Home
Softono

React2shell Ultimate

Open source MIT Python
Website GitHub
152
Stars
32
Forks
1
Issues
2
Watchers
9 months
Last Commit
Vulnerability Scanning

 About React2shell Ultimate

React2Shell Ultimate - The most comprehensive CVE-2025-66478 Scanner for Next.js RSC RCE vulnerability. Multi-mode detection, WAF bypass, local scanning.

Platforms

Web Self-hosted

Languages

Python

Links

Website Source Code

Need Help Installing React2shell Ultimate?

We provide expert installation service for this software. Our team will install, configure, and secure React2shell Ultimate on your server. plans start at just $30.

Hire an Expert

Alternatives to React2shell Ultimate

View All

NextSploit

NextSploit is a command-line tool designed to detect and exploit CVE-2025-29927, a security flaw in Next.js

91
Published by
hackersatyamrastogi
Visit View Profile

React2shell Ultimate

View on GitHub

React2Shell Ultimate Scanner v2.0

Professional Next.js RSC RCE Vulnerability Scanner for CVE-2025-66478

Version Python License Stars

🎯 Overview

React2Shell Ultimate is a comprehensive vulnerability scanner for CVE-2025-66478 - a critical Remote Code Execution (RCE) vulnerability affecting Next.js applications using React Server Components (RSC).

🆕 What's New in v2.0

Version 2.0 brings major enhancements and professional features:

  • ✨ Enhanced God Mode - Advanced exploitation capabilities with improved command execution
  • 🚀 Better WAF Bypass - More sophisticated techniques to evade security controls
  • 🎨 Professional Web Platform - Full-featured web interface at www.react2shellscanner.com
  • 🔧 Improved Error Handling - Better debugging and output display
  • 📚 Professional Documentation - Comprehensive guides and API documentation
  • 🛡️ Security Best Practices - Enhanced safety features and warnings

✨ Features

  • 🔍 Multiple Scan Modes (Safe, RCE, Version, Comprehensive)
  • 🛡️ Advanced WAF Bypass Techniques
  • ⚡ God Mode: Interactive Shell & File Reading
  • 🎯 Batch Scanning with Threading
  • 📊 JSON Output for Automation
  • 🔒 Safe Mode for Non-Invasive Detection

🚀 Quick Start

# Basic scan
python3 react2shell-ultimate.py -u https://target.com

# RCE mode
python3 react2shell-ultimate.py -u https://target.com --mode rce

# Execute command (God Mode)
python3 react2shell-ultimate.py -u https://target.com --exec "id"

# Interactive shell
python3 react2shell-ultimate.py -u https://target.com --shell

📦 Installation

# Clone the repository
git clone https://github.com/hackersatyamrastogi/react2shell-ultimate.git
cd react2shell-ultimate

# Install dependencies
pip3 install -r requirements.txt

# Make the script executable
chmod +x react2shell-ultimate.py

# Verify installation
python3 react2shell-ultimate.py --version

Requirements:

  • Python 3.8 or higher
  • requests >= 2.31.0
  • urllib3 >= 2.0.0
  • tqdm >= 4.65.0

🌐 Web Platform

Experience React2Shell Ultimate through our professional web interface:

Web Features:

  • Interactive vulnerability scanner
  • Real-time command execution (God Mode)
  • Scan history and batch operations
  • Professional admin dashboard

⚠️ Legal Disclaimer

FOR AUTHORIZED SECURITY TESTING ONLY

This tool is designed for:

  • Authorized penetration testing
  • Bug bounty programs
  • Security research
  • Educational purposes

You are fully responsible for any misuse of this tool.

📋 Version History

v2.0.0 (December 2025)

  • Enhanced God Mode exploitation capabilities
  • Improved WAF bypass techniques
  • Better error handling and output display
  • Professional web platform integration
  • Comprehensive documentation updates
  • Security best practices implementation

v1.1.0 (December 2025)

  • Initial public release
  • Core scanning functionality
  • Basic God Mode features
  • Multi-mode detection support

👨‍💻 Author

Satyam Rastogi

Made with ❤️ by Satyam Rastogi