jndipoc Proof of concept showing how java byte code can be injected through InitialContext.lookup() calls Blog post on tumblr: http://zerothoughts.tumblr.com/post/137769010389/fun-with-jndi-remote-code-injection