module

Decrypt Citrix NetScaler Config Secrets

Try Surface Command
Back to search
Disclosed
May 19, 2022
Created
Jul 16, 2022

Description

This module takes a Citrix NetScaler ns.conf configuration file as
input and extracts secrets that have been stored with reversible
encryption. The module supports legacy NetScaler encryption (RC4)
as well as the newer AES-256-ECB and AES-256-CBC encryption types.
It is also possible to decrypt secrets protected by the Key
Encryption Key (KEK) method, provided the key fragment files F1.key
and F2.key are provided.

Author

npm [email protected]

Platform

BSD

References

Module Options

To display the available options, load the module within the Metasploit console and run the commands 'show options' or 'show advanced':


    msf > use auxiliary/admin/citrix/citrix_netscaler_config_decrypt
    msf auxiliary(citrix_netscaler_config_decrypt) > show actions
        ...actions...
    msf auxiliary(citrix_netscaler_config_decrypt) > set ACTION < action-name >
    msf auxiliary(citrix_netscaler_config_decrypt) > show options
        ...show and set options...
    msf auxiliary(citrix_netscaler_config_decrypt) > run
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today