Exploit Citrix NetScaler ADC and Gateway through CVE-2023-4966

[aleff-github]

This payload sends an HTTP request to a remote server using the curl command. If the request succeeds, it means the exploit was successful. Conversely, if the request fails, it indicates that the target has resisted the attack.

[kalanihelekunihi]

Keystroke Reflection (CapsLock toggle for data exfiltration) is not presently supported on O.MG Devices.

This is on our roadmap, but at present this payload will not operate as written.

There is HIDX Exfiltration on O.MG Devices, which allows for several KB / second of exfiltration, as well as capture via C2.
If you wanted to modify your payload to use HIDX, it would run and be suitable for this repo at present.

I would like to ask that you please test your payloads prior to submission to verify they will run.