kindone09/cve-2025-55182Automated Python PoC scanner for CVE-2025-55182 targeting Next.js 16.0.6. Reads URLs from file, sends exploit requests, and displays responses for bug bounty and security testing workflows.
This repository contains a fully automated Python PoC scanner for CVE-2025-55182, a security vulnerability affecting Next.js 16.0.6. The tool allows security researchers and bug bounty hunters to test multiple targets at scale by simply providing a list of URLs.
urls.txt├── poc.py # Main exploit scanner
├── urls.txt # List of target URLs
└── README.md # Documentation
requestsrequests_toolbelt libraryurls.txt.The scanner is optimized for speed, automation, and clarity for bug bounty workflows.
python poc.py
Make sure that urls.txt is in the same directory. Example:
https://example1.com
https://example2.com
https://nextjs-target.com
A full demo video has been created showing:
urls.txtThis tool is for educational purposes and authorized testing only. Do NOT use it on systems you do not own or have explicit permission to test.
Pull requests, improvements, and optimizations are welcome!
Created by Kindone, a security researcher and bug bounty hunter focusing on advanced web vulnerabilities.