well today I did a P.T. on Citrix server. And surprisingly it took me around just 30 sec to hack into server. Isn’t that cool. I managed to get hands on one userid password with lower privileges and then i just used hot keys CTRL+F3 which is similar to CTRL+SHIFT+ESC on your desktop to get access to task-manager. Well I got a shell then but with no admin access.

Well then used an local privilege escalation exploit to gain admin rights. Citrix thought to be one of the most secure architecture was hacked withing seconds.

Read more »