Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Apache-Dubbo-Hessian2-CVE-2021-43297 — Demonstrates a proof-of-concept exploit for CVE-2021-43297, a deserialization vulnerability in Apache Dubbo's Hessian2 protocol, with provider and consumer attack endpoints. | Kitploit
Tools/GitHubGitHub/longofo/apache-dubbo-hessian2-cve-2021-43297
Exploit FrameworksVulnerability AnalysisExploitationWeb Application ExploitationBinary Exploitation
GitHublongofo/apache-dubbo-hessian2-cve-2021-43297

Apache-Dubbo-Hessian2-CVE-2021-43297

Demonstrates a proof-of-concept exploit for CVE-2021-43297, a deserialization vulnerability in Apache Dubbo's Hessian2 protocol, with provider and consumer attack endpoints.

View Repository
4694 years agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Deserialization during Apache Dubbo Hessian2 Exception Handling (CVE-2021-43297)

  1. Import the two projects into two separate IDEA instances

  2. First run org.apache.dubbo.samples.basic.BasicProvider#main to start the server

  3. Then run org.apache.dubbo.samples.basic.BasicConsumer#main to start the client attack end

Effect:

https://paper.seebug.org/1814/

Download Tool