Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
middleforce — Simple script to attempt a Bypass on a server possibly vulnerable to CVE-2025-29927 (Next.js Middleware) | Kitploit
Tools/GitHubGitHub/diogolourencodev/middleforce
Vulnerability ScannersExploitationWeb Application ExploitationWeb SecurityPenetration Testing
GitHubdiogolourencodev/middleforce

middleforce

Simple script to attempt a Bypass on a server possibly vulnerable to CVE-2025-29927 (Next.js Middleware)

View Repository
110 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

MiddleForce

Python 3.x License MIT CVE-2025-29927

🔍 Overview

MiddleForce is a specialized security testing tool designed to detect and exploit the CVE-2025-29927 vulnerability in Next.js middleware. This tool helps security professionals identify applications vulnerable to middleware bypass attacks.

🚀 Features

  • Middleware Bypass Detection: Automatically tests for Next.js middleware bypass vulnerabilities
  • Colored Output: Clear visual indicators for vulnerable and non-vulnerable routes
  • Simple CLI Interface: Easy-to-use command line arguments
  • Multiple Headers Testing: Tests various bypass techniques

📋 Requirements

  • Python 3.x
  • Required packages:
    • colorama
    • requests
    • argparse

💻 Installation

Automatic Installation (Linux)

root@kitploit:~
git clone https://github.com/diogolourencodev/middleforce.git
cd middleforce
chmod +x install.sh
./install.sh

Manual Installation

root@kitploit:~
git clone https://github.com/diogolourencodev/middleforce.git
cd middleforce
pip install -r requirements.txt

🔧 Usage

root@kitploit:~
# Basic usage
python3 middleforce.py -t http://example.com/api/dashboard

# If installed globally on Linux
middleforce -t http://example.com/api/dashboard

📊 Output Interpretation

  • Green Output: Vulnerable route detected - middleware bypass successful
  • Red Output: Not vulnerable - either public route or middleware working correctly
  • Cyan Output: Informational messages or unexpected responses

🔒 Security Implications

CVE-2025-29927 allows attackers to bypass Next.js middleware protections by manipulating specific HTTP headers. This can lead to unauthorized access to protected routes, API endpoints, and sensitive data.

🤝 Contributing

Contributions are welcome! Feel free to submit pull requests or open issues to improve the tool.

👤 Author

Created by Diogo Lourenço

If you found this tool useful, please consider giving it a star ⭐

Download Tool