hunter24x24/cve-2025-55182-massCommand-line scanner for detecting and exploiting CVE-2025-55182 (RCE) in Next.js React Server Components. Supports batch scanning from domain lists with customizable command execution.
Simple command-line tool for detecting and exploiting CVE-2025-55182 (React Server Components RCE) in Next.js applications.
chmod +x scanner.sh && chmod +x automate.sh
# Scan with default command (id)
bash automate.sh -l domains.txt
## Disclaimer
This tool is for **educational and authorized security testing purposes only**. Do not use against systems you don't own or have permission to test.
## References
- [CVE-2025-55182](https://cloud.projectdiscovery.io/library/CVE-2025-55182)
- [React Security Advisory](https://react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components)