get shell or die trying
https://www.veracode.com/blog/research/exploiting-jndi-injections-java
I wrote this article while working at the Veracode Research team.