Exploit for Deserialization of Untrusted Data in Facebook React CVE-2025-55182 CVE-2025-66478

## https://sploitus.com/exploit?id=74138780-920C-596D-B00E-28709D031337
# 🔍 React2Shell Dork Scanner


  
  
  



  
  
  
  


---

## 🚨 Tentang Kerentanan

**React2Shell** adalah kerentanan **Remote Code Execution (RCE)** kritikal yang mempengaruhi:

| Target                        | Versi Vulnerable               |
| ----------------------------- | ------------------------------ |
| ⚛️ react-server-dom-webpack   | 19.0.0, 19.1.0, 19.1.1, 19.2.0 |
| ⚛️ react-server-dom-turbopack | 19.0.0, 19.1.0, 19.1.1, 19.2.0 |
| ⚛️ react-server-dom-parcel    | 19.1.0, 19.1.1, 19.2.0         |
| 🔺 Next.js                    | 15.0.0-15.0.4, 16.0.0-16.0.6   |

**⚠️ CVSS Score: 10.0 (CRITICAL)** - Unauthenticated RCE!

---

## ✨ Features

| Feature                | Description                                   |
| ---------------------- | --------------------------------------------- |
| 🔍 **Google Dorking**  | Cari target Next.js/React otomatis via Google |
| 💾 **Save Targets**    | Simpan hasil pencarian ke `targets.txt`       |
| 🎯 **Vuln Scanning**   | Test vulnerability pada setiap target         |
| 📝 **Vuln Report**     | Simpan target vulnerable ke `vulnerable.txt`  |
| ⚡ **Multi-threading** | Scan cepat dengan concurrent requests         |
| 🛡️ **Safe Detection**  | Side-channel detection (tanpa eksploitasi)    |

---

## 📦 Installation

```bash
# Clone repository
git clone https://github.com/yourusername/react2shell-dork-scanner.git
cd react2shell-dork-scanner

# Install dependencies
pip install -r requirements.txt
```

---

## 🚀 Quick Start

### 1️⃣ Test Single URL

```bash
python3 dork_scanner.py --test-url https://target.com
```

### 2️⃣ Google Dork Search

```bash
# Custom dork
python3 dork_scanner.py --dork "inurl:/_next site:example.com"

# Template bawaan
python3 dork_scanner.py --template nextjs --limit 50
```

### 3️⃣ Scan dari File

```bash
python3 dork_scanner.py --scan-file targets.txt
```

### 4️⃣ Full Auto (Dork + Scan)

```bash
python3 dork_scanner.py --dork "inurl:/_next" --auto-scan
```

---

## 📖 CLI Options

```
Google Dork Options:
  --dork, -d          Custom Google dork query
  --template, -t      Template: nextjs, react, rsc
  --limit, -l         Max results (default: 50)
  --delay             Delay antar request (default: 3.0s)

Scanning Options:
  --scan-file, -f     Scan dari file
  --test-url, -u      Test single URL
  --auto-scan         Auto scan setelah dorking
  --threads           Concurrent threads (default: 5)
  --timeout           Request timeout (default: 10s)

Output Options:
  --output-targets    File untuk targets (default: targets.txt)
  --output-vuln       File untuk vulns (default: vulnerable.txt)
```

---

## 🎯 Dork Templates

| Template | Dorks                                             |
| -------- | ------------------------------------------------- |
| `nextjs` | `inurl:"/_next/static"`, `intext:"__NEXT_DATA__"` |
| `react`  | `inurl:"/static/js/main" intext:"react"`          |
| `rsc`    | `inurl:"/api/" intext:"server-action"`            |

---

## 📊 Output Files

| File                | Isi                        |
| ------------------- | -------------------------- |
| 📄 `targets.txt`    | Semua URL dari Google dork |
| 🔴 `vulnerable.txt` | URL yang vulnerable        |

---

## ⚠️ Disclaimer

> **⚠️ LEGAL WARNING**
>
> Tool ini **HANYA** untuk security testing pada target yang memiliki **izin resmi**.
> Penggunaan tanpa otorisasi adalah **ILEGAL**.

---

## 🔗 References

- 📋 [CVE-2025-55182](https://nvd.nist.gov/vuln/detail/CVE-2025-55182)
- 📋 [CVE-2025-66478](https://nvd.nist.gov/vuln/detail/CVE-2025-66478)
- 🔬 [Assetnote Research](https://www.assetnote.io/resources/research)

---


  🔒 Stay Secure. Scan Responsibly. 🔒