CVE-2025-5777

Exploit for CVE-2025-5777: Citrix NetScaler Memory Disclosure CitrixBleed 2 T1606 Disclaimer Intented for authorized use only. It is your responsibility to verify authorization before use. I am not responsible for any legal or criminal proceedings filed against you for using this. Description...

CVE-2025-5777-Exploit

CVE-2025-5777 Exploit Tool 🔥 A powerful educational tool designed to demonstrate and analyze the vulnerability CVE-2025-5777 affecting Citrix NetScaler VPN. This project is part of the GO-TO CVE initiative. ⚠️ For educational purposes only. Do NOT use this on systems you don't own or have explicit...

LockBit-Ransomware-Analysis

🔐 LockBit Ransomware Analysis – Citrix Bleed Exploitation 📌 Overview This project presents a detailed threat intelligence and incident response analysis of the October 2023 LockBit ransomware attack targeting Boeing. The attackers exploited CVE-2023-4966 Citrix Bleed to hijack NetScaler session...

CVE-2025-5777

CVE-2025-5777 Citrix NetScaler Memory Leak Exploit !WARNING This script is intended for educational and research purposes only. Do not use it against systems without explicit permission. Unauthorized access or testing is illegal and unethical. Read the full DISCLAIMER before using this script...

citrix-netscaler-triage

Citrix NetScaler Triage This repository contains triage scripts for Citrix NetScaler devices: iocitrix.py -- a Dissect script to Triage a Citrix NetScaler image/target. scan-citrix-netscaler-version.py -- Scan and fingerprint the version of a NetScaler device over HTTPs...

CitrixBleedCVE-2026-8452-2025-5777

CitrixBleed Exploit Tool - CVE-2025-5777 & CVE-2026-8452. Unauthenticated remote memory read from Citrix NetScaler ADC & Gateway. Steal admin session tokens, extract nsroot hashes, dump secrets, and bypass MFA. Python 3 exploit with full memory parsing. https://satoshi-box.com/pay/CSHeT8...

CVE-2025-12101-Scanner-PoC

CVE-2025-12101 Scanner Multi-threaded vulnerability scanner for CVE-2025-12101 - Citrix NetScaler XSS via SAML RelayState. Overview CVE-2025-12101 is a reflected XSS vulnerability in Citrix NetScaler ADC and Gateway products affecting the /cgi/logout endpoint through the RelayState parameter. CVS...

CVE-2023-3519

CVE-2023-3519 NetScaler Citrix ADC CVE-2023-3519 Scanner A simple scanner to find netscalers and look at the las modified date on the HTTP header response this project is a scanner made by me in C using the source-code of mrr3b00t in powershell...

watchTowr-vs-Citrix-Netscaler-CVE-2026-88772

watchTowr-vs-Citrix-Netscaler-CVE-2026-88772 Detection Artifact Generator for Citrix NetScaler CVE-2026-88772 See our blog post for technical details. Detection in Action / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y | | \ / | | / // || \ ||| | \ / // || / / /...

watchTowr-vs-Netscaler-CVE-2026-8451

CVE-2026-8451 Citrix Netscaler memory overread Citrix Netscaler overread Detection Artifact Generator Tool! Detection in Action This Detection Artifact Generator will accept a target Netscaler device, and attempt to leak memroy via CVE-2026-8451. All it needs is the target system. Include the...

citrix_adc_netscaler_lfi

citrixadcnetscalerlfiscan !alt textcitrix This Metasploit-Framework module can be use to help companies to check the last Citrix vulnerabilites disclosed July 08, 2020. CVE-2020-8193 CVE-2020-8195 CVE-2020-8196 Public reporting on July 8th, 2020 by Donny Maasland discussed how the vulnerability...

citrix-logchecker

citrix-logchecker Parse citrix netscaler logs to check for signs of CVE-2023-4966 exploitation Written by Otmar Lendl. Usage: ./citrix-anomaly.pl -d -v -h -p file -a X logfiles This script parse citrix netscale syslog files and looks for session reconnects that might be the result of a...

CVE-2025-7775

CVE-2025-7775 Version detection PowerShell There's also a cool file hash based method: https://github.com/fox-it/citrix-netscaler-triage/blob/main/scan-citrix-netscaler-version.py You can also potentially use the client binaries to enumerate the version not sure if you need auth... not looked at...

CitrixNetscalerAnalysis

Citrix Analysis Notebook A jupyter notebook to aid in automating some of the forensic analysis related to Citrix Netscaler hosts compromised via CVE-2019-19781. For help retrieving artifacts to examine see this Citrix triage script. All notes/suggestions are welcome. Feel free to submit pull...

CVE-2026-3055---Citrix-NetScaler-Memory-Overread-PoC

🔓 CVE-2026-3055 - Citrix NetScaler Memory Overread Exploit ⚠️ WARNING This tool is for educational purposes and authorized testing only. Do not use on systems without explicit permission. 📋 Description Exploit for CVE-2026-3055 - out-of-bounds read memory overread vulnerability in NetScaler ADC an...

CVE-2025-7775

CVE-2025-7775 Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway VPN virtual server, ICA Proxy, CVPN, RDP Proxy or AAA virtual server OR NetScaler ADC and NetScaler Gateway 13.1,...

CVE-2019-19781-Checker

CVE-2019-19781-Checker Check your website for CVE-2019-19781 Vulnerable VISIT https://citrix-checker.com TO CHECK IF YOU ARE VULNERABLE FOR CVE-2019-19781 PLEASE USE OUR CHECKER TWO TIMES TO BE SURE This website gives you the results if your service is vulnerable for CVE-2019-19781. There is a...

CVE-2025-6543_CitrixNetScaler_PoC

CVE-2025-6543CitrixNetScalerPoC Multi-host, multi-port scanner and auditor for CVE-2025-6543-affected NetScaler devices. Supports SNMP and SSH enumeration with optional CSV reporting and exploit stubs. 🔐 GitHub Repository Description CVE-2025-6543 Enhanced Checker Multi-host, multi-port scanner a...

cve-2025-5777-citrixbleed2_reproduction

CVE-2025-5777 — CitrixBleed 2 Citrix NetScaler Memory Disclosure CVSS 9.3 — Critical — Active exploitation in the wild CitrixBleed 2 is a memory disclosure vulnerability in Citrix NetScaler ADC and NetScaler Gateway. Insufficient input validation in the authentication endpoint causes a memory...

watchTowr-vs-Citrix-Netscaler-PreAuth-RCE-CVE-2026-8452

watchTowr-vs-Citrix-Netscaler-PreAuth-RCE Detection Artifact Generator for Citrix NetScaler CVE-2026-8452 See our blog post for technical details. Detection in Action python3 watchTowr-vs-Citrix-Netscaler-PreAuth-RCE.py --target https://172.16.5.12:9443/ / | | |\ \ \ / / \ \ / | | | | / \ / /...