Offensive toolkit (payload builder, serialized gadgets, stager) pulled from an open directory

[u/Straight-Practice-99]

https://hunt.io/blog/ukraine-state-data-exchange-graylog-log4shell

Not a malware sample, but a full offensive toolkit recovered from an exposed open directory: a Java payload builder, serialized CommonsBeanutils2 gadgets, a shell stager, and the orchestration script that tied them together.

Seven of the eight exploit directories were unmodified public PoCs. Hashes and the full toolkit breakdown are in the writeup.

https://hunt.io/blog/ukraine-state-data-exchange-graylog-log4shell