Skip to content
KitploitKITPLOIT
๋„๊ตฌ๋ธ”๋กœ๊ทธ
์ œ์ถœ
๋„๊ตฌ๋ธ”๋กœ๊ทธ
์ œ์ถœ

ํ•ดํ‚น, ์นจํˆฌ ํ…Œ์ŠคํŠธ ๋ฐ ์‚ฌ์ด๋ฒ„ ๋ณด์•ˆ ๋„๊ตฌ๋ฅผ ๋‹น์‹ ์˜ ๋ณด์•ˆ ๋ฌด๊ธฐ๊ณ ์—!

Kitploit์€ ํ•ดํ‚น, ์‚ฌ์ด๋ฒ„ ๋ณด์•ˆ ๋ฐ ์นจํˆฌ ํ…Œ์ŠคํŠธ ๋„๊ตฌ ๋””๋ ‰ํ† ๋ฆฌ์ž…๋‹ˆ๋‹ค. ์ตœ์‹  ํ”„๋กœ์ ํŠธ ์—…๋ฐ์ดํŠธ๋ฅผ ๋ฐœ๊ฒฌํ•˜์—ฌ ์ทจ์•ฝ์ ์„ ์ฐพ๊ณ , ์‹œ์Šคํ…œ์„ ๋ถ„์„ํ•˜๊ณ , ํ…Œ์ŠคํŠธ๋ฅผ ์ž๋™ํ™”ํ•˜๊ณ , ๋ณด์•ˆ์„ ๊ฐ•ํ™”ํ•˜์„ธ์š”.

ยทยทํ”ผ๋“œยท๋ฌธ์˜ยท๊ฐœ์ธ์ •๋ณดยทยฉ 2026 Kitploit

๋„๊ตฌ ๋””๋ ‰ํ† ๋ฆฌ

์นดํ…Œ๊ณ ๋ฆฌ

๋ชจ๋“  ์นดํ…Œ๊ณ ๋ฆฌ ๋ณด๊ธฐ
Loading categories
๋„๊ตฌ/GitHubGitHub/hndko/react2shell-rce-autobot
ReconnaissanceVulnerability ScannersExploitationWeb Application ExploitationInformation GatheringPenetration Testing
GitHubhndko/react2shell-rce-autobot

react2shell-rce-autobot

๐ŸŽฏ React2Shell RCE๋ฅผ ์œ„ํ•œ ์ž๋™ํ™”๋œ ์ทจ์•ฝ์  ์Šค์บ๋„ˆ - Google dorking + CVE-2025-55182/CVE-2025-66478 (CVSS 10.0)์— ๋Œ€ํ•œ ์•ˆ์ „ํ•œ ํƒ์ง€

์ €์žฅ์†Œ ๋ณด๊ธฐ
7๊ฐœ์›” ์ „์•„์ง ๊ฒ€ํ† ๋˜์ง€ ์•Š์Œ

์ธ๊ธฐ

๋ชจ๋‘ ๋ณด๊ธฐ โ†’

์ปค๋ฎค๋‹ˆํ‹ฐ์—์„œ ๊ฐ€์žฅ ๋งŽ์ด ์‚ฌ์šฉ๋˜๋Š” ๋„๊ตฌ๋ฅผ ์ฐพ์•„๋ณด์„ธ์š”.

๋ชจ๋“  ๋„๊ตฌ ํƒ์ƒ‰

๋„๊ตฌ ์ปฌ๋ ‰์…˜์„ ๋‘˜๋Ÿฌ๋ณด์„ธ์š”

