CVE-2025-55182 – React2Shell RCE GUI

Features

• 🖥 Modern GUI

  • Dark neon theme with side panel, status badges, and live console
  • Built with CustomTkinter (Python)

• 🔍 Target Scanner

  • Enter a single target URL (RSC / Next.js server action endpoint)
  • One-click “SCAN TARGET” button
  • Clear status:
    • Vulnerable – appears exploitable via React2Shell
    • Appears safe – exploit pattern not observed
    • Error messages for timeouts / connectivity issues

• 💣 Command Execution (for confirmed vulnerable systems)

  • Command input box with “RUN” button
  • Only enabled after a successful vulnerability check
  • Output returned and shown in a timestamped console

• ⚡ Quick Commands

  • One-click buttons for common forensics commands (e.g. whoami, hostname, id, etc.)
  • Helpful for quick validation and basic triage on test systems

• 🧾 Verbose Logging

  • Timestamped log lines: [HH:MM:SS] [LEVEL] message
  • Scan start / finish, decisions, and command output all visible

Full Changelog: https://github.com/Syrins/CVE-2025-55182-React2Shell-RCE/commits/v1.0.0