Log4Shell

A remote code execution flaw in Apache Log4j 2.x where JNDI lookups inside logged strings caused servers to fetch and execute attacker classes.

See a verified Log4Shell exploit

Pentrova surfaces Log4Shell findings with a replayable PoC artifact and the chain resolver escalates confirmed findings into business impact.

Join the waitlist Read the glossary entry

/* When JS is disabled the IntersectionObserver never runs, so the `opacity: 0` initial state of reveal elements would hide content permanently. Snap everything visible. */ .scroll-reveal, [data-reveal], .reveal-group > .reveal { opacity: 1 !important; transform: none !important; animation: none !important; } .section-rule { transform: scaleX(1) !important; }