Comments on: Hacking CITRIX – the forceful way http://www.gnucitizen.org/blog/hacking-citrix-the-forceful-way/ Information Security Think Tank Sat, 02 Feb 2013 17:50:40 +0000 hourly 1 http://wordpress.org/?v=3.4.1 By: infoz http://www.gnucitizen.org/blog/hacking-citrix-the-forceful-way/comment-page-1/#comment-129673 infoz Sun, 23 Jan 2011 00:19:06 +0000 http://www.gnucitizen.org/blog/hacking-citrix-the-forceful-way#comment-129673 What did you do to get the scripts working in XP? They execute fine from cmd, wscript is installed, .net, etc.. but they never launch the Citrix client (which is also installed) for enum, connect or bforce. I can launch an .ica file to the target server with no issues however running the .js files never launch the client. Any help is appreciated! What did you do to get the scripts working in XP? They execute fine from cmd, wscript is installed, .net, etc.. but they never launch the Citrix client (which is also installed) for enum, connect or bforce. I can launch an .ica file to the target server with no issues however running the .js files never launch the client. Any help is appreciated!

]]> By: nod32升级id » Hacking Citrix http://www.gnucitizen.org/blog/hacking-citrix-the-forceful-way/comment-page-1/#comment-128440 nod32升级id » Hacking Citrix Thu, 01 Apr 2010 12:40:05 +0000 http://www.gnucitizen.org/blog/hacking-citrix-the-forceful-way#comment-128440 [...] http://www.gnucitizen.org/blog/citrix-owning-the-legitimate-backdoor/http://www.gnucitizen.org/blog/hacking-citrix-the-forceful-way/ [...] [...] http://www.gnucitizen.org/blog.....ceful-way/ [...]

]]> By: pdp http://www.gnucitizen.org/blog/hacking-citrix-the-forceful-way/comment-page-1/#comment-125575 pdp Sun, 25 Jan 2009 07:50:59 +0000 http://www.gnucitizen.org/blog/hacking-citrix-the-forceful-way#comment-125575 back again :) still moving infrastructures... back again :) still moving infrastructures…

]]> By: jeff http://www.gnucitizen.org/blog/hacking-citrix-the-forceful-way/comment-page-1/#comment-125302 jeff Wed, 14 Jan 2009 19:59:58 +0000 http://www.gnucitizen.org/blog/hacking-citrix-the-forceful-way#comment-125302 Gone again, the links... Gone again, the links…

]]> By: Hacking Citrix http://www.gnucitizen.org/blog/hacking-citrix-the-forceful-way/comment-page-1/#comment-122453 Hacking Citrix Thu, 05 Jun 2008 14:38:22 +0000 http://www.gnucitizen.org/blog/hacking-citrix-the-forceful-way#comment-122453 [...] A more recent reference to hacking Citrix is from GNUCITIZEN and can be found here [...] [...] A more recent reference to hacking Citrix is from GNUCITIZEN and can be found here [...]

]]> By: xyyzy http://www.gnucitizen.org/blog/hacking-citrix-the-forceful-way/comment-page-1/#comment-58769 xyyzy Tue, 16 Oct 2007 13:17:32 +0000 http://www.gnucitizen.org/blog/hacking-citrix-the-forceful-way#comment-58769 thanks pdp, found them thanks pdp, found them

]]> By: pdp http://www.gnucitizen.org/blog/hacking-citrix-the-forceful-way/comment-page-1/#comment-58733 pdp Tue, 16 Oct 2007 10:44:45 +0000 http://www.gnucitizen.org/blog/hacking-citrix-the-forceful-way#comment-58733 check the bottom of the post check the bottom of the post

]]> By: xyyzy http://www.gnucitizen.org/blog/hacking-citrix-the-forceful-way/comment-page-1/#comment-58732 xyyzy Tue, 16 Oct 2007 10:42:07 +0000 http://www.gnucitizen.org/blog/hacking-citrix-the-forceful-way#comment-58732 Where are the videos? seems youtube has removed them. Where are the videos? seems youtube has removed them.

