This message was deleted.
# citrix-netscalers
Slackbot
01/29/2020, 12:30 PMThis message was deleted.
c
CTXMike
01/29/2020, 2:42 PMThat looks like you or someone else may have run the tool before and it's seeing that in the logs.
k
Konstantin Voronov
01/29/2020, 2:59 PMNo. This is the first launch of the VM ADC after deployment. And the first launch of the scanner. I created this test ADC VPX to check the scanner and no one but me knows about it.
I have the impression that the scanner is not functioning properly or I am wrong...
Konstantin Voronov
01/29/2020, 3:10 PMI do this because have environment (after ReImage and Reconfig) and have same results with scanner logs. I compare it with new instanse and don't see the difference.
t
Tim Riegler
01/29/2020, 6:29 PMLooks like that may be related to the actual deployment of the appliance. Also, there is a new version of the scanner - 2.1, that has some updated functionality. I would run that.
k
Konstantin Voronov
01/29/2020, 7:49 PMYes. After I run new version of the scanner -1.2 😉
[info]: **********************************************************************
[info]: * Indicator of Compromise Scanner for CVE-2019-19781 *
[info]: * Copyright 2020 FireEye, Inc. and Citrix Systems, Inc. *
[info]: * *
[info]: * https://github.com/fireeye/ioc-scanner-CVE-2019-19781 *
[info]: **********************************************************************
[info]:
this script: /tmp/ioc-scanner-CVE-2019-19781-1.2/ioc-scanner-CVE-2019-19781.sh
I get another result and no blacklisted content '/etc/passwd'
[info]:
[info]: here we go...
[info]:
[debu]: did not find blacklisted content in /var/log/bash.log
[debu]: did not find blacklisted content in /var/log/notice.log
[debu]: did not find blacklisted content in /var/log/sh.log
Thank you so much!
2 Views