added new vuln code with shared sink

Author: nahsra

src/main/java/com/acme/jndi/FindResource.java

@@ -0,0 +1,20 @@
+package com.acme.jndi;
+
+import javax.naming.Context;
+import javax.naming.InitialContext;
+import javax.naming.NamingException;
+
+/** JNDI resource finder. */
+public final class FindResource {
+
+    private FindResource() { }
+
+    public static String findResource(final String resource) throws NamingException {
+        return lookupResource(resource);
+    }
+
+    private static String lookupResource(final String resource) throws NamingException {
+        Context ctx = new InitialContext();
+        return String.valueOf(ctx.lookup(resource));
+    }
+}

src/main/java/com/acme/jndi/JNDIVuln.java

@@ -1,8 +1,6 @@
 package com.acme.jndi;
 
-import jakarta.ws.rs.GET;
-import jakarta.ws.rs.Path;
-import jakarta.ws.rs.QueryParam;
+import jakarta.ws.rs.*;
 
 import javax.naming.Context;
 import javax.naming.InitialContext;
@@ -17,4 +15,14 @@ public String lookupResource(@QueryParam("resource") final String resource) thro
         Object obj = ctx.lookup(resource);
         return String.valueOf(obj);
     }
+
+    @POST
+    public String lookupAnotherResource(@QueryParam("resource") final String resource) throws NamingException {
+        return FindResource.findResource(resource);
+    }
+
+    @PUT
+    public String lookupYetAnotherResource(@QueryParam("resource") final String resource) throws NamingException {
+        return FindResource.findResource(resource);
+    }
 }