Tag: JNDI

Log4Shell (CVE-2021-44228): Blind RCE on a Major Retailer

// TL;DR Days after Log4Shell went public, I tested a private program’s attack surface for CVE-2021-44228. Using an obfuscated JNDI payload sprayed across multiple request headers…