一个用 Rust 编写的高性能并发漏洞扫描器，用于在多个目标上检测 CVE-2025-55182（Next.js Server Actions 远程代码执行）。
git clone https://github.com/kaxm23/rust-cve-2025-55182-scanner.git
cd rust-cve-2025-55182-scanner
cargo build --release
ls target/release/
你应该会看到：
cve-2025-55182-scanner
./target/release/cve-2025-55182-scanner -l targets.txt
./target/release/cve-2025-55182-scanner -l targets.txt -v
./target/release/cve-2025-55182-scanner -l targets.txt -t 100 --timeout 5
./target/release/cve-2025-55182-scanner -l targets.txt -o results.txt
./target/release/cve-2025-55182-scanner -l targets.txt --proxy http://127.0.0.1:8080
rust_version/
├── src/
│ └── main.rs
├── target/
│ └── release/
│ └── cve-2025-55182-scanner
├── targets.txt
├── vulnerable_*.txt
├── scan_results_*.json
└── README.md
vulnerable_example.txt
[
{
"url": "https://target.com",
"vulnerable": true,
"confidence": 92
}
]
为高负载扫描增加系统限制：
ulimit -n 65535
可选的 TCP 调优：
sudo sysctl -w net.ipv4.tcp_fin_timeout=30
sudo sysctl -w net.ipv4.tcp_tw_reuse=1
# Step 1: Prepare targets
echo "https://example.com" > targets.txt
# Step 2: Run scan
./target/release/cve-2025-55182-scanner -l targets.txt -v
# Step 3: View results
cat vulnerable_*.txt
while true; do
./target/release/cve-2025-55182-scanner -l targets.txt
sleep 3600
done
./target/release/cve-2025-55182-scanner \
-l targets.txt \
-t 200 \
--timeout 3 \
--retries 1
chmod +x target/release/cve-2025-55182-scanner
cargo clean && cargo build --release
ulimit -n 65535
targets.txt 文件本工具仅用于：
作者不对滥用行为负责。
如果你觉得这个项目有用，请考虑给它点个 star ⭐