Original Proof-of-Concepts for React2Shell CVE-2025-55182
-
Updated
Dec 5, 2025 - JavaScript
#
react2shell
Here are 55 public repositories matching this topic...
Language: All
Filter by language
Sort: Most stars
Sort options
Docker poc lab for CVE-2025-55182 / CVE-2025-66478 (React2Shell) detection and exploitation
react docker react-dom proof-of-concept reactjs nextjs docker-image lab poc vulnerability cve app-router-nextjs cve-2025-55182 react2shell cve-2025-66478
-
Updated
Dec 11, 2025 - JavaScript
React2Shell Auto Exploit: A CLI tool to exploit prototype pollution vulnerabilities (RCE) in React Server Actions
react cli exploit reactjs scanner nextjs rce next exploit-kit exploit-development rce-exploit server-components rce-scanner rce-testing react2shell react-rce react-exploit
-
Updated
Dec 6, 2025 - Python
Security scanner for CVE-2025-55182 - Critical RCE vulnerability in React Server Components. Scan npm/pnpm/yarn lockfiles, Docker images, SBOMs, and live URLs. Auto-fix, SARIF output, GitHub Actions, Vercel integration, and runtime protection middleware.
-
Updated
Dec 7, 2025 - TypeScript
Step-by-step walkthrough of CVE-2025-55182 (React2Shell) by tracing React's Flight protocol internals.
-
Updated
Dec 10, 2025
-
Updated
Dec 21, 2025 - Python
ReactGuard provides framework- and vulnerability-detection tooling for CVE-2025-55182 (React2Shell)
react nextjs waku cve-2025-55182 react2shell reactguard cve-2025-55183 cve-2025-55184 cve-2025-67779
-
Updated
Dec 22, 2025 - Python
React2Shell exploit with multiple WAF bypass and vulnerable example application.
-
Updated
Dec 18, 2025 - Python
This repository contains a POC of CVE-2025-55182, a critical (CVSS score 10.0) pre-authentication remote code execution vulnerability affecting React Server Components, also known as React2Shell.
javascript security typescript exploit reactjs nextjs hacking cybersecurity penetration-testing poc rce bug-bounty vulnerability webdevelopment vulnerability-scanners security-scanner rsc cve-2025-55182 react2shell cve-2025-66478
-
Updated
Mar 22, 2026 - TypeScript
-
Updated
Dec 9, 2025 - YARA
React2Shell: An exploitation framework for CVE-2025-55182 (Next.js/React RCE).
react reactjs nextjs rce nextjs-vulnerability cve-2025-55182 react2shell react-rce cve-2025-55182-ctf react2shell-scanner react2shell-exploitation react2shell-exploitation-tool reactjs-vulnerability
-
Updated
Dec 22, 2025 - Python
Nuclei template for detecting react2shell (CVE-2025-55182 & CVE-2025-66478)
-
Updated
Dec 4, 2025
CVE-2025-55182 – React2Shell: Proof-of-Concept Remote Code Execution (RCE) exploit for Next.js apps. Features an interactive shell prompt to test and demonstrate the vulnerability in real time. Use for security research and authorized penetration-testing only.
-
Updated
Dec 7, 2025 - Python
React2Shell, CVE-2025-55182, RCE Vulnerability: A critical breakdown of the unsafe deserialization flaw in React Server Components that enables unauthenticated remote code execution across default React/Next.js setups.
-
Updated
Dec 18, 2025 - Python
React2Shell CVE-2025-55182: unauthenticated unsafe deserialization in React Server Components leading to reliable remote code execution via the Flight protocol.
-
Updated
Jul 13, 2026 - JavaScript
React2Shell - CVE-2025-66478 RCE Exploit
-
Updated
Feb 12, 2026 - Python
CVE-2025-55182 Exploit Tool – Python 2.7 exploit for Next.js prototype pollution leading to RCE
security exploit nextjs penetration-testing rce bug-bounty vulnerability rce-exploit cve-2025-55182 react2shell
-
Updated
May 30, 2026 - Python
This tool is a Proof of Concept (PoC) intended for security research and educational purposes only. Using this tool on systems without explicit permission is illegal and punishable by law. The author (Tiger-Foxx) assumes no responsibility for misuse.
-
Updated
Dec 11, 2025 - JavaScript
Precision-Based Detection of RSC/Next.js Remote Code Execution Vulnerabilities (CVE-2025-55182, CVE-2025-66478)
-
Updated
Feb 10, 2026 - Python
Exposure intelligence for the AI-infrastructure layer — finds and weighs leaked credentials, MCP/agent configs, git-metadata secrets, and supply-chain risk, and tells you which exposures to trust. Active verification, orphan-signal triage, SARIF dedup. OWASP LLM + MITRE ATLAS tagged.
python cli security mcp asyncio pentesting offensive-security security-scanner vulnerability-scanner credential-scanner ai-security git-security supply-chain-security mitre-atlas ml-security llm-security secret-detection owasp-llm react2shell
-
Updated
Sep 6, 2026 - Python
Add this topic to your repo
To associate your repository with the react2shell topic, visit your repo's landing page and select "manage topics."