## https://sploitus.com/exploit?id=58B4D740-0167-56D9-A2D1-BBA94FCB93A4
This is a PoC exploit for CVE-2019-17571, an RCE vulnerability in the Java JNDI API. The repository is a malicious LDAP server for JNDI injection attacks, containing LDAP and HTTP servers for exploiting insecure-by-default Java JNDI API. The tool brings new attack vectors by leveraging the power of ObjectFactories.
The target product/service is Java JNDI API, and the vulnerability class/vector is RCE (Remote Code Execution). The probable entry points are the `ExportObject` class, which is served via HTTP for URLClassloaders, and the `HttpServer` class, which patches the bytecode of the `ExportObject` constructor by injecting execution of a command.
The execution context is a Java application, and the run method is typically invoked by starting the HTTP server and the LDAP server. Preconditions include a vulnerable version of the Java JNDI API, and the expected impact is RCE. Observable network or file artifacts/IO include the creation of a malicious entry containing a payload, which can be useful to achieve RCE.
The tool uses the `com.unboundid` library to create an LDAP server, and the `com.sun.net.httpserver` library to create an HTTP server. The `HttpServer` class