itsismarcos/bot-exploit-cve-2025-55182Educational scanner for CVE-2025-55182 (React2Shell) vulnerability detection in React Server Components/Next.js apps. Uses dorks for target discovery and non-destructive payloads to identify RCE indicators.
🔐 Educational tool for detection of vulnerability CVE-2025-55182 (React2Shell) in applications that use React Server Components / Next.js.
CVE-2025-55182, known as React2Shell, is a critical vulnerability affecting React Server Components (RSC).
It can allow remote code execution (RCE) if dangerous data is processed unsafely on the server side.
This project was created for the purposes of:
✔️ Search for possible React/Next.js applications using dorks
✔️ Enumeration of endpoints related to Server Components
✔️ Sending non-destructive payload to detect anomalous behavior
✔️ Identification of possible vulnerability indicators
✔️ Generation of target lists and reports in and files
.txt.jsonThe tool sends controlled requests to common endpoints of React Server Components applications and analyzes:
process, Module, etc.)⚠️ No actual exploitation is needed to identify risk.
pip install requests beautifulsoup4
python scanner.py