Log4j Vulnerability Lab: Video Walkthrough

This walkthrough reproduces, step by step, a hands-on lab that emulates the Log4Shell (Log4j) vulnerability from both the defender's and the attacker's perspective. It starts with configuring network detection tooling, moves into standing up attacker infrastructure and firing two exploitation techniques (a proof-of-concept file write and a full reverse shell), and finishes by walking through the resulting detections and packet captures to understand exactly how the exploit behaves on the wire.

Because the operator controls both sides of this lab, the same activity you'd normally only see from a defender's viewpoint (Suricata alerts, packet captures) can be directly correlated with the exact attacker actions that produced it.