React2Shell Ultimate Scanner v2.0
Professional Next.js RSC RCE Vulnerability Scanner for CVE-2025-66478
🎯 Overview
React2Shell Ultimate is a comprehensive vulnerability scanner for CVE-2025-66478 - a critical Remote Code Execution (RCE) vulnerability affecting Next.js applications using React Server Components (RSC).
🆕 What's New in v2.0
Version 2.0 brings major enhancements and professional features:
- ✨ Enhanced God Mode - Advanced exploitation capabilities with improved command execution
- 🚀 Better WAF Bypass - More sophisticated techniques to evade security controls
- 🎨 Professional Web Platform - Full-featured web interface at www.react2shellscanner.com
- 🔧 Improved Error Handling - Better debugging and output display
- 📚 Professional Documentation - Comprehensive guides and API documentation
- 🛡️ Security Best Practices - Enhanced safety features and warnings
✨ Features
- 🔍 Multiple Scan Modes (Safe, RCE, Version, Comprehensive)
- 🛡️ Advanced WAF Bypass Techniques
- ⚡ God Mode: Interactive Shell & File Reading
- 🎯 Batch Scanning with Threading
- 📊 JSON Output for Automation
- 🔒 Safe Mode for Non-Invasive Detection
🚀 Quick Start
# Basic scan
python3 react2shell-ultimate.py -u https://target.com
# RCE mode
python3 react2shell-ultimate.py -u https://target.com --mode rce
# Execute command (God Mode)
python3 react2shell-ultimate.py -u https://target.com --exec "id"
# Interactive shell
python3 react2shell-ultimate.py -u https://target.com --shell
📦 Installation
# Clone the repository
git clone https://github.com/hackersatyamrastogi/react2shell-ultimate.git
cd react2shell-ultimate
# Install dependencies
pip3 install -r requirements.txt
# Make the script executable
chmod +x react2shell-ultimate.py
# Verify installation
python3 react2shell-ultimate.py --version
Requirements:
- Python 3.8 or higher
- requests >= 2.31.0
- urllib3 >= 2.0.0
- tqdm >= 4.65.0
Experience React2Shell Ultimate through our professional web interface:
Web Features:
- Interactive vulnerability scanner
- Real-time command execution (God Mode)
- Scan history and batch operations
- Professional admin dashboard
⚠️ Legal Disclaimer
FOR AUTHORIZED SECURITY TESTING ONLY
This tool is designed for:
- Authorized penetration testing
- Bug bounty programs
- Security research
- Educational purposes
You are fully responsible for any misuse of this tool.
📋 Version History
v2.0.0 (December 2025)
- Enhanced God Mode exploitation capabilities
- Improved WAF bypass techniques
- Better error handling and output display
- Professional web platform integration
- Comprehensive documentation updates
- Security best practices implementation
v1.1.0 (December 2025)
- Initial public release
- Core scanning functionality
- Basic God Mode features
- Multi-mode detection support
👨💻 Author
Satyam Rastogi
ghostn4444/cve-2025-55182
