🔍 React2Shell Dork Scanner

---

🚨 About the Vulnerability

React2Shell is a critical Remote Code Execution (RCE) vulnerability that affects:

Target	Versi Vulnerable
⚛️ react-server-dom-webpack	19.0.0, 19.1.0, 19.1.1, 19.2.0
⚛️ react-server-dom-turbopack	19.0.0, 19.1.0, 19.1.1, 19.2.0
⚛️ react-server-dom-parcel	19.1.0, 19.1.1, 19.2.0
🔺 Next.js	15.0.0-15.0.4, 16.0.0-16.0.6

⚠️ CVSS Score: 10.0 (CRITICAL) - Unauthenticated RCE!

---

✨ Features

Feature	Description
🔍 Google Dorking	Automatically find Next.js/React targets via Google
💾 Save Targets	Save search results to targets.txt
🎯 Vuln Scanning	Test vulnerability on each target
📝 Vuln Report	Save vulnerable targets to vulnerable.txt
⚡ Multi-threading	Fast scanning with concurrent requests
🛡️ Safe Detection	Side-channel detection (without exploitation)

---

📦 Installation

# Clone repository
git clone https://github.com/yourusername/react2shell-dork-scanner.git
cd react2shell-dork-scanner

# Install dependencies
pip install -r requirements.txt

🚀 Quick Start

1️⃣ Test Single URL

python3 dork_scanner.py --test-url https://target.com

2️⃣ Google Dork Search

# Custom dork
python3 dork_scanner.py --dork "inurl:/_next site:example.com"

# Template bawaan
python3 dork_scanner.py --template nextjs --limit 50

3️⃣ Scan from a File

python3 dork_scanner.py --scan-file targets.txt

4️⃣ Full Auto (Dork + Scan)

python3 dork_scanner.py --dork "inurl:/_next" --auto-scan

📖 CLI Options

Google Dork Options:
  --dork, -d          Custom Google dork query
  --template, -t      Template: nextjs, react, rsc
  --limit, -l         Max results (default: 50)
  --delay             Delay antar request (default: 3.0s)

Scanning Options:
  --scan-file, -f     Scan dari file
  --test-url, -u      Test single URL
  --auto-scan         Auto scan setelah dorking
  --threads           Concurrent threads (default: 5)
  --timeout           Request timeout (default: 10s)

Output Options:
  --output-targets    File untuk targets (default: targets.txt)
  --output-vuln       File untuk vulns (default: vulnerable.txt)

---

🎯 Dork Templates

Template	Dorks
nextjs	inurl:"/_next/static", intext:"__NEXT_DATA__"
react	inurl:"/static/js/main" intext:"react"
rsc	inurl:"/api/" intext:"server-action"

---

📊 Output Files

File	Contents
📄 targets.txt	All URLs from Google dork
🔴 vulnerable.txt	Vulnerable URLs

---

⚠️ Disclaimer

⚠️ LEGAL WARNING

This tool is ONLY for security testing on targets for which you have official permission. Use without authorization is ILLEGAL.

---

🔗 References

• 📋 CVE-2025-55182
• 📋 CVE-2025-66478
• 🔬 Assetnote Research

---

🔒 Stay Secure. Scan Responsibly. 🔒