git clone https://github.com/fBUZk2BH/RSC-Detect-CVE-2025-55182.git

cd RSC-Detect-CVE-2025-55182

py -m pip install -r requirements.txt

py main.py

if __name__ == "__main__":
    targetList = [
        "https://example.com",
        "https://another-site.com",
    ]

    for urlItem in targetList:
        analyzeTarget(urlItem)

python main.py

Analyzing target: https://example.com

[Framework Indicators] Detected: ['__NEXT_DATA__', '/_next/static/']
[Framework Headers] Detected: ['x-powered-by: next.js']

Analyzing target: https://another-site.com

No framework indicators detected

1. إرسال طلب HTTP GET إلى URL الهدف
2. تحليل محتوى HTML ورؤوس الاستجابة
3. مطابقة الأنماط مع المؤشرات المعروفة
4. الإبلاغ عن النتائج

HTML_RSC_PATTERNS = [
    '__flight__',                    # علامة تدفق RSC
    'react-server-streaming',        # مؤشر تدفق الخادم
    '__REACT_SERVER_APP__',          # علامة تطبيق RSC
]

CONTENT_TYPE_RSC_PATTERNS = [
    'text/x-component',              # نوع محتوى RSC
    'text/vnd.rsc',                  # نوع RSC الخاص بالبائع
    'application/x-react-server-component',  # MIME كامل لـ RSC
]

HTML_NEXTJS_PATTERNS = [
    "__NEXT_DATA__",                 # ترطيب بيانات Next.js
    "/_next/static/",                # مسارات الأصول الثابتة
    "/_next/data/",                  # مسارات جلب البيانات
    "next-head",                     # مكون الرأس
    "next-font",                     # تحسين الخطوط
    "next/script",                   # مكون البرنامج النصي
]

RSC-Detect-CVE-2025-55182/
├── main.py              # البرنامج النصي الرئيسي للكشف
├── requirements.txt     # تبعيات Python
└── README.md           # الوثائق

targetList = [
    "https://site1.com",
    "https://site2.com",
    "https://site3.com/app",
]

# إضافة أنماط RSC جديدة
HTML_RSC_PATTERNS.append('your-custom-pattern')

# إضافة أنماط Next.js جديدة
HTML_NEXTJS_PATTERNS.append('custom-next-indicator')

# تعديل مهلة الطلب (الافتراضية: 10 ثوانٍ)
httpResponse = requests.get(targetUrl, timeout=30)

def loadTargetsFromFile(filepath):
    with open(filepath, 'r') as f:
        return [line.strip() for line in f if line.strip()]

if __name__ == "__main__":
    targetList = loadTargetsFromFile('targets.txt')
    for urlItem in targetList:
        analyzeTarget(urlItem)

import json

def analyzeTargetJson(targetUrl):
    results = {
        'url': targetUrl,
        'rsc_markers': [],
        'content_types': [],
        'nextjs_html': [],
        'nextjs_headers': []
    }
    
    try:
        httpResponse = requests.get(targetUrl, timeout=10)
        htmlContentLower = httpResponse.text.lower()
        headersContentLower = str(httpResponse.headers).lower()
        
        results['rsc_markers'] = [p for p in HTML_RSC_PATTERNS if p.lower() in htmlContentLower]
        results['content_types'] = [p for p in CONTENT_TYPE_RSC_PATTERNS if p.lower() in headersContentLower]
        results['nextjs_html'] = [p for p in HTML_NEXTJS_PATTERNS if p.lower() in htmlContentLower]
        results['nextjs_headers'] = [p for p in HEADER_NEXTJS_PATTERNS if p.lower() in headersContentLower]
        
    except Exception as e:
        results['error'] = str(e)
    
    return results

# الاستخدام
results = [analyzeTargetJson(url) for url in targetList]
print(json.dumps(results, indent=2))

from concurrent.futures import ThreadPoolExecutor

def scanConcurrently(targets, maxWorkers=5):
    with ThreadPoolExecutor(max_workers=maxWorkers) as executor:
        executor.map(analyzeTarget, targets)

# إضافة منطق إعادة المحاولة
from requests.adapters import HTTPAdapter
from urllib3.util.retry import Retry

session = requests.Session()
retries = Retry(total=3, backoff_factor=0.5)
session.mount('https://', HTTPAdapter(max_retries=retries))

# تعطيل التحقق من SSL (غير موصى به للإنتاج)
httpResponse = requests.get(targetUrl, timeout=10, verify=False)

# التعامل مع الترميزات المختلفة
httpResponse.encoding = httpResponse.apparent_encoding

requests>=2.28.0
urllib3>=1.26.0