🔥React2Shell Toolkit-CVE-2025-55182 & CVE-2025-66478

🎯 About CVE-2025-55182 & CVE-2025-66478

🐛 What is React2Shell?

React2Shell is a critical unauthenticated Remote Code Execution (RCE) vulnerability affecting React Server Components (RSC) and Next.js applications.

🎭 Attack Vector

// Attacker sends malicious Flight protocol payload
POST / HTTP/1.1
Next-Action: exploit
Content-Type: multipart/form-data

{"__proto__": "pollution", "then": "gadget_chain"} 
    ↓
Unsafe Deserialization
    ↓
Prototype Pollution
    ↓
💥 Remote Code Execution 💥

🎯 Affected Versions

• React: 19.0.0, 19.1.0, 19.1.1, 19.2.0
• Next.js: 15.x, 16.x (with App Router)
• Frameworks: React Router, Waku, Vite RSC, Parcel, RedwoodSDK

✅ Patched Versions

• React: 19.0.1+, 19.1.2+, 19.2.1+
• Next.js: 15.0.5+, 15.1.9+, 15.2.6+, 16.0.7+

📸 Proof of Concept

🛠️ Toolkit Components

This repository contains 4 professional-grade tools for CVE-2025-55182 detection and exploitation:

⚡ Quick Start

📦 Installation

# Clone the repository
git clone https://github.com/cybertechajju/R2C-CVE-2025-55182-66478.git
cd R2C-CVE-2025-55182-66478

# Install Python dependencies
pip install -r requirements.txt
pip install -r exploits/requirements.txt

🚀 Usage Examples

1️⃣ Nuclei Scanner (Fastest Detection)

# Scan single target
nuclei -t nuclei-templates/cve-2025-55182.yaml -u https://target.com

# Scan multiple targets
nuclei -t nuclei-templates/cve-2025-55182.yaml -l targets.txt

2️⃣ Shodan Scanner (Mass Discovery)

# Interactive wizard mode
python exploits/shodan_scanner_advanced.py

# Or with API key directly
python exploits/shodan_scanner_advanced.py --api YOUR_SHODAN_API_KEY

3️⃣ Bash Exploit (Direct Exploitation)

# Interactive mode
bash exploits/scanner_advanced.sh -i

# Quick exploitation
bash exploits/scanner_advanced.sh -d https://target.com -p 2

4️⃣ Burp Extension (Manual Testing)

1. Open Burp Suite → Extensions → Add
2. Select burp-extension/React2Shell_Burp.py
3. Check "React2Shell Pro" tab for GUI

📁 Repository Structure

cve-2025-55182/
├── 📂 nuclei-templates/          # Nuclei YAML templates
│   └── cve-2025-55182.yaml       # Advanced detection template
├── 📂 exploits/                  # Exploitation tools
│   ├── shodan_scanner_advanced.py   # Shodan mass scanner
│   ├── scanner_advanced.sh          # Bash exploitation framework
│   └── requirements.txt             # Python dependencies
├── 📂 burp-extension/            # Burp Suite extension
│   ├── React2Shell_Burp.py       # Main extension (30+ payloads)
│   ├── payloads.json             # Payload library
│   └── detection_rules.json      # Detection patterns
├── 📂 burp bechek/               # BCheck files for Burp Scanner
│   ├── CVE-2025-55182-React2Shell-Active.bcheck
│   └── CVE-2025-66478-NextJS-React2Shell-Active.bcheck
└── 📄 README.md                  # This file

🎨 Features Showcase

✨ Nuclei Template Features

• ✅ 5 Exploitation Payloads: Linux, Windows, alternative endpoints
• ✅ Mathematical Validation: 41 * 271 = 11111 (zero false positives)
• ✅ Multi-Stage Detection: Framework fingerprinting → RSC discovery → RCE validation
• ✅ Multiple Matchers: Math validation, error patterns, execution proof

🔥 Shodan Scanner Features

• ✅ 50+ Shodan Queries: Maximum vulnerable target discovery
• ✅ Smart Extraction: Both IPs and domain names
• ✅ Interactive Wizard: Guided setup for beginners
• ✅ Cyberpunk UI: Neon-themed terminal with animations
• ✅ Batch Scanning: Multi-threaded target scanning
• ✅ JSON Reports: Detailed vulnerability reports

💪 Bash Exploit Features

• ✅ 8 Predefined Payloads: System info, AWS metadata, container detection, etc.
• ✅ Interactive Mode: Menu-driven exploitation
• ✅ Multi-Target Scanning: Scan from file list
• ✅ Rich Output: Color-coded results with animations
• ✅ Error Analysis: Detailed failure diagnostics

🚀 Burp Extension Features

• ✅ 30+ Payload Library: Organized in 5 categories
• ✅ Dual Scanners: Passive monitoring + active exploitation
• ✅ 8-Tab GUI: Dashboard, scanner, exploitation, payloads, results, config, about
• ✅ Burp Collaborator: Out-of-band RCE confirmation
• ✅ Export Options: JSON and CSV reports
• ✅ Confidence Scoring: Certain (95%), Firm (75%), Tentative (50%)

📚 Documentation

📖 Detailed Guides

• Nuclei Template Usage
• Shodan Scanner Guide
• Burp Extension Manual
• BCheck Documentation

🎓 Learning Resources

• Understanding React Server Components
• Flight Protocol Deep Dive
• Prototype Pollution Explained

⚠️ Legal & Ethical Disclaimer

╔═══════════════════════════════════════════════════════════════╗
║                    ⚠️  CRITICAL WARNING ⚠️                     ║
╚═══════════════════════════════════════════════════════════════╝

This toolkit is for AUTHORIZED SECURITY TESTING ONLY.

⚖️  Legal Use:
   ✅ Penetration testing with written authorization
   ✅ Bug bounty programs within defined scope
   ✅ Security research on owned infrastructure
   ✅ Educational purposes in controlled labs

❌ Illegal Activities:
   ⛔ Unauthorized system access
   ⛔ Malicious exploitation
   ⛔ Data theft or destruction
   ⛔ Deploying malware

By using this toolkit, you agree to use it ethically and legally.
Unauthorized access to computer systems is illegal under:
• Computer Fraud and Abuse Act (CFAA) - USA
• Computer Misuse Act - UK
• Similar laws worldwide

🔒 You are solely responsible for your actions.

🤝 Connect With Me

🌟 Star History

If this toolkit helped you, please ⭐ star this repository!

📝 Credits & Acknowledgments

🙏 Special Thanks

• React Security Team - For responsible disclosure
• ProjectDiscovery - For Nuclei platform
• PortSwigger - For Burp Suite
• Emre Davut - Original Shodan scanner inspiration
• Security Research Community - For CVE analysis and PoCs

🏆 Original Research

• Assetnote React2Shell Scanner
• Maple3142's PoC
• React Official Advisory

📄 License

For Educational and Authorized Security Testing Only

No warranty or liability provided. Use at your own risk.