What are good tools for pen-testing and Risk analysis for Citrix? 1

[theciscodude]

I want to do penetration testing and risk analysis on the server-side of Citrix machines. Possible introduce a small "harmless" virus to see how far it gets. Got any ideas? Thanks, theciscodude

 

[viol8ion]

http://seclists.org/pen-test/2000/Oct/0141.html

Here is a good write-up by a hacker on how one would go about penetrating a Citrix network.

No tools AFAIK, and I doubt that any of the current virii would do much damage. We have a Citirx network where I work, with about a dozen client machines that are not on the Citrix network. None of the Citrix clients has ever introduced a virus or trojan, event hough I know for a fact many of the users were sent trojans. Of the clients not on the Citrix network, the same trojans that were sent to the citrix users were successfully set loose upon our network by idiots that should not be allowed to set their dirty fingertips on a keyboard, ever.

When in doubt, deny all terms and defnitions.

http://www.wuli.com