Skip to content

Commit

Permalink
automatic module_metadata_base.json update
Browse files Browse the repository at this point in the history
  • Loading branch information
msjenkins-r7 committed Oct 30, 2023
1 parent ac6aa53 commit 8ca35b0
Showing 1 changed file with 61 additions and 0 deletions.
61 changes: 61 additions & 0 deletions db/modules_metadata_base.json
Original file line number Diff line number Diff line change
Expand Up @@ -28147,6 +28147,67 @@
"session_types": false,
"needs_cleanup": false
},
"auxiliary_scanner/http/citrix_bleed_cve_2023_4966": {
"name": "Citrix ADC (NetScaler) Bleed Scanner",
"fullname": "auxiliary/scanner/http/citrix_bleed_cve_2023_4966",
"aliases": [

],
"rank": 300,
"disclosure_date": "2023-10-25",
"type": "auxiliary",
"author": [
"Dylan Pindur",
"Spencer McIntyre"
],
"description": "This module scans for a vulnerability that allows a remote, unauthenticated attacker to leak memory for a\n target Citrix ADC server. The leaked memory is then scanned for session cookies which can be hijacked if found.",
"references": [
"CVE-2023-4966",
"URL-https://www.assetnote.io/resources/research/citrix-bleed-leaking-session-tokens-with-cve-2023-4966"
],
"platform": "",
"arch": "",
"rport": 443,
"autofilter_ports": [
80,
8080,
443,
8000,
8888,
8880,
8008,
3000,
8443
],
"autofilter_services": [
"http",
"https"
],
"targets": null,
"mod_time": "2023-10-27 13:48:45 +0000",
"path": "/modules/auxiliary/scanner/http/citrix_bleed_cve_2023_4966.rb",
"is_install_path": true,
"ref_name": "scanner/http/citrix_bleed_cve_2023_4966",
"check": false,
"post_auth": false,
"default_credential": false,
"notes": {
"Stability": [

],
"Reliability": [

],
"SideEffects": [

],
"AKA": [
"Citrix Bleed"
]
},
"session_types": false,
"needs_cleanup": false
},
"auxiliary_scanner/http/citrix_dir_traversal": {
"name": "Citrix ADC (NetScaler) Directory Traversal Scanner",
"fullname": "auxiliary/scanner/http/citrix_dir_traversal",
Expand Down

0 comments on commit 8ca35b0

Please sign in to comment.