Need guidance on investigating a JBoss Java service on port 28080 — possible Log4Shell angle (CVE-2021-44228), no callback received

Hi everyone, I'm working on an authorized penetration testing case study/lab, and I'm currently stuck while investigating TCP/28080. Looking for guidance on what I should investigate next. Nmap: 28080/tcp open http JBoss Enterprise Application Platform The interesting behavior is that almost any HTTP request/path returns the same response:...