Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
react2shell-ultimate — React2Shell Ultimate - The most comprehensive CVE-2025-66478 Scanner for Next.js RSC RCE vulnerability. Multi-mode detection, WAF bypass, local scanning. | Kitploit
Tools/GitHubGitHub/hackersatyamrastogi/react2shell-ultimate
Vulnerability ScannersPayload GenerationExploitationWeb Application ExploitationWAF BypassPenetration TestingCommand and Control
GitHubhackersatyamrastogi/react2shell-ultimate

react2shell-ultimate

React2Shell Ultimate - The most comprehensive CVE-2025-66478 Scanner for Next.js RSC RCE vulnerability. Multi-mode detection, WAF bypass, local scanning.

View RepositoryWebsite
1523189 months agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

React2Shell Ultimate Scanner v2.0

Professional Next.js RSC RCE Vulnerability Scanner for CVE-2025-66478

Version Python License Stars

🎯 Overview

React2Shell Ultimate is a comprehensive vulnerability scanner for CVE-2025-66478 - a critical Remote Code Execution (RCE) vulnerability affecting Next.js applications using React Server Components (RSC).

🆕 What's New in v2.0

Version 2.0 brings major enhancements and professional features:

  • ✨ Enhanced God Mode - Advanced exploitation capabilities with improved command execution
  • 🚀 Better WAF Bypass - More sophisticated techniques to evade security controls
  • 🎨 - Full-featured web interface at
Professional Web Platform
www.react2shellscanner.com
  • 🔧 Improved Error Handling - Better debugging and output display
  • 📚 Professional Documentation - Comprehensive guides and API documentation
  • 🛡️ Security Best Practices - Enhanced safety features and warnings
  • ✨ Features

    • 🔍 Multiple Scan Modes (Safe, RCE, Version, Comprehensive)
    • 🛡️ Advanced WAF Bypass Techniques
    • ⚡ God Mode: Interactive Shell & File Reading
    • 🎯 Batch Scanning with Threading
    • 📊 JSON Output for Automation
    • 🔒 Safe Mode for Non-Invasive Detection

    🚀 Quick Start

    root@kitploit:~
    # Basic scan
    python3 react2shell-ultimate.py -u https://target.com
    
    # RCE mode
    python3 react2shell-ultimate.py -u https://target.com --mode rce
    
    # Execute command (God Mode)
    python3 react2shell-ultimate.py -u https://target.com --exec "id"
    
    # Interactive shell
    python3 react2shell-ultimate.py -u https://target.com --shell
    

    📦 Installation

    root@kitploit:~
    # Clone the repository
    git clone https://github.com/hackersatyamrastogi/react2shell-ultimate.git
    cd react2shell-ultimate
    
    # Install dependencies
    pip3 install -r requirements.txt
    
    # Make the script executable
    chmod +x react2shell-ultimate.py
    
    # Verify installation
    python3 react2shell-ultimate.py --version
    

    Requirements:

    • Python 3.8 or higher
    • requests >= 2.31.0
    • urllib3 >= 2.0.0
    • tqdm >= 4.65.0

    🌐 Web Platform

    Experience React2Shell Ultimate through our professional web interface:

    • 🌐 Live Scanner: www.react2shellscanner.com
    • 🔌 API Endpoint: api.react2shellscanner.com

    Web Features:

    • Interactive vulnerability scanner
    • Real-time command execution (God Mode)
    • Scan history and batch operations
    • Professional admin dashboard

    ⚠️ Legal Disclaimer

    FOR AUTHORIZED SECURITY TESTING ONLY

    This tool is designed for:

    • Authorized penetration testing
    • Bug bounty programs
    • Security research
    • Educational purposes

    You are fully responsible for any misuse of this tool.

    📋 Version History

    v2.0.0 (December 2025)

    • Enhanced God Mode exploitation capabilities
    • Improved WAF bypass techniques
    • Better error handling and output display
    • Professional web platform integration
    • Comprehensive documentation updates
    • Security best practices implementation

    v1.1.0 (December 2025)

    • Initial public release
    • Core scanning functionality
    • Basic God Mode features
    • Multi-mode detection support

    👨‍💻 Author

    Satyam Rastogi

    • 🌐 Website: satyamrastogi.com
    • 💼 GitHub: @hackersatyamrastogi
    • 🐦 Twitter: @hackersatyamrastogi

    Made with ❤️ by Satyam Rastogi

    Download Tool