React2shell - RSC Sentinel

Name: React2shell - RSC Sentinel
Rating: 5 (1 reviews)
Author: Muhammad Uwais

By: Muhammad Uwais

A Firefox extension for detecting React2Shell vulnerabilities (CVE-2025-55182 and CVE-2025-66478) in web applications.

Download

Install

Features & Capabilities

Overview

RSC Sentinel is a Firefox browser extension for security researchers and educators who want to observe React Server Components (RSC) and Next.js App Router indicators while browsing. It focuses on passive detection by default, highlighting potential signals without altering site behavior. For authorized assessments, it also offers optional manual tools for active probing and controlled command execution initiated by the user.

Features

Passive Detection: Automatically watches for high-level RSC and App Router indicators during normal browsing.
Active Probing: Allows a user-initiated fingerprint request to gather additional signals in a controlled manner.
Manual Command Execution: Provides a manual, user-driven execution workflow intended strictly for authorized testing.

How Detection Works (High-Level)

RSC Sentinel evaluates a combination of runtime indicators, HTTP response headers, and response content patterns that are commonly associated with RSC and App Router behavior. Results are presented as signals and should be interpreted as indicators rather than definitive proof of vulnerability.

User Growth & Download Statistics

Add-on

By:

Daily users:

Rating:

Version:

1.1 Last updated: 2026-02-13

Version code:

6149901

Creation date:

2026-02-03

Risk:

Permissions:

Host permissions:

<all_urls>

Content scripts matches:

<all_urls>

Size:

166.75KB

Full description:

Source:

Firefox Add-ons Store

Data ingested on:

2026-06-20

Compare stats and ranking:

Ranking

# 11,820 ▲ 409

Other rankings

#102 in component keyword 19 #102 in reach keyword 3 ▲ 6#186 in associate keyword 7 ▲ 2#188 in definition keyword 31 ▲ 7

For Developers

Monetize with App Pass Boost with Extension Booster

Contact the developer

Chrome-Stats does not own this Firefox add-on. Please use these information below to contact the Firefox add-on developer.

Developed by:

Muhammad Uwais

Firefox Add-ons Store

https://addons.mozilla.org/firefox/addon/react2shell-rsc-sentinel/

Permission Change History

2026-02-14: Version 1.0 → 1.1

Remove Permissions: declarativeNetRequest

Is React2shell - RSC Sentinel Safe?

Risk impact

Risk impact measures the level of extra permissions an extension has access to. A low risk impact extension cannot do much harms, whereas a high risk impact extension can do a lot of damage like stealing your password, bypassing your security settings, and accessing your personal data. High risk impact extensions are not necessarily malicious. However, if they do turn malicious, they can be very harmful.

React2shell - RSC Sentinel requires a few sensitive permissions. Exercise caution before installing.

Risk impact analysis details

Critical Allows access to all websites, posing a significant security risk as it can monitor and modify data from any visited site.
High ******* ******* **** *** ****** ***** *** ***** ** ******* **** ********* ********* ** * *********** *****

Risk likelihood

Risk likelihood measures the probability that a Firefox add-on may turn malicious. This is determined by the publisher and the Firefox add-on reputation on Firefox Add-ons Store, the amount of time the Firefox add-on has been around, and other signals about the Firefox add-on. Our algorithms are not perfect, and are subject to change as we discover new ways to detect malicious extensions. We recommend that you always exercise caution when installing a Firefox add-on.

React2shell - RSC Sentinel is probably trust-worthy. Prefer other publishers if available. Exercise caution when installing this add-on.

Risk likelihood analysis details

High This extension has low user count. Unpopular extensions may not be stable or safe.
Medium **** ********* *** ***** ** *** **** * ******* *** ********** *** *** ** ****** ** *****
Low **** ********* *** ******* **** **** * ****** **** ***** ******** *** **** ****** ** ** ****** *** *****
Good **** ********* *** **** **** *******