Data exfiltration \n In  Part 1 , we covered the background for the vulnerability. Now, let’s dig into the actual exploits. As mentioned in the previous post, JNDI allows not only querying of local data within the Java Runtime Environment, but also remote systems such as DNS and LDAP. By combining JNDI, remote systems, the env lookup, and nesting, a payload can be created that, when placed into text that is meant to be logged, results in data exfiltration. \n"}}"> Data exfiltration In  Part 1 , we covered the background for the vulnerability. Now, let’s dig into the actual exploits. As mentioned in the previous post, JNDI allows not only querying of local data within the Java Runtime Environment, but also remote systems such as DNS and LDAP. By combining JNDI, remote systems, the env lookup, and nesting, a payload can be created that, when placed into text that is meant to be logged, results in data exfiltration.…