JNDI -Vulnerability identification [1-1],[1-2] cases :

 @Abdelmoughite Eljoaydi

/**
*1-1 Exceptional class object creation/code injection behaviour :   *----------------------------------------------------------------------------------------------------------------------------------------
*/
<script type="text/javascript">
       document.write('<div class="JSTree">');
       setBaseDirectory('/console/utils/JStree/images/');
       setTaxonomyDelimeter('.');
    {
        _a = new TreeNode('server', null, '[ MALICIOUS CODE ]', '/console/consolejndi.portal?_nfpb=true&_pageLabel=JNDIHomePage&server=[ MALICIOUS CODE ]', 'images/spacer.gif', 'images/spacer.gif', null, '[MALICIOUS CODE]', false, false);

     var messageCatalog = new Array(7);
     messageCatalog["tree.popup.collapsenode.label"] = "Collapse Node";
     messageCatalog["tree.popup.expandnode.label"] = "Expand Node";
     messageCatalog["tree.popup.expanded.label"] = #"Expanded";
     messageCatalog["tree.popup.collapsed.label"] = "Collapsed";
     messageCatalog["tree.popup.of.label"] = "of";
     messageCatalog["tree.popup.selected.label"] = "Selected";
     messageCatalog["tree.popup.level.label"] = "Level";
        setHighlightedNodes( 'base' );
        createTree(_a);
    }
      document.write('<\/div>');
      </script>
/**
*1-2 Normal behaviour (Valid "nodeName") :   *----------------------------------------------------------------------------------------------------------------------------------------
*AdminServer : valid NodeName.
*/
     <script type="text/javascript">
       document.write('<div class="JSTree">');
       setBaseDirectory('/console/utils/JStree/images/');
       setTaxonomyDelimeter('.');
     {

        // Parent Node "_a".
       _a = new TreeNode('server', null, 'AdminServer', '/console/consolejndi.portal?_nfpb=true&_pageLabel=JNDIHomePage&server=AdminServer', 'images/spacer.gif', 'images/spacer.gif', null, 'AdminServer', false, true);

        _aa = new TreeNode('__WL_GlobalJavaAppNode',_a, '__WL_GlobalJavaApp', '/console/consolejndi.portal?_pageLabel=JNDIContextPageGeneral&_nfpb=true&JNDIContextPortlethandle=com.bea.console.handles.JndiContextHandle%28%22__WL_GlobalJavaApp%3BAdminServer%22%29', 'images/spacer.gif', 'images/spacer.gif', null, '__WL_GlobalJavaApp', false, false);

        _aa = new TreeNode('ejbNode',_a, 'ejb', '/console/consolejndi.portal?_pageLabel=JNDIContextPageGeneral&_nfpb=true&JNDIContextPortlethandle=[....]','images/spacer.gif',   'images/spacer.gif', null, 'ejb', false, true);

        _aaa = new TreeNode('mgmtNode',_aa, 'mgmt', '/console/consolejndi.portal?_pageLabel=JNDIContextPageGeneral&_nfpb=true&JNDIContextPortlethandle=[.....]','images/spacer.gif', 'images/spacer.gif', null, 'mgmt', false, true);
        [......]
     }

    -----------------------------------------------------------------------------------------------------------------------------------------