# How to detect React2Shell with Burp Suite

DevFeed: [How to detect React2Shell with Burp Suite](<https://devfeed.tech/articles/how-to-detect-react2shell-with-burp-suite-7723.md>)

Original publisher: [Read original article](<https://portswigger.net/blog/how-to-detect-react2shell-with-burp-suite>)

Author: Tom Ryder

Published: 2025-12-05T13:53:30Z

Content type: tutorial

Language: en

Sources: [PortSwigger Blog](<https://devfeed.tech/sources/portswigger-blog.md>)

Topics: [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Exploit](<https://devfeed.tech/topics/exploit.md>), [Security](<https://devfeed.tech/topics/security.md>), [Next.js](<https://devfeed.tech/topics/next-js.md>), [React](<https://devfeed.tech/topics/react.md>), [Testing](<https://devfeed.tech/topics/testing.md>), [configuration](<https://devfeed.tech/topics/configuration.md>)

Tags: [2025](<https://devfeed.tech/tags/2025.md>), [automated](<https://devfeed.tech/tags/automated.md>), [community](<https://devfeed.tech/tags/community.md>), [configuration](<https://devfeed.tech/tags/configuration.md>), [cve](<https://devfeed.tech/tags/cve.md>), [exploit](<https://devfeed.tech/tags/exploit.md>), [how-to](<https://devfeed.tech/tags/how-to.md>), [incident](<https://devfeed.tech/tags/incident.md>), [log4j](<https://devfeed.tech/tags/log4j.md>), [next-js](<https://devfeed.tech/tags/next-js.md>), [ransomware](<https://devfeed.tech/tags/ransomware.md>), [react](<https://devfeed.tech/tags/react.md>), [security](<https://devfeed.tech/tags/security.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>)

## AI overview

This tutorial explains how to detect the React2Shell vulnerabilities (CVE-2025-55182 and CVE-2025-66478) in Next.js-based applications using Burp Suite. It describes built-in default scans, custom scan configuration, and ActiveScan++ for automated detection and investigation.

## Source excerpt

Detecting React2Shell with Burp Suite Two new critical vulnerabilities, collectively known as React2Shell (CVE-2025-55182 and CVE-2025-66478), are rapidly gaining traction in the security community. D