InferiorAK/CVE-2025-55182-React2Shell-Async-Scanner ? reverse-engineered prompt

Reverse engineered prompt

Build me a Python security scanner for React2Shell, the CVE 2025 55182 and CVE 2025 66478 issue in React Server Actions and Next.js. I want it to take either one target URL or a file of URLs, check whether each site looks like Next.js, try to detect the version, and then run a safe proof of concept that confirms real code execution by looking for the canary in the response headers. It should clearly label each target as RCE, Vulnerable, Unknown, Not Vulnerable, Skipped, or Error, and save vulnerable or unknown targets into output files automatically.

Make it run asynchronously so it can scan multiple sites at once, and add a quiet mode for cleaner output. If version detection is unclear, include an optional browser mode that uses a headless browser for better accuracy. Keep it simple to run from the command line, include the needed dependencies, and make the output easy to read. If you need current library details, look them up online first.

Are you gonna build this?

make sure you review the code using coderabbit

Try freeSponsored — opens CodeRabbit in a new tab