🔍 CVE-2026-3055 Scanner - NetScaler Memory Overread Detection Tool

⚠️ WARNING

This tool is for educational purposes and authorized testing only. Do not use on systems without explicit permission from the owner.

📋 Description

Detection tool for CVE-2026-3055 that identifies Citrix NetScaler ADC and Gateway devices vulnerable to memory overread. Performs individual, network-wide, or host-list scanning, detects memory leak on the /wsfed/passive?wctx endpoint, extracts administrative session IDs, verifies affected versions, and generates reports in multiple formats.

🎯 Features

• ✅ Individual detection by URL/IP
• ✅ Full network scanning (CIDR)
• ✅ Host-list scanning from file
• ✅ Memory leak detection via NSC_TASS cookie
• ✅ Extraction of session IDs from leaked memory
• ✅ NetScaler version verification
• ✅ Reports in JSON, HTML, CSV, and console
• ✅ Multi-threaded for fast scanning
• ✅ Risk level calculation

📊 CVSS Score

• Score: 9.3 CRITICAL
• Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H
• CWE: CWE-125 (Out-of-bounds Read)
• CISA KEV: Added 30/03/2026, mitigation required before 02/04/2026

📦 Installation

# Clone repository
git clone https://github.com/tu-usuario/CVE-2026-3055-Scanner.git
cd CVE-2026-3055-Scanner

# Install dependencies
pip install -r requirements.txt