Skip to content
Citrix Breakout When Restricted Means Nothing
labs.cognisys.group | blog | #windows | #red-team | #citrix | #application-whitelisting | #breakout | #command-execution
Summary
A locked-down Citrix desktop blocked cmd.exe and PowerShell but allowed .bat files and trusted system components; the team chained these to obtain unrestricted PowerShell execution and break out.
- Published
- Collected