Extract and Use Custom Attributes from Active Directory for NetScaler Appliance

Although Active Directory AD username and realm/domain attributes are often sufficient for identifying a user, at times you need even more details of the user. For example, "UserPrincipalName" that contains the user’s domain might represent a forest level realm and not the organization to which t...

Citrix ADC and Citrix NetScaler Gateway Multiple Vulnerabilities (CTX276688) (Direct Check)

Binary data citrixCTX276688directcheck.nbin...

Registry Based EPA Scan on ADC to Look Active Device or Computer Name of Explicit

This article describes how to configure a registry-based EPA scan on NetScaler to look for the active device or computer name of an explicit workstation. Background When the user types the NetScaler Gateway web address, the NetScaler Gateway checks to see if there are any client-based security...

Unable to login to Citrix Access Gateway Vserver using RADIUS DUO Authentication

Incorrect user name and password via NetScaler - can't login...

The vulnerability of the microprogramming software used in access control systems for the NetScaler Gateway virtual environment and the Citrix NetScaler Application Delivery Controller lies in the improper name restrictions on the path to the restricted directory. This allows attackers to gain access to published applications and carry out attacks from the Citrix server to other resources within the attacked company’s internal network.

The vulnerability of the microprogramming software used in access control systems for the NetScaler Gateway virtual environment, as well as the microprogramming software used in the Citrix NetScaler Application Delivery Controller, exists due to an incorrect limitation on the path name to the...

Security Bulletin: IBM MegaRAID Storage Manager is affected by a vulnerability in TLS (CVE-2019-6485)

Summary The following vulnerability in TLS has been addressed by IBM MegaRAID Storage Manager. Vulnerability Details CVEID: CVE-2019-6485 DESCRIPTION: Citrix NetScaler Application Delivery Controller and NetScaler Gateway could allow a remote attacker to obtain sensitive information, caused by a...

Director Does not Show NetScaler MAS Data, Network Tab Shows "Page Not Fonud"

NetScaler MAS data cannot be showed in director network tab --page was not found...

Chinese Hackers Exploit Cisco, Citrix Flaws in Massive Espionage Campaign

Researchers warn that APT41, a notorious China-linked threat group, has targeted more than 75 organizations worldwide in “one of the broadest campaigns by a Chinese cyber-espionage actor observed in recent years.” Between Jan. 20 and March 11, researchers observed APT41 exploiting vulnerabilities...

Citrix Systems SD-WAN Center and NetScaler SD-WAN Center Cross-Site Scripting Vulnerability

Citrix Systems SD-WAN Center and NetScaler SD-WAN Center are both products of Citrix Systems, Inc. SD-WAN Center is a centralized management system. SD-WAN Center is a centralized management system that configures, monitors, and analyzes all Citrix SD-WAN devices on the WAN.NetScaler SD-WAN Cente...

CVE-2019-11345

Citrix SD-WAN Center 10.2.x before 10.2.1 and NetScaler SD-WAN Center 10.0.x before 10.0.7 allow XSS...

CVE-2019-11345

Citrix SD-WAN Center 10.2.x before 10.2.1 and NetScaler SD-WAN Center 10.0.x before 10.0.7 allow XSS...

Cross site scripting

Citrix SD-WAN Center 10.2.x before 10.2.1 and NetScaler SD-WAN Center 10.0.x before 10.0.7 allow XSS...

CVE-2019-11345

Citrix SD-WAN Center and NetScaler SD-WAN Center are affected by CVE-2019-11345, an XSS vulnerability in the management console. Affected versions are Citrix SD-WAN Center 10.2.x before 10.2.1 and NetScaler SD-WAN Center 10.0.x before 10.0.7. The root cause is a cross-site scripting flaw that cou...

CVE-2019-11345

Citrix SD-WAN Center 10.2.x before 10.2.1 and NetScaler SD-WAN Center 10.0.x before 10.0.7 allow XSS...

TLS handshake fails with any TLS LB VIP FIPS 9700 - Reset code 9811 from ADC

Cannot reach Netscaler Gateway Page FIPS Not able to form any TLS handshake with any LB VIP on ADC ADC sends REST with code :: 9811 Transmission Control Protocol, Src Port: 443, Dst Port: 62706, Seq: 4271, Ack: 860, Len: 0 Source Port: 443 Destination Port: 62706 Stream index: 0 TCP Segment Len: ...

CVE-2019-11345: Improper Neutralization of Input During Web Page Generation

Citrix SD-WAN Center 10.2.x before 10.2.1 and NetScaler SD-WAN Center 10.0.x before 10.0.7 allow XSS...

EulerOS 2.0 SP5 : wireshark (EulerOS-SA-2020-1139)

According to the versions of the wireshark packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the NetScaler file parser could crash. This was addressed in wiretap/netscaler.c by...

Citrix ADC and Citrix NetScaler Gateway Arbitrary Code Execution (CTX267027)

Binary data 701262.prm...

404 Exploit Not Found: Vigilante Deploying Mitigation for Citrix NetScaler Vulnerability While Maintaining Backdoor

As noted in Rough Patch: I Promise It'll Be 200 OK, our FireEye Mandiant Incident Response team has been hard at work responding to intrusions stemming from the exploitation of CVE-2019-19781. After analyzing dozens of successful exploitation attempts against Citrix ADCs that did not have the...

Citrix ADC (NetScaler) Directory Traversal / Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Citrix ADC NetScaler Directory Traversal RCE', 'Description' = %q This module exploits a directory traversal in Citrix Application Delivery...