# 저장소 클론
git clone https://github.com/wi3memake/React2Shell-Scanner.git
cd react2shell-scanner

# 가상 환경 생성 (권장)
python -m venv venv
source venv/bin/activate  # Linux/Mac
.\venv\Scripts\activate   # Windows

# 의존성 설치
pip install -r requirements.txt

requests>=2.28.0    # HTTP 클라이언트 라이브러리
tqdm>=4.64.0        # 진행 표시줄 시각화
urllib3>=1.26.0     # URL 처리

# 단일 대상
python react2shell.py.py -u https://example.com

# 상세 출력 포함
python react2shell.py.py -u https://example.com -v

# 파일에서 스캔
python react2shell.py.py -l targets.txt

# 동시 스레드 사용
python react2shell.py.py -l targets.txt -t 10

# 사용자 정의 헤더
python react2shell.py.py -u https://example.com -H "Authorization: Bearer token"

# 프록시 경유
python react2shell.py.py -u https://example.com --proxy http://127.0.0.1:8080

# SSL 검증 건너뛰기
python react2shell.py.py -u https://example.com --no-verify

# 파일로 출력
python react2shell.py.py -u https://example.com -o results.json

React2Shell Web Application Security Assessment Framework

[*] Starting assessment of https://example.com
[*] Analyzing React Server Components...
[*] Testing redirect behavior...
[+] Assessment complete

Target: https://example.com
Status: Analyzed
Response Code: 200
Server: Next.js
React Version: 18.2.0
RSC Detected: Yes
Assessment Time: 1.23s

{
  "target": "https://example.com",
  "timestamp": "2025-01-15T10:30:00Z",
  "results": {
    "status_code": 200,
    "server": "Next.js",
    "rsc_detected": true,
    "headers": {
      "content-type": "text/html",
      "x-powered-by": "Next.js"
    },
    "assessment_time": 1.23
  }
}

React2Shell-Scanner/
├── react2shell.py.py      # 메인 스캐너 스크립트
├── requirements.txt       # Python 의존성
└── README.md             # 문서

https://target1.com
https://target2.com
https://target3.com/api

python react2shell.py.py -u https://example.com \
  -H "Authorization: Bearer token123" \
  -H "X-Custom-Header: value" \
  -H "Cookie: session=abc123"

# HTTP 프록시
--proxy http://127.0.0.1:8080

# HTTPS 프록시
--proxy https://proxy.example.com:8443

# 인증 프록시
--proxy http://user:[email protected]:8080

# GitHub Actions 예시
security-scan:
  runs-on: ubuntu-latest
  steps:
    - uses: actions/checkout@v3
    - name: Setup Python
      uses: actions/setup-python@v4
      with:
        python-version: '3.10'
    - name: Install dependencies
      run: pip install -r requirements.txt
    - name: Run security scan
      run: python react2shell.py.py -u ${{ secrets.TARGET_URL }} -o results.json

import subprocess
import json

# 스캐너 실행
result = subprocess.run(
    ['python', 'react2shell.py.py', '-u', 'https://example.com', '-o', 'results.json'],
    capture_output=True,
    text=True
)

# 결과 파싱
with open('results.json') as f:
    findings = json.load(f)

# 시간 초과 증가
python react2shell.py.py -u https://example.com --timeout 30

# 검증 건너뛰기 (테스트 전용)
python react2shell.py.py -u https://example.com --no-verify

# 스레드 수 줄이기
python react2shell.py.py -l targets.txt -t 2