CVE-2019-19781 PoC — Citrix Application Delivery Controller和Citrix Systems Gateway 路径遍历漏洞

Source

https://github.com/jamesjguthrie/Shitrix-CVE-2019-19781

Associated Vulnerability

Title: Citrix Application Delivery Controller和Citrix Systems Gateway 路径遍历漏洞 (CVE-2019-19781)
Description:An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. They allow Directory Traversal.

Description

My working exploit script for Shitrix (CVE-2019-19781)

Readme

# Shitrix-CVE-2019-19781
My working approach to exploiting Shitrix

Updated 21st July, 2020 - now supports multi-worded commands and forward slashes

You need curl >= 7.42.0

Call it with, e.g.:
```./shitrix.sh target port ls -al```

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →