🔥React2Shell Toolkit-CVE-2025-55182 & CVE-2025-66478

🚨 Critical RCE in React Server Components & Next.js 🚨

Professional Red Team Toolkit for CVE-2025-55182 Detection & Exploitation

🔍 Features • ⚡ Quick Start • 📚 Documentation • 🤝 Connect

🎯 About CVE-2025-55182 & CVE-2025-66478

🐛 What is React2Shell?

React2Shell is a critical unauthenticated Remote Code Execution (RCE) vulnerability affecting React Server Components (RSC) and Next.js applications.

CVE ID	Component	CVSS Score	Impact
CVE-2025-55182	React Server Components	10.0 🔴	Complete Server Takeover
CVE-2025-66478	Next.js Server Actions	10.0 🔴	Full System Compromise

🎭 Attack Vector

// Attacker sends malicious Flight protocol payload
POST / HTTP/1.1
Next-Action: exploit
Content-Type: multipart/form-data

{"__proto__": "pollution", "then": "gadget_chain"} 
    ↓
Unsafe Deserialization
    ↓
Prototype Pollution
    ↓
💥 Remote Code Execution 💥

🎯 Affected Versions

React: 19.0.0, 19.1.0, 19.1.1, 19.2.0
Next.js: 15.x, 16.x (with App Router)
Frameworks: React Router, Waku, Vite RSC, Parcel, RedwoodSDK

✅ Patched Versions

React: 19.0.1+, 19.1.2+, 19.2.1+
Next.js: 15.0.5+, 15.1.9+, 15.2.6+, 16.0.7+

📸 Proof of Concept

🎯 Live Exploitation Demonstrations

🔓 Successful RCE Exploitation

POC 3 - RCE Demonstration

Command execution via React2Shell vulnerability

💥 Vulnerability Confirmation

POC 4 - Exploitation Proof

Server compromise through Flight protocol

⚠️ These screenshots demonstrate real exploitation in controlled environments
Use responsibly and only with proper authorization

🛠️ Toolkit Components

This repository contains 4 professional-grade tools for CVE-2025-55182 detection and exploitation:

🔍 Nuclei Template

Advanced Scanner

✅ 5 Payloads
✅ Zero False Positives
✅ Math Validation
✅ Batch Scanning

🐍 Shodan Scanner

Target Discovery

✅ Automated Search
✅ Mass Scanning
✅ 50+ Shodan Queries
✅ Interactive Wizard

💻 Bash Exploit

CLI Framework

✅ 8 Predefined Payloads
✅ Interactive Mode
✅ Multi-Target Support
✅ Cyberpunk UI

🔧 Burp Extension

Manual Testing

✅ 30+ Payloads
✅ Active + Passive Scan
✅ GUI Interface
✅ Collaborator Integration

⚡ Quick Start

📦 Installation

# Clone the repository
git clone https://github.com/cybertechajju/R2C-CVE-2025-55182-66478.git
cd R2C-CVE-2025-55182-66478

# Install Python dependencies
pip install -r requirements.txt
pip install -r exploits/requirements.txt

🚀 Usage Examples

1️⃣ Nuclei Scanner (Fastest Detection)

# Scan single target
nuclei -t nuclei-templates/cve-2025-55182.yaml -u https://target.com

# Scan multiple targets
nuclei -t nuclei-templates/cve-2025-55182.yaml -l targets.txt

2️⃣ Shodan Scanner (Mass Discovery)

# Interactive wizard mode
python exploits/shodan_scanner_advanced.py

# Or with API key directly
python exploits/shodan_scanner_advanced.py --api YOUR_SHODAN_API_KEY

3️⃣ Bash Exploit (Direct Exploitation)

# Interactive mode
bash exploits/scanner_advanced.sh -i

# Quick exploitation
bash exploits/scanner_advanced.sh -d https://target.com -p 2

4️⃣ Burp Extension (Manual Testing)

Open Burp Suite → Extensions → Add
Select burp-extension/React2Shell_Burp.py
Check "React2Shell Pro" tab for GUI

📁 Repository Structure

cve-2025-55182/
├── 📂 nuclei-templates/          # Nuclei YAML templates
│   └── cve-2025-55182.yaml       # Advanced detection template
├── 📂 exploits/                  # Exploitation tools
│   ├── shodan_scanner_advanced.py   # Shodan mass scanner
│   ├── scanner_advanced.sh          # Bash exploitation framework
│   └── requirements.txt             # Python dependencies
├── 📂 burp-extension/            # Burp Suite extension
│   ├── React2Shell_Burp.py       # Main extension (30+ payloads)
│   ├── payloads.json             # Payload library
│   └── detection_rules.json      # Detection patterns
├── 📂 burp bechek/               # BCheck files for Burp Scanner
│   ├── CVE-2025-55182-React2Shell-Active.bcheck
│   └── CVE-2025-66478-NextJS-React2Shell-Active.bcheck
└── 📄 README.md                  # This file

🎨 Features Showcase

✨ Nuclei Template Features

✅ 5 Exploitation Payloads: Linux, Windows, alternative endpoints
✅ Mathematical Validation: 41 * 271 = 11111 (zero false positives)
✅ Multi-Stage Detection: Framework fingerprinting → RSC discovery → RCE validation
✅ Multiple Matchers: Math validation, error patterns, execution proof

🔥 Shodan Scanner Features

✅ 50+ Shodan Queries: Maximum vulnerable target discovery
✅ Smart Extraction: Both IPs and domain names
✅ Interactive Wizard: Guided setup for beginners
✅ Cyberpunk UI: Neon-themed terminal with animations
✅ Batch Scanning: Multi-threaded target scanning
✅ JSON Reports: Detailed vulnerability reports

💪 Bash Exploit Features

✅ 8 Predefined Payloads: System info, AWS metadata, container detection, etc.
✅ Interactive Mode: Menu-driven exploitation
✅ Multi-Target Scanning: Scan from file list
✅ Rich Output: Color-coded results with animations
✅ Error Analysis: Detailed failure diagnostics

🚀 Burp Extension Features

✅ 30+ Payload Library: Organized in 5 categories
✅ Dual Scanners: Passive monitoring + active exploitation
✅ 8-Tab GUI: Dashboard, scanner, exploitation, payloads, results, config, about
✅ Burp Collaborator: Out-of-band RCE confirmation
✅ Export Options: JSON and CSV reports
✅ Confidence Scoring: Certain (95%), Firm (75%), Tentative (50%)

📚 Documentation

📖 Detailed Guides

Nuclei Template Usage

Most Popular

R2C-CVE-2025-55182-66478