CVE-2023-4966 PoC — Unauthenticated sensitive information disclosure

Source

https://github.com/0xKayala/CVE-2023-4966

Associated Vulnerability

Title: Unauthenticated sensitive information disclosure (CVE-2023-4966)
Description:Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA  virtual server.

Description

CVE-2023-4966 - NetScaler ADC and NetScaler Gateway Memory Leak Exploit

Readme

# CVE-2023-4966 Exploit Script
CVE-2023-4966 - NetScaler ADC and NetScaler Gateway Memory Leak Exploit

# Usage:

```
usage: python banner.py

optional arguments:
  -h, --help       show this help message and exit
  --target TARGET  The Citrix ADC / Gateway target, excluding the protocol (e.g. 192.168.1.200)
```

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →