React2Shell Detector

Heuristic Scanner for React Server Components (RSC) Vulnerabilities — including React2Shell-style behavior (CVE-2025-55182)

---

Overview

react2shell_detector.py is a safe, non-invasive security scanner designed to detect systems potentially exposed to React Server Components (RSC) deserialization vulnerabilities — including the React2Shell class of issues affecting React 19 and certain Next.js server configurations.

This tool does not perform exploitation, and instead relies on a multi-signal heuristic engine:

• RSC feature detection
• Header & framework fingerprinting
• Next.js version inference
• RSC endpoint discovery
• Digest/parser error behavior
• Server-side RSC probing (safe mode)

It is suitable for:

• Application Security teams
• Penetration testers
• Bug bounty hunters
• CI/CD and SDLC security gates
• Security research labs

---

Important Disclaimer

This scanner performs benign RSC probes only.
Use it only on systems you own or are explicitly authorized to test.

Unauthorized scanning may violate laws or organizational policies.

---

Features

• Scan one URL or bulk targets from a .txt list
• Multi-threaded scanning
• JSON export for CI / dashboards
• Detects:
  • RSC content-type exposure
  • Next.js & React version fingerprints
  • RSC endpoint behavior
  • Digest / parser anomalies
  • RSC-induced 5xx patterns
• Confidence scoring (low → very_high)
• Clean CLI interface
• Designed for AppSec program integration

---

---

Installation

Clone the repository:

git clone https://github.com/<yourname>/react2shell-detector.git
cd react2shell-detector

---

## Usage
python react2shell_detector.py -u https://example.com
or
python react2shell_detector.py -f targets.txt
or
python react2shell_detector.py -f targets.txt -t 20