CVE-2025-55182 - PoC & Stand

📌 Início Rápido

1. Implantar o Stand Vulnerável

cd Stand
docker compose up --build

A aplicação vulnerável roda em: http://localhost:3011

2. Executar o Scanner PoC Seguro

cd PoC/src
poetry install
poetry run python scanner.py http://localhost:3011

✅ Saída Esperada do PoC

[*] Scanning target: http://localhost:3011
    [+] VULNERABLE! RCE confirmed.
    [+] Command output (id): uid=1001(nextjs)...
    [+] Network test (ping) SUCCESSFUL.
[*] Results saved to 'result.txt'.
File result.txt will contain: [{"ip": "http://localhost:3011", "vuln": true}]

📁 Estrutura do Projeto

PoC/ – Scanner seguro (Dockerfile, scanner.py)

Stand/ – Aplicação Next.js vulnerável (Docker)

README.md – Este arquivo