CVE-2025-55182_liyon

CVE-2025-55182 - React Server Components RCE ⚠️ Legal Notice : This tool is intended solely for security research, authorized penetration testing, and educational purposes. Using this tool against any system without explicit permission is illegal and unethical. 📋 Overview CVE-2025-55182 is a...

cowcloud

CowCloud a serverless solution to distribute work-loads in AWS CowCloud was originally created to run recon tools and vulnerability scans in a distributed way; for example, one use case might be by bug bounty hunters. This solution is intended to abstract end users from the underlying work requir...

React2shell-CVE-2025-55182-checker

CVE-2025-55182 React2Shell Detection Tool Detection tools for finding vulnerable React Server Components in your infrastructure. Quick Start root@kitploit: Install dependencies pip3 install requests Version detection passive, safe for production python3 checker.py -u https://your-app.com What's...

React2Shell

React2Shell – Advanced Discovery & Exploitation Framework An advanced React Server Components RSC vulnerability scanner and exploiter for CVE-2025-55182 and CVE-2025-66478 affecting Next.js applications. This tool expands upon the original React2Shell research and proof-of-concept by introducing...

EUVD-2026-80779

react/http: A malformed HTTP chunked body can lead to a denial-of-service and peg the CPU...

react2shell-scanner-CVE-2025-55182

React2Shell Enterprise Scanner High-fidelity vulnerability scanner for CVE-2025-55182 and CVE-2025-66478 - Remote Code Execution vulnerabilities in React Server Components / Next.js. 📖 For detailed technical analysis, exploit mechanics, and IOC data, seeSECURITY-RESEARCH.md ⚠️ DISCLAIMER This tool...

CVE-2025-55182-scanner

🔍 CVE-2025-55182-scanner - Detect Vulnerabilities with Ease Download CVE-2025-55182-scanner 🚀 Getting Started Welcome! This guide will help you download and run the CVE-2025-55182-scanner. This tool identifies exposed React Server Components endpoints in your applications without being intrusive....

react2shell

Description: CVE-2025-55182 is a critical unauthenticated remote code execution RCE vulnerability in the react-server package used by React Server Components RSC. CVE-2025-66478 is the corresponding RCE vulnerability in Next.js, which inherits the same underlying flaw through its implementation o...

React-Security-CVE-2025-55182-Exploit

⚛️ React2Shell Exploit CVE-2025-55182 A lightweight, automated Proof of Concept PoC and bulk scanner for the Critical RCE vulnerability in React Server Components React 19 / Next.js. ⚠️ Legal Disclaimer FOR EDUCATIONAL AND SECURITY RESEARCH PURPOSES ONLY. This tool is designed to help security...

REACT-CVE-2025-55182-Lab

React-2025 CTF Lab: CVE-2025-55182 Overview This repository contains a Capture The Flag CTF lab designed strictly for educational use and security research. The environment features a vulnerable Next.js 16 e-commerce mock storefront "Quantum Supplies" specifically built to demonstrate and practic...

React2Shell-PoC-CVE-2025-55182

React2Shell Exploitation Simulation CVE-2025-55182 Note: This document is for educational and security research purposes only. Do not use it to attack systems without authorization. 1. Overview CVE-2025-55182, also known as React2Shell, is a critical Remote Code Execution RCE vulnerability...

CVE-2025-55183

CVE-2025-55183 Scanner for React Server Functions source code exposure vulnerability. What is this? CVE-2025-55183: React 19.0.0-19.2.1 Server Actions can be exploited to expose their full source code including hardcoded secrets, API keys, and database credentials. References:...

CVE-2025-55182-Scanner

🛡️ CVE-2025-55182 Scanner React2Shell Developed by:SainiON Hacks A standalone GUI tool to detect and demonstrate the React Server Components Remote Code Execution RCE vulnerability CVE-2025-55182 in Next.js applications. 📺 Demo & Tutorial Watch the full breakdown and tool demonstration on my...

CVE-2025-55182

🚨 NextRce — CVE-2025-55182 Next.js / React Server Components RCE NextRce is a security research tool demonstrating CVE-2025-55182 , a critical vulnerability in Next.js App Router applications using React Server Components RSC and Server Actions. This vulnerability allows an attacker to achieve...

evilact

evilact Fast vulnerability scanner for CVE-2025-55182 and CVE-2025-66478 in Next.js applications using React Server Components. Supports bulk scanning, RCE confirmation, and high-performance concurrent checks. Install root@kitploit: git clone https://github.com/cypholab/evilact.git cd evilact go...

CVE-2025-55182-Simple-Scanner-main

CVE-2025-55182: React Server Components RCE Scanner A comprehensive toolkit for detecting and exploiting CVE-2025-55182 , a Critical Remote Code Execution vulnerability in Next.js applications using React Server Components. This repository features a unified Bash scanner Single & Mass mode,...

CVE-2025-55182-POC-SCANNER

CVE-2025-55182: Critical Pre-Authentication RCE in React Server Components Security Research byschema.cx "Control is an illusion. It's the systems we build that control us—unless we understand them first." 📋 Table of Contents Disclaimer & Legal Notice Executive Summary Technical Description...

CVE-2024-55182

CVE-2025-55182 React2Shell Vulnerablity 1. Explanation about the Vulnerablity: CVE-2025-55182 “React2Shell” is a critical Remote Code Execution RCE vulnerability inside React Server Components RSC — specifically in the React Flight protocol deserialization logic. Affects: React’s server-side...

react2shell_detector

React2Shell Detector Heuristic Scanner for React Server Components RSC Vulnerabilities — including React2Shell-style behavior CVE-2025-55182 Overview react2shelldetector.py is a safe, non-invasive security scanner designed to detect systems potentially exposed to React Server Components RSC...

react2shelldemo

React2Shell CVE-2025-55182 — Local RSC Security Demo ⚠️ WARNING This repository is for educational and defensive security research only. Do NOT attempt to run this code against: Production systems Public websites Servers you do not own or have explicit permission to test Unauthorized exploitation...