RscScan - Next.js Server Actions Vulnerability Scanner

---

⚠️ LEGAL DISCLAIMER

THIS TOOL IS FOR EDUCATIONAL AND AUTHORIZED SECURITY TESTING PURPOSES ONLY.

• ❌ DO NOT use this tool on systems you do not own or have explicit written permission to test
• ❌ DO NOT use this tool for malicious purposes
• ✅ DO use this tool only in authorized penetration testing engagements
• ✅ DO use this tool for educational research and learning

Unauthorized access to computer systems is illegal. Misuse of this tool may result in criminal prosecution under laws such as the Computer Fraud and Abuse Act (CFAA) and similar legislation worldwide.

By using this tool, you agree to use it responsibly and legally.

---

📋 Table of Contents

• About
• Features
• Technology Stack
• Installation
• Usage
• Video Demonstration
• Screenshots
• Multi-Language Support
• Building
• Testing
• Project Structure
• Contributing
• License

---

🔍 About

RscScan is a professional security tool designed to detect CVE-2025-55182, a critical Remote Code Execution (RCE) vulnerability in Next.js Server Actions. The vulnerability stems from a prototype pollution issue that allows attackers to execute arbitrary code on the server.

Vulnerability Details

Property	Value
CVE ID	CVE-2025-55182
CVSS Score	9.8 (Critical)
Affected	Next.js Server Actions
Type	Prototype Pollution (CVE-2025-55182) → Remote Code Execution
Vector	HTTP POST request with malicious multipart form data

---

✨ Features

Core Functionality

• 🎯 Multi-threaded Scanning - Concurrent scanning of up to 30 targets simultaneously
• 📊 Real-time Progress Tracking - Live progress bar with percentage completion
• 📈 Statistics Dashboard - Visual statistics for vulnerable, safe, and error results
• 🔍 Advanced Filtering - Search and filter results by status, URL, or message
• 📤 Multiple Export Formats - Export results as JSON or CSV
• 🎭 Demo Mode - Safe testing mode with simulated results

Desktop Application Features

• 🖥️ Cross-Platform - Windows, macOS, and Linux support
• 📁 Native File Dialogs - System file picker for target lists
• 💾 Native Save Dialogs - Save exports with system dialog
• 🔔 In-App Notifications - Beautiful toast notifications on scan completion
• 🪟 Window State Persistence - Remembers window size and position
• 🎨 System Tray Integration - Minimize to system tray

User Interface

• 🌍 Multi-Language Interface - Support for English, Persian, Russian, German, and Chinese
• 🌓 Dark/Light Theme - Toggle between themes with system preference detection
• 📱 Responsive Design - Works seamlessly on desktop, tablet, and mobile
• ⌨️ Keyboard Shortcuts - Quick actions with keyboard shortcuts
• 🎨 Professional Design - Clean, modern interface with smooth animations
• 🔤 Custom Fonts - Language-specific fonts (Vazirmatn for Persian, Noto Sans SC for Chinese)

---

🛠 Technology Stack

Frontend

• React 19.2.1 - Modern UI library with hooks
• Vite 5.3 - Lightning-fast build tool and dev server
• Tailwind CSS 4.1 - Utility-first CSS framework
• Lucide React - Beautiful icon library

Internationalization

• i18next 25.x - Internationalization framework
• react-i18next 16.x - React integration for i18next
• i18next-browser-languagedetector - Automatic language detection

Desktop Framework

• Electron 28 - Cross-platform desktop framework
• Electron Builder 24.9 - Application packaging and distribution

HTTP Client

• Axios 1.13 - Promise-based HTTP client

---

📥 Download

---

📦 Installation

Prerequisites

• Node.js 18.x or higher
• npm 9.x or higher
• Git (for cloning)

Clone Repository

git clone https://github.com/VeilVulp/Rscscan.git
cd Rscscan

Install Dependencies

npm install