Apache Log4j2 Jndi RCE

[CodeHz]

https://twitter.com/P0rZ9/status/1468949890571337731

[CodeHz]

Tested on: Steam (search box), Apple (icloud), Minecraft (both server and client, just type PoC in chat box) (Tip: use dnslog to test(no payload), so it should not cause any problems)

[CoderHY → CodeHz]

Just tested and I can confirm it also works on samsung cloud storage and all Naugthy dog games. This is going to be big.

(also could not reproduce on iCloud, what url did you use?)

[Fabiolino]

Tested on google photo using dnslog, confirm it is working there too