CitrixIOCScan

Tool to mass scan a bunch for Citrix servers with rate-limiting and abnormal reply detection.

Installation

$ go install github.com/leakix/CitrixIOCScan/cmd/CitrixIOCScan@latest

or build:

$ CGO_ENABLED=0 go build -o CitrixIOCScan ./cmd/CitrixIOCScan

Usage

1. Create a JSON file as follow:

{"ip":"127.0.0.1","port":"443","host":"localhost.localdomain"}
{"ip":"127.0.1.1","port":"443","host":"localhost.localdomain"}
....

2. Run

$ CitrixIOCScan url_list.txt input.json > results.json

Limitations

• Currently, always assumes HTTPS
• This can be made generic for future research