Catálogo de exploits

Advanced security testing tool for CVE-2025-55182 vulnerability assessment in Next.js applications. Features interactive shell, batch scanning, WAF bypass, and comprehensive reporting.

Detects exposed React Server Components vulnerable to CVE-2025-55182 via RSC negotiation.

RSC/Next.js RCE Vulnerability Detector & PoC Chrome Extension – CVE-2025-55182 & CVE-2025-66478

CVE-2025-55182 & CVE-2025-66478 Detection Tool for Next.js RSC RCE

CVE-2025-55182 RCE - Massive Scanner POC

Imsol0/APACHE-CVE-2018-1306-Lab-project

A vulnerability has been identified in Docker Desktop. A remote attacker could exploit this vulnerability to trigger security restriction bypass on the targeted system.

CVE-2025-55182 React Server Components RCE - Go PoC

A modified and a little boosted exploit for CVE-2025-55182, React2Shell: Pre-authentication Remote Code Execution in React Server Packages

Advanced Custom Fields Extended (ACFE) WordPress Plugin Exploit RCE - Admin Creation

React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0, including react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack, contain a remote code execution vulnerability.

Poc for CVE-2025-55182

This is a fast, asynchronous Python tool that fingerprints domains for likely Next.js App Router / React Server Components (RSC) infrastructure. (I made it to find the applications possibly vulnerable to CVE-2025-55182 and CVE-2025-66478)

CVE-2025-55182 (React2Shell) Scanner

React2Shell, CVE-2025-55182, RCE Vulnerability: A critical breakdown of the unsafe deserialization flaw in React Server Components that enables unauthenticated remote code execution across default React/Next.js setups.

A Python automation script for exploiting the **js2py Sandbox Escape** vulnerability (CVE-2024-28397). This tool automates the payload generation and delivery process to achieve Remote Code Execution (RCE) on vulnerable instances.

React Shell & Next.js RSC Exploit Tool (CVE-2025-55182)

Mass Hunting & Exploitation PoC for CVE-2025-55182 & CVE-2025-66478

My research on CVE-2025-55182

React2Shell-Exploit — Complete exploitation framework for CVE-2025-55182, including Python exploit, Docker vulnerable lab, Burp Suite manual and automated exploitation, Nuclei detection template, and validated testing workflow. Developed for penetration testing and educational research.

Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.

Fast scanner for detecting and confirming Next.js RCE vulnerabilities (CVE-2025-55182 & CVE-2025-66478).

greenheadHQ/CVE-2025-55182

chrome extension to detect next.js sites vulnerable to CVE-2025-55182 (react2shell)

Original Proof-of-Concepts for React2Shell CVE-2025-55182

Burp Suite/antsword - Interactive shell (HTTP hijack + POST + AES-256-CBC/BASE64)

This repository contains a POC of CVE-2025-55182, a critical (CVSS score 10.0) pre-authentication remote code execution vulnerability affecting React Server Components, also known as React2Shell.

Security scanner to detect CVE-2025-55182 & CVE-2025-66478 vulnerabilities in React Server Components (RSC) projects

POC for CVE-2025-55182

topstar88/CVE-2025-55182