#react2shell resultados da pesquisa

YungBinary

6 h

TRU is tracking active exploitation of #React2Shell and released an advisory with observables/indicators. Observed activity includes system reconnaissance and attempts to exfiltrate AWS credentials. esentire.com/security-advis…

YungBinary's tweet image. TRU is tracking active exploitation of #React2Shell and released an advisory with observables/indicators.

Observed activity includes system reconnaissance and attempts to exfiltrate AWS credentials.

esentire.com/security-advis…

Atif Alam 🇮🇳

@atif2816

12 h

While looking for #React2Shell with @Rohan_Lew we identified a critical SSRF flaw that enabled extraction of AWS metadata — a serious cloud-security exposure. #bugbounty #Hacking #InfoSec #EthicalHacking #cybersecurity

atif2816's tweet image. While looking for #React2Shell with @Rohan_Lew we identified a critical SSRF flaw that enabled extraction of AWS metadata — a serious cloud-security exposure.

#bugbounty #Hacking #InfoSec #EthicalHacking #cybersecurity

an0n

@an0n_r0

7 de dez. de

just tested this in-memory backdoor via #React2Shell, this is crazy. github.com/Malayke/Next.j… I don't have time to set up a honeypot right now, but I'm pretty sure it would catch these kind of requests within minutes. :)

an0n_r0's tweet image. just tested this in-memory backdoor via #React2Shell, this is crazy. github.com/Malayke/Next.j… I don't have time to set up a honeypot right now, but I'm pretty sure it would catch these kind of requests within minutes. :)

☛ ☛ ☛pipe lujan

@pipelujan

6 h

Fixing #React2Shell can't wait. #React

raax

@imraax

4 de dez. de

nobody care about it? #React2Shell

Nuclei by ProjectDiscovery

@pdnuclei

6 de dez. de

Scanning for CVE-2025-55182 using @pdnuclei 🚨 If you're running Next.js / React, scan your apps now. Nuclei Template - cloud.projectdiscovery.io/library/CVE-20… Vulnerability Advisory - react.dev/blog/2025/12/0… #nextjs #cybersecurity #react2shell

pdnuclei's tweet image. Scanning for CVE-2025-55182 using @pdnuclei 🚨

If you're running Next.js / React, scan your apps now.

Nuclei Template - cloud.projectdiscovery.io/library/CVE-20…

Vulnerability Advisory - react.dev/blog/2025/12/0…

#nextjs #cybersecurity #react2shell

Phith0n

@phithon_xg

5 de dez. de

try this WAF bypass trick for rsc&&next.js CVE-2025-55182 All fields can use utf16le charset #React2Shell

phithon_xg's tweet image. try this WAF bypass trick for rsc&amp;&amp;next.js CVE-2025-55182
All fields can use utf16le charset
#React2Shell

Strobes Security, Inc.

@StrobesHQ

9 h

React2Shell is not fixed for many teams. RSC and the Next.js App Router need another look. One Flight frame can still reach your server runtime. Full write up: strobes.co/blog/react2she… #React2Shell #CVE2025 #NextJS #RSC #AppSec #VulnerabilityManagement

StrobesHQ's tweet image. React2Shell is not fixed for many teams.
RSC and the Next.js App Router need another look.
One Flight frame can still reach your server runtime.
Full write up: strobes.co/blog/react2she…
#React2Shell #CVE2025 #NextJS #RSC #AppSec #VulnerabilityManagement

DestroyerX

@ide9x

6 de dez. de

Yay, i got my first RCE! #BugBounty #InfoSec #React2Shell

zack0x01

@zack0x01

6 de dez. de

This is the best scanner for the CVE-2025-55182 Try it out !🫡 github.com/zack0x01/CVE-2… #Hacking #CyberSecurity #ethicalhacking

zack0x01's tweet card. Contribute to zack0x01/CVE-2025-55182-advanced-scanner- development by creating an account on GitHub.

GitHub - zack0x01/CVE-2025-55182-advanced-scanner-

Fonte: github.com

Arshad Kazmi

@arshadkazmi42

12 h

My #llmHunter in action, trying to bypass Vercel's WAF for #React2Shell 🤞🤞🤞

publiclyDisclosed

@disclosedh1

6 de dez. de

Vercel Platform Protection started using @Hacker0x01 today: hackerone.com/vercel_platfor… , pays: 100$ min. #hackerone #bugbounty

D0n9

@D0n9D0n9

17 h

The React2shell bypass technique leverages various features of JSON and JavaScript, and the Flight Protocol can also be utilized for obfuscation. In Figure 3, which demonstrates bypassing a certain WAF, can you identify how many tricks are used? #React2Shell #CVE-2025-55182

D0n9D0n9's tweet image. The React2shell bypass technique leverages various features of JSON and JavaScript, and the Flight Protocol can also be utilized for obfuscation. In Figure 3, which demonstrates bypassing a certain WAF, can you identify how many tricks are used?
#React2Shell #CVE-2025-55182

Arshiya

@arshiyaiha

6 de dez. de

Detecting #React2Shell (CVE-2025-55182), Safe probe for Flight parser error with Curl and without harmful execution. Indicators of vulnerability: ✅ Response Code = 500 ✅ Word "digest" appears in response body #React2Shell #CVE202555182 #BugBounty

arshiyaiha's tweet image. Detecting #React2Shell (CVE-2025-55182), Safe probe for Flight parser error with Curl and without harmful execution.
Indicators of vulnerability:
✅ Response Code = 500
✅ Word "digest" appears in response body
#React2Shell #CVE202555182 #BugBounty

adam

@theCTO

6 de dez. de

the person who discovered the #react2shell vulnerability should get paid $1m

Gameel Ali 🤘

@MalGamy12

5 h

[1] CVE-2025-66478 exploited in the wild. Following up on Tyler Hudak post on #React2Shell, I found a log file from a compromised Next.js app. Cryptominer runs 3-stage attack: kill competitors, deploy miner, persist with watchdog. lnkd.in/dftjCX49

MalGamy12's tweet image. [1] CVE-2025-66478 exploited in the wild. Following up on Tyler Hudak post on #React2Shell, I found a log file from a compromised Next.js app. Cryptominer runs 3-stage attack: kill competitors, deploy miner, persist with watchdog. lnkd.in/dftjCX49

James Kettle

@albinowax

4 de dez. de

You can now scan for #react2shell in @Burp_Suite. To enable, install the Extensibility Helper bapp, go to the bambda tab and search for react2shell. Shout-out to @assetnote for sharing a reliable detection technique!