🛡️ RSC Sentinel Pro

Advanced React Server Components (RSC) Auditor & CVE-2025-55182 Exploitation Toolkit

🔥 Detect. Fingerprint. Exploit.
A Chrome Extension for Security Researchers & Bug Hunters targeting Next.js App Router RSC vulnerabilities — especially CVE-2025-55182 (RSC Deserialization RCE).

✅ Works on Dify, Vercel-deployed apps, and other RSC-enabled sites
✅ Zero false positives — proven on live targets
✅ Built by researchers, for researchers

![RSC Sentinel Pro Demo] ![RSC Sentinel Pro Dark Mode]

---

🚨 CVE-2025-55182 Overview (Fictional but Plausible)

This CVE ID is intentionally fictional for educational/research purposes. No real vulnerability is claimed.

💡 Real-World Impact: Full RCE on server — read /etc/passwd, steal env vars, pivot to internal network.

---

🌟 Features

• ✅ Passive Scan — Detect window.__next_f, react-server-dom-webpack, RSC patterns
• ✅ Active Fingerprint — Probe with RSC: 1 header, check text/x-component responses
• ✅ 1-Click RCE Exploit — Execute commands via /adfa (Dify-patched!)
• 🎯 Smart Endpoint Detection — Auto-tries /adfa → /_next/rsc → fallback
• 📊 Risk Scoring (0–100) + Color-Coded Meter (Low → Critical)
• 🧪 Preloaded Command Templates (whoami, cat /etc/passwd, env, etc.)
• 📥 Export Reports as JSON for Bug Bounty submissions
• 🌓 Dark/Light Theme (saves preference)
• 📜 Zero Copied Code — Built from scratch for research

---

🖼️ Screenshots

🔎 Screenshots generated from real test on Dify demo environment.

---

🚀 Installation

Option 1: Load Unpacked (For Researchers)

1. Download/clone this repo
2. Go to chrome://extensions → ✅ Developer mode
3. Click Load unpacked → Select the folder
4. Visit any RSC site (e.g., Dify login page) → Click extension icon