Bugtraq: Citrix Published Application Brute Forcer

["wirepair" <wirepair () roguemail net>]

This is a new design flaw that I discovered when trying to 
break the 'only allow published applications' option. This 
will attempt to brute force the application names that are 
published by looking for a specific return datagram. All 
other details are in the README. This file can be 
downloaded at http://sh0dan.org/files/pubappbrute.tar.gz
It also includes a template pubapp file which contains 
common published applications. Enjoy.
-wire
_____________________________
For the best comics, toys, movies, and more,
please visit <http://www.tfaw.com/?qt=wmf>

Attachment: pubappbrute.tar.gz
Description: