[identity] receiver_pid=39478 [identity] TcpSocketServer=file:/workspace/bundle/artifacts/classes-samples/ [identity] ObjectInputStreamLogEventBridge=file:/workspace/bundle/artifacts/classes-samples/ [identity] FilteredObjectInputStream=file:/workspace/bundle/artifacts/jars/log4j-api-2.26.1.jar [identity] Log4jLogEvent=file:/workspace/bundle/artifacts/jars/log4j-core-2.26.1.jar [identity] LogManager.version=2.26.1 [identity] InvokerTransformer=file:/workspace/bundle/artifacts/jars/commons-collections-3.2.1.jar [receiver] org.apache.logging.log4j.server.TcpSocketServer.createSerializedSocketServer() bound to 0.0.0.0:30132 (no auth) [event] logger=org.apache.logging.log4j.server.TcpSocketServer.30132 level=TRACE msg=Enter [event] logger=org.apache.logging.log4j.server.TcpSocketServer.30132 level=DEBUG msg=Listening for a connection ServerSocket[addr=/0.0.0.0,localport=30132]... [event] logger=org.apache.logging.log4j.server.TcpSocketServer.30132 level=DEBUG msg=Accepted connection on ServerSocket[addr=/0.0.0.0,localport=30132]... [event] logger=org.apache.logging.log4j.server.TcpSocketServer.30132 level=DEBUG msg=Socket accepted: Socket[addr=/127.0.0.1,port=54214,localport=30132] [event] logger=org.apache.logging.log4j.server.TcpSocketServer.30132 level=DEBUG msg=Listening for a connection ServerSocket[addr=/0.0.0.0,localport=30132]... [event] logger=org.apache.logging.log4j.server.TcpSocketServer.30132 level=TRACE msg=Enter [!!] GadgetOnly.readObject() EXECUTED on receiver - FOIS allowlist bypassed [event] logger=attacker level=INFO msg=benign message [event] logger=org.apache.logging.log4j.server.TcpSocketServer.30132 level=TRACE msg=Exit