3 ms·

Highly likely it was unpatched Citrix Netscaler https://cyberplace.social/@GossiTheDog/111391466200487619 https://cyberplace.social/@GossiTheDog/11139146620048

• ajsnigrutin 3y ago
  I didn't check the CVEs or anything... Are we talking about a sophisticated attack with a lot of effort? Or like a 14yo script kiddie running a portscan and then a script (downloaded from the internet) on all found open ports?
  • technion 3y ago
    It doesn't come much easier than the Citrixbleed exploit. https://github.com/GossiTheDog/scanning/blob/main/CitrixBleed.curl https://github.com/GossiTheDog/scanning/blob/main/CitrixBlee... But I do think society needs to get over the "14 year old script kiddie" slur. The "Enterprise Architects" and "CISCO" being paid a fortune only to be victims of basic issues don't get to look their nose on the people who used a basic exploit.
    • drekipus 3y ago
      That's a very good point, but I (like to..) think the slur is used against the administrators.. Ie: "you got beaten by a14yo skiddie, are you daft" ?