A shortcut for Second Degree Black Belt - Using Components with Known Vulnerabilities & Insecure Deserialization

[axqd]

Exploit XXE alone to view /usr/local/tomcat/logs/catalina.2023-10-05.log on host2:

argument:
-DSECRET3=/code/getCode.html#eyJhbGciOiJIUz...