Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
react2shell-scanner-rust — Detect CVE-2025-55182 & CVE-2025-66478 in Next.js/RSC applications (Rust) | Kitploit
Tools/GitHubGitHub/ancs21/react2shell-scanner-rust
Vulnerability ScannersExploitationWeb Application ExploitationWAF BypassWeb SecurityPenetration Testing
GitHubancs21/react2shell-scanner-rust

react2shell-scanner-rust

Detect CVE-2025-55182 & CVE-2025-66478 in Next.js/RSC applications (Rust)

View Repository
18 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

react2shell-scanner-rust

Detect CVE-2025-55182 & CVE-2025-66478 in Next.js/RSC applications.

Install

root@kitploit:~
cargo build --release

Usage

root@kitploit:~
./scanner -u https://example.com
./scanner -l hosts.txt -t 20 -o results.json
./scanner -u https://example.com --crawl --max-depth 3
./scanner -u https://example.com --proxy http://127.0.0.1:8080
./scanner -u https://example.com --safe-check
./scanner -u https://example.com --waf-bypass
./scanner -u https://example.com --windows

Options

root@kitploit:~
-u, --url           Single URL to check
-l, --list          File with hosts (one per line)
-t, --threads       Concurrent threads (default: 10)
-o, --output        Output JSON file
-k, --insecure      Skip SSL verification
-H, --header        Custom header
-v, --verbose       Show response details
-q, --quiet         Only show vulnerable hosts
--safe-check        Side-channel detection (no RCE)
--windows           PowerShell payload
--waf-bypass        Add junk data to evade WAF
--waf-bypass-size   Junk size in KB (default: 128)
--vercel-waf-bypass Vercel WAF bypass variant
--path              Custom path to test
--path-file         File with paths
--crawl             Crawl site before scanning
--max-depth         Crawl depth (default: 2)
--max-pages         Max pages to crawl (default: 100)
--ignore-robots     Ignore robots.txt
--proxy             Proxy URL (http/socks5)

Credits

  • assetnote/react2shell-scanner - Original Python implementation
  • @maple3142 - RCE PoC
  • Assetnote - Research Team
  • @xEHLE_ - Header reflection
  • @Nagli
Download Tool