🚨 Critical RCE in React Server Components & Next.js 🚨
Professional Red Team Toolkit for CVE-2025-55182 Detection & Exploitation
React2Shell is a critical unauthenticated Remote Code Execution (RCE) vulnerability affecting React Server Components (RSC) and Next.js applications.
| CVE ID | Component | CVSS Score | Impact |
|---|---|---|---|
| CVE-2025-55182 | React Server Components | 10.0 🔴 | Complete Server Takeover |
| CVE-2025-66478 | Next.js Server Actions | 10.0 🔴 | Full System Compromise |
// Attacker sends malicious Flight protocol payload
POST / HTTP/1.1
Next-Action: exploit
Content-Type: multipart/form-data
{"__proto__": "pollution", "then": "gadget_chain"}
↓
Unsafe Deserialization
↓
Prototype Pollution
↓
💥 Remote Code Execution 💥- React: 19.0.0, 19.1.0, 19.1.1, 19.2.0
- Next.js: 15.x, 16.x (with App Router)
- Frameworks: React Router, Waku, Vite RSC, Parcel, RedwoodSDK
- React: 19.0.1+, 19.1.2+, 19.2.1+
- Next.js: 15.0.5+, 15.1.9+, 15.2.6+, 16.0.7+
|
🔓 Successful RCE Exploitation
Command execution via React2Shell vulnerability |
💥 Vulnerability Confirmation
Server compromise through Flight protocol |
⚠️ These screenshots demonstrate real exploitation in controlled environments
Use responsibly and only with proper authorization
This repository contains 4 professional-grade tools for CVE-2025-55182 detection and exploitation:
|
Advanced Scanner ✅ 5 Payloads |
Target Discovery ✅ Automated Search |
CLI Framework ✅ 8 Predefined Payloads |
Manual Testing ✅ 30+ Payloads |
# Clone the repository
git clone https://github.com/cybertechajju/R2C-CVE-2025-55182-66478.git
cd R2C-CVE-2025-55182-66478
# Install Python dependencies
pip install -r requirements.txt
pip install -r exploits/requirements.txt# Scan single target
nuclei -t nuclei-templates/cve-2025-55182.yaml -u https://target.com
# Scan multiple targets
nuclei -t nuclei-templates/cve-2025-55182.yaml -l targets.txt# Interactive wizard mode
python exploits/shodan_scanner_advanced.py
# Or with API key directly
python exploits/shodan_scanner_advanced.py --api YOUR_SHODAN_API_KEY# Interactive mode
bash exploits/scanner_advanced.sh -i
# Quick exploitation
bash exploits/scanner_advanced.sh -d https://target.com -p 2- Open Burp Suite → Extensions → Add
- Select
burp-extension/React2Shell_Burp.py - Check "React2Shell Pro" tab for GUI
cve-2025-55182/
├── 📂 nuclei-templates/ # Nuclei YAML templates
│ └── cve-2025-55182.yaml # Advanced detection template
├── 📂 exploits/ # Exploitation tools
│ ├── shodan_scanner_advanced.py # Shodan mass scanner
│ ├── scanner_advanced.sh # Bash exploitation framework
│ └── requirements.txt # Python dependencies
├── 📂 burp-extension/ # Burp Suite extension
│ ├── React2Shell_Burp.py # Main extension (30+ payloads)
│ ├── payloads.json # Payload library
│ └── detection_rules.json # Detection patterns
├── 📂 burp bechek/ # BCheck files for Burp Scanner
│ ├── CVE-2025-55182-React2Shell-Active.bcheck
│ └── CVE-2025-66478-NextJS-React2Shell-Active.bcheck
└── 📄 README.md # This file
- ✅ 5 Exploitation Payloads: Linux, Windows, alternative endpoints
- ✅ Mathematical Validation:
41 * 271 = 11111(zero false positives) - ✅ Multi-Stage Detection: Framework fingerprinting → RSC discovery → RCE validation
- ✅ Multiple Matchers: Math validation, error patterns, execution proof
- ✅ 50+ Shodan Queries: Maximum vulnerable target discovery
- ✅ Smart Extraction: Both IPs and domain names
- ✅ Interactive Wizard: Guided setup for beginners
- ✅ Cyberpunk UI: Neon-themed terminal with animations
- ✅ Batch Scanning: Multi-threaded target scanning
- ✅ JSON Reports: Detailed vulnerability reports
- ✅ 8 Predefined Payloads: System info, AWS metadata, container detection, etc.
- ✅ Interactive Mode: Menu-driven exploitation
- ✅ Multi-Target Scanning: Scan from file list
- ✅ Rich Output: Color-coded results with animations
- ✅ Error Analysis: Detailed failure diagnostics
- ✅ 30+ Payload Library: Organized in 5 categories
- ✅ Dual Scanners: Passive monitoring + active exploitation
- ✅ 8-Tab GUI: Dashboard, scanner, exploitation, payloads, results, config, about
- ✅ Burp Collaborator: Out-of-band RCE confirmation
- ✅ Export Options: JSON and CSV reports
- ✅ Confidence Scoring: Certain (95%), Firm (75%), Tentative (50%)
╔═══════════════════════════════════════════════════════════════╗
║ ⚠️ CRITICAL WARNING ⚠️ ║
╚═══════════════════════════════════════════════════════════════╝
This toolkit is for AUTHORIZED SECURITY TESTING ONLY.
⚖️ Legal Use:
✅ Penetration testing with written authorization
✅ Bug bounty programs within defined scope
✅ Security research on owned infrastructure
✅ Educational purposes in controlled labs
❌ Illegal Activities:
⛔ Unauthorized system access
⛔ Malicious exploitation
⛔ Data theft or destruction
⛔ Deploying malware
By using this toolkit, you agree to use it ethically and legally.
Unauthorized access to computer systems is illegal under:
• Computer Fraud and Abuse Act (CFAA) - USA
• Computer Misuse Act - UK
• Similar laws worldwide
🔒 You are solely responsible for your actions.
Security Researcher • Red Team Specialist • Bug Bounty Hunter
Motto: Keep Learning Keep Hacking 🚀
|
|
|
|
|
|
If this toolkit helped you, please ⭐ star this repository!
- React Security Team - For responsible disclosure
- ProjectDiscovery - For Nuclei platform
- PortSwigger - For Burp Suite
- Emre Davut - Original Shodan scanner inspiration
- Security Research Community - For CVE analysis and PoCs
For Educational and Authorized Security Testing Only
No warranty or liability provided. Use at your own risk.
Open an Issue or reach out on social media!
Made with ❤️ by CyberTechAjju
Keep Learning. Keep Hacking. Stay Ethical. 🎯🔐