RSC Hunter

A powerful, multi-threaded scanner and exploit tool for React Server Component (RSC) vulnerabilities. This tool is designed to identify and exploit RCE vulnerabilities in RSC implementations, supporting various bypass techniques and strategies.

Note: Due to the enormous complexity of maintaining a full interactive shell and other heavy features, we have decided to remove them. This project now focuses strictly on edge-case handling, behavioral analysis, and reliable detection of RSC vulnerabilities. We believe a simpler, more focused tool serves the community better.

Features

• Multi-Strategy Scanning: Automatically tries multiple exploit strategies (Assetnote, Msanft, Split Payload).
• Multi-Threading: Scans large lists of targets quickly using concurrent threads.
• WAF Bypass: Includes junk data injection to evade Web Application Firewalls.
• Vercel Bypass: Specific strategy to bypass Vercel's security protections.
• False Positive Reduction: Advanced filtering to ignore reflected source code and ensure accurate results.
• CSV Export: Save vulnerable hosts and their details to a CSV file for reporting.
• Proxy Support: Route traffic through HTTP/HTTPS proxies (e.g., Burp Suite).

Installation

1. Prerequisites: Python 3.6+
2. Install Dependencies:
   root@kitploit:~

   pip install requests
   

Usage Guide

Basic Scan