A chat page whose Flask backend runs a Java chatbot for every message; the bot logs its arguments with Log4j 2 and keeps the flag in an environment variable. The JNDI lookups of Log4Shell are not the way out.
Not startedDockercommit 6cc695cx86_64 · aarch64Secret
Retrieve the flag from the chat site.
The brief for this lab lives in its repository.