๋ชจ๋“  ๋„๊ตฌ ๋ณด๊ธฐ โ†’
๊ณต์œ 

๐Ÿ” React2Shell Dork Scanner

CVE-2025-55182 CVE-2025-66478 CVSS 10.0

Python 3.8+ Next.js React License


๐Ÿšจ ์ทจ์•ฝ์  ์ •๋ณด

React2Shell์€ ๋‹ค์Œ์— ์˜ํ–ฅ์„ ๋ฏธ์น˜๋Š” ์น˜๋ช…์ ์ธ ์›๊ฒฉ ์ฝ”๋“œ ์‹คํ–‰(RCE) ์ทจ์•ฝ์ ์ž…๋‹ˆ๋‹ค:

๋Œ€์ƒ์ทจ์•ฝํ•œ ๋ฒ„์ „
โš›๏ธ react-server-dom-webpack19.0.0, 19.1.0, 19.1.1, 19.2.0
โš›๏ธ react-server-dom-turbopack19.0.0, 19.1.0, 19.1.1, 19.2.0
โš›๏ธ react-server-dom-parcel19.1.0, 19.1.1, 19.2.0
๐Ÿ”บ Next.js15.0.0-15.0.4, 16.0.0-16.0.6

โš ๏ธ CVSS ์ ์ˆ˜: 10.0 (์น˜๋ช…์ ) - ์ธ์ฆ ์—†์ด RCE ๊ฐ€๋Šฅ!


โœจ ๊ธฐ๋Šฅ


๐Ÿ“ฆ ์„ค์น˜

root@kitploit:~
# ์ €์žฅ์†Œ ํด๋ก 
git clone https://github.com/yourusername/react2shell-dork-scanner.git
cd react2shell-dork-scanner

# ์˜์กด์„ฑ ์„ค์น˜
pip install -r requirements.txt

๐Ÿš€ ๋น ๋ฅธ ์‹œ์ž‘

1๏ธโƒฃ ๋‹จ์ผ URL ํ…Œ์ŠคํŠธ

root@kitploit:~
python3 dork_scanner.py --test-url https://target.com

2๏ธโƒฃ Google Dork ๊ฒ€์ƒ‰

root@kitploit:~
# ์‚ฌ์šฉ์ž ์ง€์ • dork
python3 dork_scanner.py --dork "inurl:/_next site:example.com"

# ๋‚ด์žฅ ํ…œํ”Œ๋ฆฟ
python3 dork_scanner.py --template nextjs --limit 50

3๏ธโƒฃ ํŒŒ์ผ์—์„œ ์Šค์บ”

root@kitploit:~
python3 dork_scanner.py --scan-file targets.txt

4๏ธโƒฃ ์ „์ฒด ์ž๋™ (Dork + ์Šค์บ”)

root@kitploit:~
python3 dork_scanner.py --dork "inurl:/_next" --auto-scan

๐Ÿ“– CLI ์˜ต์…˜

root@kitploit:~
Google Dork ์˜ต์…˜:
  --dork, -d          ์‚ฌ์šฉ์ž ์ง€์ • Google dork ์ฟผ๋ฆฌ
  --template, -t      ํ…œํ”Œ๋ฆฟ: nextjs, react, rsc
  --limit, -l         ์ตœ๋Œ€ ๊ฒฐ๊ณผ ์ˆ˜ (๊ธฐ๋ณธ๊ฐ’: 50)
  --delay             ์š”์ฒญ ๊ฐ„ ์ง€์—ฐ ์‹œ๊ฐ„ (๊ธฐ๋ณธ๊ฐ’: 3.0์ดˆ)

์Šค์บ” ์˜ต์…˜:
  --scan-file, -f     ํŒŒ์ผ์—์„œ ์Šค์บ”
  --test-url, -u      ๋‹จ์ผ URL ํ…Œ์ŠคํŠธ
  --auto-scan         dorking ํ›„ ์ž๋™ ์Šค์บ”
  --threads           ๋™์‹œ ์Šค๋ ˆ๋“œ ์ˆ˜ (๊ธฐ๋ณธ๊ฐ’: 5)
  --timeout           ์š”์ฒญ ์ œํ•œ ์‹œ๊ฐ„ (๊ธฐ๋ณธ๊ฐ’: 10์ดˆ)

