React2Shell Scanner

Terms of Service

Last Updated: January 6, 2026

These Terms of Service ("Terms") govern your use of the React2Shell Scanner service ("Service"). By using our Service, you agree to these Terms.

1. Service Description

React2Shell Scanner is a vulnerability assessment tool that checks websites for susceptibility to CVE-2025-55182 (React2Shell), a remote code execution vulnerability in React Server Components.

2. Authorization Requirement

IMPORTANT: By using this Service, you represent and warrant that:

  • You own the website being scanned, OR
  • You have explicit written authorization from the website owner to perform security testing, OR
  • You are acting within the scope of a legitimate bug bounty program that permits such scanning.

Unauthorized scanning of websites is illegal and may violate the Computer Fraud and Abuse Act (CFAA), Computer Misuse Act, or similar laws in your jurisdiction. We are not responsible for your compliance with applicable laws.

3. Acceptable Use

You agree NOT to:

  • Scan any URL without proper authorization
  • Use the Service to facilitate attacks, exploitation, or unauthorized access
  • Attempt to overwhelm, disrupt, or abuse the Service (rate limiting, DoS)
  • Reverse engineer, decompile, or extract source code from the Service
  • Use automated tools to access the Service beyond normal usage patterns
  • Misrepresent scan results or use them to harm others

4. No Guarantees

The Service is provided "AS IS" without warranties of any kind.

  • Scan results are not guaranteed to be accurate, complete, or current.
  • A "not vulnerable" result does not guarantee security.
  • A "vulnerable" result should be verified through additional testing.
  • We do not guarantee uninterrupted or error-free service.

You acknowledge that vulnerability detection is inherently imperfect and that false positives and false negatives may occur.

5. Limitation of Liability

To the maximum extent permitted by law:

  • We are not liable for any damages arising from your use of the Service, including direct, indirect, incidental, consequential, or punitive damages.
  • We are not liable for any actions you take based on scan results.
  • We are not liable for any legal consequences resulting from unauthorized scanning.
  • Our total liability shall not exceed the amount you paid for the Service (if any).

6. Indemnification

You agree to indemnify and hold harmless React2Shell Scanner, its operators, and affiliates from any claims, damages, losses, or expenses (including legal fees) arising from:

  • Your use of the Service
  • Your violation of these Terms
  • Your violation of any applicable law
  • Any unauthorized scanning you perform

7. Intellectual Property

The Service, including its design, code, and branding, is owned by us and protected by intellectual property laws. You may not copy, modify, or distribute any part of the Service without permission.

8. Termination

We reserve the right to suspend or terminate your access to the Service at any time, for any reason, without notice. Sections 4, 5, 6, and 7 survive termination.

9. Modifications

We may modify these Terms at any time. Continued use of the Service after changes constitutes acceptance of the modified Terms.

10. Governing Law

These Terms are governed by the laws of the State of Florida, United States, without regard to its conflict of law provisions. Any disputes arising from these Terms or your use of the Service shall be resolved exclusively in the state or federal courts located in Florida, and you consent to the personal jurisdiction of such courts.

11. Severability

If any provision of these Terms is found unenforceable, the remaining provisions remain in effect.

12. Contact

For questions about these Terms, contact us via the support channel at support@react2shellscan.com.

By using React2Shell Scanner, you acknowledge that you have read, understood, and agree to be bound by these Terms of Service.