Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
r2rs — Interactive Ruby shell for authorized CVE-2025-55182 (react2shell) testing | Kitploit
Tools/GitHubGitHub/hakkuri01/r2rs
ExploitationShellcodeWeb Application ExploitationPenetration TestingCommand and ControlRemote Access Tool
GitHubhakkuri01/r2rs

r2rs

Interactive Ruby shell for authorized CVE-2025-55182 (react2shell) testing

View Repository
12 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share
root@kitploit:~
__________ __________________  _________
\______   \\_____  \______   \/   _____/
 |       _/ /  ____/|       _/\_____  \ 
 |    |   \/       \|    |   \/        \
 |____|_  /\_______ \____|_  /_______  /
        \/         \/      \/        \/ 

(react2rubyshell)

[!IMPORTANT]

DISCLAIMER: The burden of responsibility for any actions taken with this script falls squarely on the individual executing it. Use this only against systems you own or have explicit permission to test.

Requirements

  • Ruby locally
  • Ruby standard libraries: json, net/http, optparse, readline, securerandom, shellwords, uri

No external gems required.

Installation

Clone the repository, enter the project directory, and run the script with Ruby:

root@kitploit:~
git clone https://github.com/hakkuri01/r2rs.git
cd r2rs
ruby r2rs.rb -h

Usage

root@kitploit:~
ruby r2rs.rb -t TARGET [options]

-t, --target TARGET    Target IP, hostname, or URL (required)
-p, --port PORT        Target HTTP port
-nb, --no-banner       Drop the startup banner
-h, --help             Show command usage

Examples:

root@kitploit:~
ruby r2rs.rb -t 127.0.0.1
ruby r2rs.rb -t 127.0.0.1 -p 3000
ruby r2rs.rb -t http://127.0.0.1:3000
ruby r2rs.rb -t "https://example.test/app?debug=1" -p 8443
ruby r2rs.rb -nb -t 127.0.0.1 -p 3000

Target Handling

If TARGET does not include a scheme, http:// is assumed. HTTPS URLs are supported.

If the target URL contains shell-special characters like ?, quote it:

root@kitploit:~
ruby r2rs.rb -t "https://127.0.0.1/test?x=1"

Active Session Behavior

Before launching the active session, the tool validates the target with a probe command. If validation fails, it prints an error and exits.

The session is HTTP-backed: local Ruby reuses one HTTP connection, sends commands through the existing request path, and displays the response in an interactive Readline prompt. The prompt context is initialized at startup and refreshed after each command using the remote user, hostname, and working directory.

Type exit or press Ctrl-C to close the session.

Limitations

This mode intentionally does not require target-side Ruby, Python, socat, script, or any other PTY helper. Because of that, it is not a true remote PTY. Full-screen and TTY-sensitive programs such as vim, nano, su, ssh, and interactive password prompts may still be limited.

Download Tool