git clone https://github.com/MoisesTapia/http-react2shell.git
cd http-react2shell

sudo cp http-react2shell.nse /usr/share/nmap/scripts/

sudo nmap --script-updatedb

nmap -p80 --script http-react2shell <host>

nmap -p443 --script http-react2shell \
  --script-args 'react2shell.path=/'
  <host>

nmap -p443 --script http-react2shell \
  --script-args 'react2shell.path=/api/action'
  <host>

nmap -p443 --script http-react2shell \
  --script-args 'react2shell.path=/,react2shell.timeout=20000'
  <host>

nmap -iL targets.txt -p80,443 \
  --script http-react2shell

nmap -sV -p80,443 \
  --script "http-react2shell,http-headers,http-server-header,http-security-headers" \
  <host>

PORT   STATE SERVICE
443/tcp open  https
| http-react2shell:
|   Path: /login
|   Scheme: auto (http/https decided by Nmap http library)
|   No characteristic crash pattern observed.
|     This suggests the tested endpoint is not vulnerable or is patched,
|_    but this is not a guarantee (other RSC/Server Actions paths may exist).

PORT   STATE SERVICE
443/tcp open  https
| http-react2shell:
|   Path: /login
|   Scheme: auto (http/https decided by Nmap http library)
|   VULNERABLE: possible React2Shell (CVE-2025-55182 / CVE-2025-66478)
|     Evidence: HTTP 500 + digest-like pattern found in response
|_    Notes: high-fidelity side-channel; verify manually and patch immediately.

PORT   STATE SERVICE
443/tcp open  https
| http-react2shell:
|   Path: /login
|   Scheme: auto (http/https decided by Nmap http library)
|_  ERROR: HTTP request failed (connection reset by peer)