World of EUC

Indeed interesting how to get the build numbers and how to find the respective downloads of the builds...

They used <@ULD1T5RND> s code btw :smile:

I can see there's the http profile where you can enable sending the version information, but even if we have the patched versions, I would rather hide this information from scanning completely

or is the data collected in some other way than probing services in the internet?

<https://blog.fox-it.com/2022/12/28/cve-2022-27510-cve-2022-27518-measuring-citrix-adc-gateway-version-adoption-on-the-internet/>
Heres the more detailed article

we should come up with a rewrite that would change that hash to something that hides the version I'd say... that's just an easy way to identify if the box is exposed to a known CVE or even worse, a one that's only known by evil-doers

only thing is that is the css and js files using that parameter for something