Sploitus

Exploit for Path Traversal in Citrix Application Delivery Controller Firmware

gitee · 2025-07-06

Exploit Code

MARKDOWN2 lines
## https://sploitus.com/exploit?id=BF3E0CEF-C4E5-5369-A14D-DDD5AE589F36
PoC exploit for CVE-2019-19781, a vulnerability in Citrix Application Delivery Controller (ADC) and Gateway. The repository, CitrixHoneypot, is a honeypot designed to detect and log scan and exploitation attempts for this vulnerability. The tool is written in Python and uses the http.server module to emulate a vulnerable server. It can be run as a standalone application or as a Docker container. The honeypot logs GET requests and attempts to emulate a vulnerable server, displaying a fake login page for certain URLs. The tool also includes a "struggle check" feature that rewards failed hackers with a gold star. The expected impact of this vulnerability is remote code execution, and the observable network artifacts include GET requests to the honeypot.