CVE-2025-29927 - Next.js Middleware Authentication Bypass (Advanced Bypass)

🔥 Overview

An advanced PoC for CVE-2025-29927, allowing authentication bypass in Next.js Middleware by manipulating specific headers.
This template enhances WAF evasion and security bypass techniques.

🚀 Features

✅ Multi-Request & HTTP Method Variation → Uses GET, POST to maximize detection.
✅ WAF Evasion → Includes X-Forwarded-For, X-Original-URL, X-Rewrite-URL, and more.
✅ Randomized Query Parameters → Prevents caching issues and improves bypass reliability.
✅ Multiple Response Matching → Detects 200 OK, Next.js headers, and sensitive content.

🛠️ Usage

1️⃣ Install → go install -v github.com/projectdiscovery/nuclei/v2/cmd/nuclei@latest
2️⃣ Template → git clone https://github.com/lediusa/CVE-2025-29927.git
3️⃣ Run Scan → nuclei -t CVE-2025-29927.yaml -u http://target.com

📌 Note: This template is for security research & authorized testing only.