Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2019-19781-Forensic — Automated forensic script hunting for cve-2019-19781 | Kitploit
Tools/GitHubGitHub/onsec-fr/cve-2019-19781-forensic
Indicator of Compromise (IOC) ManagementVulnerability AnalysisForensicsDigital ForensicsIncident ResponseLog Analysis
GitHubonsec-fr/cve-2019-19781-forensic

CVE-2019-19781-Forensic

Automated forensic script hunting for cve-2019-19781

View Repository
3146 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2019-19781-Forensic

Note : My advice is now to use the official tool published by fireeye & citrix : https://github.com/fireeye/ioc-scanner-CVE-2019-19781

This little script was created to help security analyst to discover traces of successful CVE-2019-19781 exploits on their systems.

Feel free to fork and improve ! You can find an example of output on a compromised system : output_demo.txt.

Usage

1- Login on your Citrix Gateway with nsroot (or other high privileged account).

2- Download the script : curl -o CVE-2019-19781-Forensic.sh https://raw.githubusercontent.com/onSec-fr/CVE-2019-19781-Forensic/master/script.sh

3- Make it executable : chmod +x CVE-2019-19781-Forensic.sh

4- Specify an output filename : ./CVE-2019-19781-Forensic.sh <output>

5- Done !

Download Tool