์ถœ๋ ฅ ์˜ต์…˜:
  --output-targets    ๋Œ€์ƒ ํŒŒ์ผ (๊ธฐ๋ณธ๊ฐ’: targets.txt)
  --output-vuln       ์ทจ์•ฝ์  ํŒŒ์ผ (๊ธฐ๋ณธ๊ฐ’: vulnerable.txt)

๐ŸŽฏ Dork ํ…œํ”Œ๋ฆฟ

ํ…œํ”Œ๋ฆฟDorks
nextjsinurl:"/_next/static", intext:"__NEXT_DATA__"
react

๐Ÿ“Š ์ถœ๋ ฅ ํŒŒ์ผ

ํŒŒ์ผ๋‚ด์šฉ
๐Ÿ“„ targets.txtGoogle dork์˜ ๋ชจ๋“  URL
๐Ÿ”ด vulnerable.txt์ทจ์•ฝํ•œ URL

โš ๏ธ ๋ฉด์ฑ… ์กฐํ•ญ

โš ๏ธ ๋ฒ•์  ๊ฒฝ๊ณ 

์ด ๋„๊ตฌ๋Š” ๊ณต์‹ ํ—ˆ๊ฐ€๋ฅผ ๋ฐ›์€ ๋Œ€์ƒ์— ๋Œ€ํ•œ ๋ณด์•ˆ ํ…Œ์ŠคํŠธ ์ „์šฉ์ž…๋‹ˆ๋‹ค. ์Šน์ธ ์—†์ด ์‚ฌ์šฉํ•˜๋Š” ๊ฒƒ์€ ๋ถˆ๋ฒ•์ž…๋‹ˆ๋‹ค.


๐Ÿ”— ์ฐธ๊ณ  ์ž๋ฃŒ

  • ๐Ÿ“‹ CVE-2025-55182
  • ๐Ÿ“‹ CVE-2025-66478
  • ๐Ÿ”ฌ Assetnote ์—ฐ๊ตฌ

๐Ÿ”’ ์•ˆ์ „ํ•˜๊ฒŒ ์ง€ํ‚ค์„ธ์š”. ์ฑ…์ž„๊ฐ ์žˆ๊ฒŒ ์Šค์บ”ํ•˜์„ธ์š”. ๐Ÿ”’

๋„๊ตฌ ๋‹ค์šด๋กœ๋“œ
๊ธฐ๋Šฅ์„ค๋ช…
๐Ÿ” Google DorkingGoogle์„ ํ†ตํ•ด Next.js/React ๋Œ€์ƒ ์ž๋™ ๊ฒ€์ƒ‰
๐Ÿ’พ ๋Œ€์ƒ ์ €์žฅ๊ฒ€์ƒ‰ ๊ฒฐ๊ณผ๋ฅผ targets.txt์— ์ €์žฅ
๐ŸŽฏ ์ทจ์•ฝ์  ์Šค์บ๋‹๊ฐ ๋Œ€์ƒ์˜ ์ทจ์•ฝ์  ํ…Œ์ŠคํŠธ
๐Ÿ“ ์ทจ์•ฝ์  ๋ณด๊ณ ์„œ์ทจ์•ฝํ•œ ๋Œ€์ƒ์„ vulnerable.txt์— ์ €์žฅ
โšก ๋ฉ€ํ‹ฐ์Šค๋ ˆ๋”ฉ๋™์‹œ ์š”์ฒญ์œผ๋กœ ๋น ๋ฅธ ์Šค์บ”
๐Ÿ›ก๏ธ ์•ˆ์ „ํ•œ ํƒ์ง€์‚ฌ์ด๋“œ ์ฑ„๋„ ํƒ์ง€ (์ต์Šคํ”Œ๋กœ์ž‡ ์—†์Œ)
inurl:"/static/js/main" intext:"react"
rscinurl:"/api/" intext:"server-action"