# Clone the repository
git clone https://github.com/YOUR_USERNAME/react2shell-scanner.git
cd react2shell-scanner

# Install dependencies
pip install -r requirements.txt

# Scan a single target
python scanner.py -u https://example.com

# Scan multiple targets from file
python scanner.py -l hosts.txt

# Multi-threaded scan with JSON output
python scanner.py -l hosts.txt -t 20 -o results.json

# Scan with custom headers
python scanner.py -u https://example.com -H "Authorization: Bearer token" -H "Cookie: session=abc"

# Safe detection mode (no code execution)
python scanner.py -u https://example.com --safe-check

# Scan Windows targets
python scanner.py -u https://example.com --windows

# WAF bypass mode
python scanner.py -u https://example.com --waf-bypass

# Vercel-specific WAF bypass
python scanner.py -u https://example.com --vercel-waf-bypass

# Combine options
python scanner.py -l hosts.txt -t 50 --waf-bypass --windows -o results.json

╔═══════════════════════════════════════════════════════════════╗
║                    react2shell-scanner                        ║
║   CVE-2025-55182 & CVE-2025-66478 Detection Tool             ║
╚═══════════════════════════════════════════════════════════════╝

┌─────────────────────────────────────────────────────────────┐
│                    SCAN CONFIGURATION                       │
├─────────────────────────────────────────────────────────────┤
│  Targets:          5                                        │
│  Threads:          10                                       │
│  Detection Mode:   RCE PoC                                  │
│  Payload Type:     Unix (Shell)                             │
└─────────────────────────────────────────────────────────────┘

┌─────────────────────────────────────────────────────────────┐
│  TARGET: https://example.com                                │
├─────────────────────────────────────────────────────────────┤
│  Status:           🟢 SAFE                                  │
│  HTTP Status:      200                                      │
│  Response Time:    245.32ms                                 │
│  Server:           Vercel                                   │
└─────────────────────────────────────────────────────────────┘

═════════════════════════════════════════════════════════════════
                         SCAN SUMMARY
═════════════════════════════════════════════════════════════════
  Total Targets:     5
  Vulnerable:        0
  Safe:              5
  Total Scan Time:   2.34s
═════════════════════════════════════════════════════════════════

[
  {
    "url": "https://vulnerable-site.com",
    "vulnerable": true,
    "message": "RCE confirmed: X-Action-Redirect = /login?a=11111",
    "status_code": 200,
    "response_time": 342.15,
    "server": "Next.js",
    "payload_type": "rce-poc (Unix)",
    "x_action_redirect": "/login?a=11111"
  }
]