---
id: 227
title: "How to detect React2Shell with Burp Suite"
source_domain: portswigger.net
source_url: "https://portswigger.net/blog/how-to-detect-react2shell-with-burp-suite"
published_at: "2025-12-05 13:53"
tags: ["rce", "appsec", "burp-suite", "detection", "react2shell", "nextjs", "cve-2025-55182", "cve-2025-66478"]
phying_url: "https://phying.com/item/227"
lang: en
---

# How to detect React2Shell with Burp Suite

## Summary

Burp Suite's default scans now detect React2Shell (CVE-2025-55182 and CVE-2025-66478), two critical unauthenticated RCE flaws in React server components affecting Next.js applications.

## Intelligence Metadata

- **Sources:** portswigger.net
- **Published:** 2025-12-05 13:53
- **Original:** https://portswigger.net/blog/how-to-detect-react2shell-with-burp-suite
- **Phying News:** https://phying.com/item/227