Log4Shell demo tutorial

[SharpRake]

Putting together a tutorial that walks readers through running a sample app that includes a vulnerable version of Log4j.

[kimsterv]

There's a new vulnerability that's similar "text4shell" and I believe @johnfosborneiii has done some prototyping for a demo. There's a blog post in the works here. It might make sense to "genericize" this tutorial a bit if a similar workflow could be used for text4shell.

[dlorenc]

Is this issue still relevant?

[SharpRake]

@dlorenc Yes, there is a draft for this tutorial in the home stretch of review. I expect it to be published next week, at which point I'll close this issue