Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Tools/GitHubGitHub/abdozkaya/rsc-security-auditor
Static AnalysisVulnerability ScannersCode AnalysisWeb SecurityDevSecOpsLearning & Education
GitHubabdozkaya/rsc-security-auditor

rsc-security-auditor

🛡️ Audit your Next.js & React Server Components stack for critical vulnerabilities (CVE-2025-66478, CVE-2025-55184). Detects risks & generates fix commands. 100% Client-side.

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
View RepositoryWebsite
559 months agoNot yet reviewed
Share

🛡️ RSC Security Auditor

License Next.js Privacy

Detect critical security vulnerabilities (CVE-2025-66478, CVE-2025-55184) in your Next.js & React Server Components stack.

🚨 Urgent: Recent disclosures (Dec 2025) have revealed critical DoS and RCE vulnerabilities in React Server Components. This tool helps you audit your package.json instantly.

App Screenshot

⚡ Features

  • 🔒 Privacy First: 100% Client-side. Your package.json data never leaves your browser.
  • 🧠 Smart Analysis: Detects specific vulnerable version ranges for next, react, and .
react-dom
  • 🩹 Auto-Remediation: Generates ready-to-use upgrade commands (npm, pnpm, yarn, bun) to fix issues.
  • ✨ Modern UI: Built with Next.js 15, Tailwind CSS, and Vercel's Geist font.
  • 📡 Live Vulnerability DB: Architecture allows for easy updates as new CVEs are discovered.

    • 🎯 Detected Vulnerabilities

    This tool currently checks for the following disclosures:

    CVE IDSeverityDescription
    CVE-2025-66478🔴 CriticalRemote Code Execution (RCE) via crafted RSC payload.
    CVE-2025-67779🟠 HighIncomplete fix for previous DoS attacks (Infinite Loop).
    CVE-2025-55184🟠 HighDenial of Service (DoS) via malicious HTTP requests.
    CVE-2025-55183🟡 MediumSource Code Disclosure in Server Actions.

    🚀 Getting Started

    To run this project locally:

    1. Clone the repository

      root@kitploit:~
      git clone https://github.com/abdozkaya/rsc-security-auditor.git
cd rsc-security-auditor

    2. Install dependencies

      root@kitploit:~
      npm install
# or
pnpm install

    3. Run the development server

      root@kitploit:~
      npm run dev

    4. Open http://localhost:3000 with your browser.

    🛠️ Tech Stack

    • Framework: Next.js 15 (App Router)
    • Styling: Tailwind CSS
    • Icons: Lucide React
    • Font: Geist Sans & Mono

    🤝 Contributing

    Contributions are welcome! If you find a new vulnerability related to RSC, please update lib/vulnerability-db.ts and open a Pull Request.

    1. Fork the Project
    2. Create your Feature Branch (git checkout -b feature/NewCVE)
    3. Commit your Changes (git commit -m 'Add CVE-202X-XXXX')
    4. Push to the Branch (git push origin feature/NewCVE)
    5. Open a Pull Request

    👤 Author

    Abdullah Özkaya

    • X: @ozkayabd
    • GitHub: @abdozkaya

    📄 License

    This project is licensed under the MIT License - see the LICENSE file for details.

    Download Tool