]]> By: curious mind http://www.gnucitizen.org/blog/hacking-citrix-the-forceful-way/comment-page-1/#comment-58700 curious mind Tue, 16 Oct 2007 07:50:06 +0000 http://www.gnucitizen.org/blog/hacking-citrix-the-forceful-way#comment-58700 pdp, I totally agree...applications without authentication is asking for trouble..but as you showed that even with authentication you're not really safe that's why I hope somebody can answer my questions.. pdp, I totally agree…applications without authentication is asking for trouble..but as you showed that even with authentication you’re not really safe that’s why I hope somebody can answer my questions..

]]> By: pdp http://www.gnucitizen.org/blog/hacking-citrix-the-forceful-way/comment-page-1/#comment-58688 pdp Tue, 16 Oct 2007 06:44:29 +0000 http://www.gnucitizen.org/blog/hacking-citrix-the-forceful-way#comment-58688 curious mind, I have no idea how CITRIX is shipped but I believe that you are on the right track. However, it is up to the administrator to export applications that does not require authentication. In case your ICA is in the DMZ and you have one of these application hanging out in there, then you are in a big trouble. Unfortunately, this is what I see most of the times. curious mind, I have no idea how CITRIX is shipped but I believe that you are on the right track. However, it is up to the administrator to export applications that does not require authentication. In case your ICA is in the DMZ and you have one of these application hanging out in there, then you are in a big trouble. Unfortunately, this is what I see most of the times.

]]> By: curious mind http://www.gnucitizen.org/blog/hacking-citrix-the-forceful-way/comment-page-1/#comment-58682 curious mind Tue, 16 Oct 2007 06:22:29 +0000 http://www.gnucitizen.org/blog/hacking-citrix-the-forceful-way#comment-58682 I'm wondering what FREE features Citrix has for deploying apps to the internet in a secure manner. The only thing I could find was the Citrix Secure Gateway 3.0 (is this still supported or maintained?) from which the admin guide and checklist is no longer avaiable so forget about the documentation. So as it would seem, you maybe required to purchase a Citrix Access Gateway to secure your Citrix environment am I correct..? If so, this would mean that making Citrix apps available across the web would not be secure out of the box without buying additional hardware. This is not a statement but more a question I have... I’m wondering what FREE features Citrix has for deploying apps to the internet in a secure manner. The only thing I could find was the Citrix Secure Gateway 3.0 (is this still supported or maintained?) from which the admin guide and checklist is no longer avaiable so forget about the documentation.

So as it would seem, you maybe required to purchase a Citrix Access Gateway to secure your Citrix environment am I correct..? If so, this would mean that making Citrix apps available across the web would not be secure out of the box without buying additional hardware.
This is not a statement but more a question I have…

]]> By: Citrix Internet Gateways - Critical need to lock these down - Harry Waldron - My IT Forums Blog http://www.gnucitizen.org/blog/hacking-citrix-the-forceful-way/comment-page-1/#comment-57575 Citrix Internet Gateways - Critical need to lock these down - Harry Waldron - My IT Forums Blog Fri, 12 Oct 2007 13:41:53 +0000 http://www.gnucitizen.org/blog/hacking-citrix-the-forceful-way#comment-57575 [...]   Hacking CITRIX - the forceful way http://www.gnucitizen.org/blog/hacking-citrix-the-forceful-way/   Citrix Security Best Practices http://www.thin-world.com/nfuse.htm [...] [...]   Hacking CITRIX – the forceful way http://www.gnucitizen.org/blog.....ceful-way/   Citrix Security Best Practices http://www.thin-world.com/nfuse.htm [...]

]]> By: pdp http://www.gnucitizen.org/blog/hacking-citrix-the-forceful-way/comment-page-1/#comment-57525 pdp Fri, 12 Oct 2007 10:57:26 +0000 http://www.gnucitizen.org/blog/hacking-citrix-the-forceful-way#comment-57525 Jonathan, thanks. I am not very sure. I guess it has something to do with the CITRIX logo, which appears on the screen when a connection is established. Jonathan, thanks. I am not very sure. I guess it has something to do with the CITRIX logo, which appears on the screen when a connection is established.

