Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-55182-React-RSC-Exploit — Basic Proof of Concept (Poc) Exploit for React RSC - CVE-2025-55182 | Kitploit
Tools/GitHubGitHub/lutraat/cve-2025-55182-react-rsc-exploit
Vulnerability AnalysisExploitationWeb Application ExploitationWAF BypassLearning & EducationPayload Development
GitHublutraat/cve-2025-55182-react-rsc-exploit

CVE-2025-55182-React-RSC-Exploit

Basic Proof of Concept (Poc) Exploit for React RSC - CVE-2025-55182

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share
View Repository
5 months agoNot yet reviewed

CVE-2025-55182 // REACT SERVER COMPONENTS RCE

[ OVERVIEW ] Exploit PoC for CVE-2025-55182. Targets unsafe versions and input validation functions vulnerabilities in React Server Components.

[ TECHNICAL MECHANISM ]

  • Vector : Prototype pollution via $1:proto:then during hydration.
  • Payload : RCE via process.mainModule.require('child_process').
  • Exfil : Data leakage through X-Action-Redirect headers.

[ REQUIREMENTS ]

  • python3
  • requests

[ STRATEGIES ]

  • standard : Direct child_process execution.
  • obfuscated : Hex encoding bypass feature for basic WAF pattern matching.

[ DISCLAIMER ] For authorized security research and educational purposes only.

[ USAGE ]

Basic check

python3 exploit.py -t -c "id"

WAF bypass attempt

python3 exploit.py -t -c "cat /etc/passwd (RCE Command)" -s obfuscated

Download Tool