8000
Skip to content

CONTRIBUTING.md

Latest commit

 

History

History
98 lines (68 loc) · 3.78 KB

CONTRIBUTING.md

File metadata and controls

98 lines (68 loc) · 3.78 KB

Contributing to ReactOOPS-WriteUp

Thank you for your interest in this project! This repository contains comprehensive documentation and educational materials for understanding and exploiting CVE-2025-55182 / CVE-2025-66478 (React2Shell RCE vulnerability).

Important Note on Attribution

This solution is built upon the excellent work of freeqaz and their react2shell project.

The exploit scripts, detection methods, and core exploitation techniques are derived from or directly utilize the react2shell framework. When contributing to this project or using the materials:

  1. Always credit freeqaz for the original react2shell work
  2. Reference the original repository: https://github.com/freeqaz/react2shell
  3. Respect the original license of react2shell
  4. Link to the original project in any derivative works

Exploit Framework Source

  • Author: freeqaz
  • Repository: https://github.com/freeqaz/react2shell
  • Description: Comprehensive exploitation framework for CVE-2025-55182 / CVE-2025-66478
  • License: Check the react2shell repository for license details

How to Contribute

Educational Content

If you'd like to contribute educational materials:

  1. Ensure the content is accurate and technically sound
  2. Include code examples with explanations
  3. Add references to official CVE documentation
  4. Maintain consistency with existing documentation style
  5. Properly attribute any sources

Bug Reports

Found an error in the documentation or scripts?

  1. Open an issue describing the problem
  2. Include screenshots or error messages
  3. Provide steps to reproduce
  4. Suggest a fix if possible

Code Improvements

To improve the exploit scripts or tools:

  1. Ensure your changes work with the original react2shell framework
  2. Add comments explaining your modifications
  3. Test on vulnerable systems (with proper authorization)
  4. Document any new features
  5. Credit freeqaz for the base implementation

Documentation Corrections

If you spot typos or inaccuracies:

  1. Submit a pull request with corrections
  2. Explain why the change is needed
  3. Reference supporting documentation if applicable

Code of Conduct

  • Use this knowledge responsibly and legally
  • Only test on systems you own or have explicit permission to test
  • Respect responsible disclosure practices
  • Share knowledge to improve security, not for malicious purposes
  • Always attribute original work appropriately

License

This repository is licensed under the MIT License. However, the exploitation techniques are derived from freeqaz's react2shell project. Please respect the licensing of all referenced materials.

Legal Disclaimer

These materials are for educational and authorized security testing purposes only. Unauthorized access to computer systems is illegal. Users are responsible for:

  • Obtaining explicit written permission before testing any system
  • Complying with all applicable laws and regulations
  • Using these tools ethically and legally
  • Understanding the legal implications in their jurisdiction

Questions?

If you have questions about contributing, attribution, or usage:

  1. Check the main README.md
  2. Review react2shell documentation: https://github.com/freeqaz/react2shell
  3. Consult official CVE documentation
  4. Open an issue for discussion

Thank you for respecting proper attribution and using this knowledge responsibly!

Additional Resources

Remember: Great security knowledge comes with great responsibility.
0