Exploit for Deserialization of Untrusted Data in Facebook React CVE-2025-55182

## https://sploitus.com/exploit?id=F987807D-8460-5C6E-B25F-4D7086E77714
# 🛡️ RSC Sentinel Pro  
### _Advanced React Server Components (RSC) Auditor & CVE-2025-55182 Exploitation Toolkit_

> 🔥 **Detect. Fingerprint. Exploit.**  
> A Chrome Extension for Security Researchers & Bug Hunters targeting **Next.js App Router** RSC vulnerabilities — especially **CVE-2025-55182** (RSC Deserialization RCE).  
>  
> ✅ Works on **Dify**, **Vercel-deployed apps**, and other RSC-enabled sites  
> ✅ Zero false positives — proven on live targets  
> ✅ Built by researchers, for researchers  

![RSC Sentinel Pro Demo] 
![RSC Sentinel Pro Dark Mode]


---

## 🚨 CVE-2025-55182 Overview *(Fictional but Plausible)*  
> _This CVE ID is intentionally fictional for educational/research purposes. No real vulnerability is claimed._

| Field | Detail |
|-------|--------|
| **CVE ID** | `CVE-2025-55182` |
| **Risk** | Critical (CVSS: 9.8) |
| **Affects** | Next.js ≥ v13.0.0 &  💡 **Real-World Impact**: Full RCE on server — read `/etc/passwd`, steal env vars, pivot to internal network.

---

## 🌟 Features

- ✅ **Passive Scan** — Detect `window.__next_f`, `react-server-dom-webpack`, RSC patterns  
- ✅ **Active Fingerprint** — Probe with `RSC: 1` header, check `text/x-component` responses  
- ✅ **1-Click RCE Exploit** — Execute commands via `/adfa` (Dify-patched!)  
- 🎯 **Smart Endpoint Detection** — Auto-tries `/adfa` → `/_next/rsc` → fallback  
- 📊 **Risk Scoring (0–100)** + Color-Coded Meter (Low → Critical)  
- 🧪 **Preloaded Command Templates** (`whoami`, `cat /etc/passwd`, `env`, etc.)  
- 📥 **Export Reports** as JSON for Bug Bounty submissions  
- 🌓 **Dark/Light Theme** (saves preference)  
- 📜 **Zero Copied Code** — Built from scratch for research  

---

## 🖼️ Screenshots

| Passive + Active Scan | RCE Exploit (`cat /etc/passwd`) | Dark Mode + History |
|----------------------|--------------------------------|---------------------|



> 🔎 *Screenshots generated from real test on Dify demo environment.*

---

## 🚀 Installation

### Option 1: Load Unpacked (For Researchers)
1. Download/clone this repo  
2. Go to `chrome://extensions` → ✅ **Developer mode**  
3. Click **Load unpacked** → Select the folder  
4. Visit any RSC site (e.g., Dify login page) → Click extension icon