Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-5777-Exploit — Async-based exploit tool for CVE-2025-5777 that detects and extracts leaked authentication tokens, internal IPs, and hidden endpoint paths from vulnerable Citrix NetScaler VPN endpoints. | Kitploit
Tools/GitHubGitHub/soltanali0/cve-2025-5777-exploit
Vulnerability AnalysisExploitationInformation GatheringWeb SecurityPenetration TestingLearning & Education
GitHubsoltanali0/cve-2025-5777-exploit

CVE-2025-5777-Exploit

Async-based exploit tool for CVE-2025-5777 that detects and extracts leaked authentication tokens, internal IPs, and hidden endpoint paths from vulnerable Citrix NetScaler VPN endpoints.

View Repository
4131 year agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2025-5777 Exploit Tool 🔥

A powerful educational tool designed to demonstrate and analyze the vulnerability CVE-2025-5777 affecting Citrix NetScaler VPN.
This project is part of the GO-TO CVE initiative.

⚠️ For educational purposes only. Do NOT use this on systems you don't own or have explicit permission to test.

📌 About

This script attempts to detect and extract sensitive internal tokens, internal IPs, and hidden endpoint paths exposed by vulnerable Citrix VPN endpoints.

It's built to help students, security researchers, and red teamers better understand how real-world CVEs are discovered and analyzed.

🚀 Features

  • Async-based fast scanning
  • Extracts leaked authentication tokens
  • Finds hidden/internal VPN paths
  • Easy to use, fast results
  • Clean JSON output (optional)

📦 Installation

root@kitploit:~
git clone https://github.com/soltanali0/CVE-2025-5777-Exploit.git
cd CVE-2025-5777-Exploit

python3 -m venv venv
source venv/bin/activate
pip install -r requirements.txt

Requires Python 3.8+ Optional: You can use a virtual environment

🛠 Usage

root@kitploit:~
python3 exploit.py https://target-vpn.com
  • Add --proxy http://127.0.0.1:8080 to route through Burp/SOCKS
  • Add --silent to suppress output
  • Add --output result.json to save to JSON

Example:

root@kitploit:~
python3 exploit.py https://20.237.190.100 --output leaks.json

📁 Output Sample and nuceli Sample

image
root@kitploit:~
[!] Leak analysis:
    → Tokens found: ZWZlNjViZDA4NThj...
    → Paths found: /nf/auth/doLogoff.do, /nf/auth/doEPA.do, /Credential

and

image

✅ Prevention Tips

To avoid exploitation of this CVE:

  • Sanitize all user inputs on the Citrix VPN front-end.
  • Restrict access control to any public path added manually.
  • Apply Citrix's latest security patches.

📚 Legal & Disclaimer

This tool is released strictly for educational and lawful research purposes. The developer takes no responsibility for any misuse or illegal activity conducted using this code.

By using this tool, you agree that:

  • You will use it only in labs or authorized environments
  • You accept all liability for any damages caused by misuse

📡 Telegram Channel

Join the CVE leak and exploit research community: 👉 https://t.me/GOTOCVE

✍️ Author

Developed by Ali Soltani – red teamer and CVE hunter. Proudly part of the GO-TO CVE

Download Tool