CVE-2019-19781-Forensic

CVE-2019-19781-Forensic 참고 : 이제는 FireEye와 Citrix에서 공식적으로 발표한 도구를 사용하는 것을 권장합니다 : https://github.com/fireeye/ioc-scanner-CVE-2019-19781 이 작은 스크립트는 보안 분석가가 자신의 시스템에서 성공한 CVE-2019-19781 악용의 흔적을 발견하는 데 도움을 주기 위해 만들어졌습니다. 자유롭게 포크하여 개선해 주세요! 손상된 시스템에서의 출력 예시는 여기에서 확인할 수 있습니다 : outputdemo.txt. 사용법 1-...

Server side request forgery (ssrf)

Citrix NetScaler VPX through NS12.0 53.13.nc allows an SSRF attack via the /rapi/readurl URI by an authenticated attacker who has a webapp account. The attacker can gain access to the nsroot account, and execute remote commands with root privileges...

CVE-2018-6186

Citrix NetScaler VPX through NS12.0 53.13.nc allows an SSRF attack via the /rapi/readurl URI by an authenticated attacker who has a webapp account. The attacker can gain access to the nsroot account, and execute remote commands with root privileges...

CVE-2018-6186: Server-Side Request Forgery (SSRF)

Citrix NetScaler VPX through NS12.0 53.13.nc allows an SSRF attack via the /rapi/readurl URI by an authenticated attacker who has a webapp account. The attacker can gain access to the nsroot account, and execute remote commands with root privileges...