE-2025-55182, a critical remote code execution vulnerability affecting React Server Components with a CVSS score of 10.0. Legal Disclaimer FOR EDUCATIONAL AND AUTHORIZED TESTING...

react2shell

This repository does not have a README...

react2shell-scanner

React2Shell Vulnerability Scanner A safe, non-invasive scanner for detecting React Server Components RSC and Next.js Remote Code Execution vulnerabilities CVE-2025-55182 & CVE-2025-66478. Overview This scanner helps organizations identify whether their web services are vulnerable to the React2She...

react2shell

React2Shell CVE-2025-55182 Next.js: CVE-2025-66478 Unauthenticated RCE in React Server Components Flight Protocol - PoC Exploit Description React Server Components Flight protocol deserialize attacker-controlled multipart/form-data without validating prototype-chain access. A single unauthenticat...

react-cve-2025-55182-lab

Setup: git clone https://github.com/alexandre-briongos-wavestone/react-cve-2025-55182-lab cd react-cve-2025-55182-lab sudo docker build -t react-rsc-lab . sudo docker run -p 3000:3000 react-rsc-lab Exploit: curl --path-as-is -i -s -k -X $'POST' \ -H $'Host: localhost:3000' -H $'User-Agent:...

CVE-2025-55182_liyon

CVE-2025-55182 - React Server Components RCE ⚠️ Legal Notice : This tool is intended solely for security research, authorized penetration testing, and educational purposes. Using this tool against any system without explicit permission is illegal and unethical. 📋 Overview CVE-2025-55182 is a...

tech-seminar-React2Shell

React2Shell CVE-2025-55182 Woori FISA Technical Seminar 6th - Team 3: Analysis and research on React2Shell, a remote code execution RCE vulnerability exploiting design flaws in React Server Component RSC Team Member| Role| GitHub ---|---|--- 남인서| Research, PPT production, Presentation| @sene03 유승...

React2Shell

RSC Sentinel A Firefox extension for detecting React2Shell vulnerabilities CVE-2025-55182 & CVE-2025-66478 in web applications. 👁️ Overview RSC Sentinel is a Firefox browser extension for security researchers and educators who want to observe React Server Components RSC and Next.js App Router...

React2Shell-CVE-2025-55182

🔥React2Shell - CVE-2025-55182 / CVE-2025-66478 Proof of Concept Critical Security Vulnerability Demo - CVSS 10.0 - Remote Code Execution in React Server Components ⚠️DISCLAIMER FOR EDUCATIONAL PURPOSES ONLY! This repository demonstrates a critical security vulnerability. Never use on production...

CVE-2025-55182

React2Shell CVE-2025-55182 ⚠️ Warning: This project is for educational and security research purposes only. 1. clone the repository git clone https://github.com/mivmi/CVE-2025-55182.git cd CVE-2025-55182 2. start the docker containers docker-compose up -d 3. open in your browser...

study-CVE-2025-55182

CVE-2025-55182 Study A repository for learning about the Remote Code Execution RCE vulnerability in React Server Components. 🔴 Warning For educational purposes only. Using it against others' systems without permission is illegal. 📋 Vulnerability Overview Item| Description ---|--- CVE ID|...

CVE-2025-55184_Testing

CVE-2025-55184Testing Python script for testing CVE-2025-55184 CVE-2025-55184 – React Server Components DoS Scanner A safe, security validation script designed to detect CVE-2025-55184 , a denial-of-service DoS vulnerability affecting React Server Components RSC. This tool is intended strictly fo...

CVE-2025-55182-Scanner

🛡️ CVE-2025-55182 Scanner React2Shell Developed by:SainiON Hacks A standalone GUI tool to detect and demonstrate the React Server Components Remote Code Execution RCE vulnerability CVE-2025-55182 in Next.js applications. 📺 Demo & Tutorial Watch the full breakdown and tool demonstration on my...

React-Security-CVE-2025-55182-Exploit

⚛️ React2Shell Exploit CVE-2025-55182 A lightweight, automated Proof of Concept PoC and bulk scanner for the Critical RCE vulnerability in React Server Components React 19 / Next.js. ⚠️ Legal Disclaimer FOR EDUCATIONAL AND SECURITY RESEARCH PURPOSES ONLY. This tool is designed to help security...

cve-2025-66478

CVE-2025-55182 This repository provides a minimal intentionally vulnerable environment to test security scanners against the recent critical RCE vulnerabilities affecting React Server Components and Next.js. !Warning This setup is intentionally vulnerable and must never be exposed to the public...