Citrix Pen Test,

Dear All,

On my recent pen-test, I need to deal with an application that sitting
on the remote host. The way its works is that the client need to connect
to the remote server through Citrix and run the application.

1) I feel that this is quite challenging pen-test as I do not have full
control to the remote server. This gets me thinking that apart from
analyzing the traffic from the client PC to remote host and input
validation checking. Is there any thing that I could possibly do?

2) I noticed that the Citrix Client (Citrix Program Neighborhood 7) used
Basic Level encryption. I couldn't find anything in regards to this
Basic Level Encryption as to which algorithms that Citrix uses. I was
wondering whether this Basic Encryption could be cracked easily. Any
thought around this?

Cheers,
John

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Are you using SPI, Watchfire or WhiteHat?
Consider getting clear vision with Cenzic
See HOW Now with our 20/20 program!

http://www.cenzic.com/c/2020
------------------------------------------------------------------------

Relevant Pages

  • Re: Java NIO channel never becomes readable
    ... The channel is almost always writable, unless you've filled the send buffer. ... If the remote host is written the same way as this, it is probably too busy spinning on OP_WRITE. ... which would explain why you never get a readable channel in the client. ... writing methods as my regular client. ...
    (comp.lang.java.programmer)
  • Re: Java NIO channel never becomes readable
    ... The channel is almost always writable, ... If the remote host is written the same way as this, ... you never get a readable channel in the client. ... writing methods as my regular client. ...
    (comp.lang.java.programmer)
  • Re: Python socket wont connect on Windows
    ... to/from the remote host when the Python app attempts to connect ... and when another client connects. ... low level traffic analyzing would have been the next logical step. ...
    (comp.lang.python)
  • scheduling
    ... I host my website on a remote host and have an aspx page that searches ... I dont want to use scheduling on the remote host ... One solution would be to schedule a service from a client pc to call ...
    (microsoft.public.dotnet.framework.aspnet)
Quantcast