React2Shell is a security research tool designed for authorized penetration testing and educational purposes only. This tool exploits CVE-2025-55182, a critical vulnerability in React Server Components.

Before using this tool, you MUST:

1. Have explicit written authorization from the system owner
2. Understand the legal implications in your jurisdiction
3. Use only in controlled environments (like the included lab) for learning
4. Never target production systems without proper authorization

If you find a security vulnerability in React2Shell itself (not the CVE it exploits), please:

1. Do NOT open a public issue
2. Email the maintainer directly with details
3. Allow reasonable time for a fix before public disclosure

CVE-2025-55182 has been patched. If you discover new vulnerabilities:

• React: https://github.com/facebook/react/security/advisories
• Next.js: https://github.com/vercel/next.js/security/advisories
• Vercel: https://vercel.com/security

Unauthorized access to computer systems is illegal. This tool is provided for:

• Authorized penetration testing engagements
• Security research with proper authorization
• CTF competitions and security training
• Testing your own systems

The authors are not responsible for any misuse or damage caused by this tool. Users assume all legal responsibility for their actions.

• React Security Advisory
• Next.js Security Advisory
• CVE-2025-55182 Details