
Demonstrates a proof-of-concept exploit for CVE-2021-43297, a deserialization vulnerability in Apache Dubbo's Hessian2 protocol, with provider and consumer attack endpoints.
将两个项目分别导入两个idea
先运行org.apache.dubbo.samples.basic.BasicProvider#main启动服务端
再运行org.apache.dubbo.samples.basic.BasicConsumer#main启动客户攻击端
效果:
