React2Shell Ultimate

Scanner for the Next.js React Server Components RCE flaw CVE-2025-66478, with a hosted web version.

Webfree

React2Shell Ultimate is a vulnerability scanner focused on detecting CVE-2025-66478, a remote code execution flaw in Next.js applications that use React Server Components. It offers multiple scan modes, WAF-bypass techniques, and both a local Python CLI and a hosted web scanner with an API, aimed at security researchers and bug bounty hunters doing authorized penetration testing.

Website

Full match profile

Behind the summary, Matchbox keeps a richer profile of React2Shell Ultimate - the signals our matcher actually reads to decide when to surface it. It stays private; claim the listing to see and control it.

Problem & pain-point mapping
Who we surface it to (audience fit)
What it's a strong alternative to
Trust & credibility signals

Claim React2Shell Ultimate to unlock →

Try Matchbox with your own problem

Describe what is not working - we’ll show you whether React2Shell Ultimate (or something else) actually fits.

Try a problem