]]> By: Jonathan http://www.gnucitizen.org/blog/hacking-citrix-the-forceful-way/comment-page-1/#comment-57518 Jonathan Fri, 12 Oct 2007 10:25:38 +0000 http://www.gnucitizen.org/blog/hacking-citrix-the-forceful-way#comment-57518 It's strange that Citrix should be able to do this. Does your video: 1. breach the copyright of Citrix, or 2. describe a method for illegally circumventing copyright protection? If not, then perhaps you could file a "counter-take-down" notice to YouTube, as described here: http://www.youtube.com/t/dmca_policy. This approach was famously used by Christopher Knight: http://theknightshift.blogspot.com/2007/08/viacom-hits-me-with-copyright.html Keep on hacking! Jonathan It’s strange that Citrix should be able to do this. Does your video:

1. breach the copyright of Citrix, or
2. describe a method for illegally circumventing copyright protection?

If not, then perhaps you could file a “counter-take-down” notice to YouTube, as described here: http://www.youtube.com/t/dmca_policy.

This approach was famously used by Christopher Knight:
http://theknightshift.blogspot.....right.html

Keep on hacking!
Jonathan

]]> By: pdp http://www.gnucitizen.org/blog/hacking-citrix-the-forceful-way/comment-page-1/#comment-57502 pdp Fri, 12 Oct 2007 08:41:02 +0000 http://www.gnucitizen.org/blog/hacking-citrix-the-forceful-way#comment-57502 Apparently CITRIX has removed the YouTube videos due to a copyright violation. This is strange and the same time not the right way to handle situations like this. Apparently CITRIX has removed the YouTube videos due to a copyright violation. This is strange and the same time not the right way to handle situations like this.

]]> By: pdp http://www.gnucitizen.org/blog/hacking-citrix-the-forceful-way/comment-page-1/#comment-57269 pdp Thu, 11 Oct 2007 18:41:36 +0000 http://www.gnucitizen.org/blog/hacking-citrix-the-forceful-way#comment-57269 RX8volution, I forgot to include that. Give me some time and I will come with an updated script, or you can do that yourself if you want to. RX8volution, I forgot to include that. Give me some time and I will come with an updated script, or you can do that yourself if you want to.

]]> By: RX8volution http://www.gnucitizen.org/blog/hacking-citrix-the-forceful-way/comment-page-1/#comment-57245 RX8volution Thu, 11 Oct 2007 16:54:40 +0000 http://www.gnucitizen.org/blog/hacking-citrix-the-forceful-way#comment-57245 pdp : How do you account for domains? I am working on password "grinding" or brute-force... and don't quite get how to append the Domain name into your script... would be a nice pen-test tool... pdp : How do you account for domains? I am working on password “grinding” or brute-force… and don’t quite get how to append the Domain name into your script… would be a nice pen-test tool…

]]> By: pdp http://www.gnucitizen.org/blog/hacking-citrix-the-forceful-way/comment-page-1/#comment-57048 pdp Wed, 10 Oct 2007 18:28:49 +0000 http://www.gnucitizen.org/blog/hacking-citrix-the-forceful-way#comment-57048 Anthony D., yes you are right. The reason I came up with the script is mainly because I wasn't aware of any other CITRIX authentication bruteforcer. Anthony D., yes you are right. The reason I came up with the script is mainly because I wasn’t aware of any other CITRIX authentication bruteforcer.

]]> By: Anthony D. http://www.gnucitizen.org/blog/hacking-citrix-the-forceful-way/comment-page-1/#comment-57047 Anthony D. Wed, 10 Oct 2007 18:26:14 +0000 http://www.gnucitizen.org/blog/hacking-citrix-the-forceful-way#comment-57047 You should note that you are demonstrating exploiting a poorly implemented security model. When implemented correctly using existing Citrix security features and Microsoft Security Features your attacks would not work at all. This was an attack against a poorly implemented Citrix environment. Nice work either way! You should note that you are demonstrating exploiting a poorly implemented security model. When implemented correctly using existing Citrix security features and Microsoft Security Features your attacks would not work at all.

This was an attack against a poorly implemented Citrix environment.

Nice work either way!

]]> By: radi http://www.gnucitizen.org/blog/hacking-citrix-the-forceful-way/comment-page-1/#comment-56944 radi Wed, 10 Oct 2007 07:21:28 +0000 http://www.gnucitizen.org/blog/hacking-citrix-the-forceful-way#comment-56944 *hides head in shame* oopps.... sorry about that guys!!! :) my bad i should have read the other article more carefully..... *hides head in shame* oopps…. sorry about that guys!!! :) my bad i should have read the other article more carefully…..

]]>