来源

关联漏洞

描述

Next.js Middleware Authorization Bypass Tool (CVE-2025-29927)

介绍

# NextBypass 🚨
**Next.js Middleware Authorization Bypass Tool (CVE-2025-29927)**

[![asciicast](https://asciinema.org/a/uyDuYrRBj2r8gqN1u6oDvsEVU.svg)](https://asciinema.org/a/uyDuYrRBj2r8gqN1u6oDvsEVU)
## Features
- Exploit CVE-2025-29927 via `x-middleware-subrequest` header  
- Auto-browser integration (Proxy/Bookmarklet)  
- Vulnerability scanning & log analysis  
- Network traffic monitoring  

## Installation
```bash
git clone https://github.com/your-username/NextBypass.git
cd NextBypass
chmod +x NextBypass
```

## Usage
```bash
./NextBypass  # Interactive menu
```

## Options
| Option | Description                          |
|--------|--------------------------------------|
| 1      | Terminal exploit                     |
| 2      | Browser exploit (Proxy/Bookmarklet)  |
| 3      | Vulnerability checker                |
| 4      | Scan logs for attacks                |
| 5      | Monitor network traffic (Root)       |

## Legal
- **Educational use only**  
- **Not responsible for misuse**  
- **Upgrade Next.js to patched versions**  

[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)

文件快照

 [4.0K]  /data/pocs/50449d61a692897166e2269dba9c74137fd03d57
├── [1.0K]  LICENSE
└── [1.1K]  README.md

0 directories, 2 files

备注