PrivEsc Citrix Privilege Escalation ( Limited User ) ?

[Str0ng]

Hi everyone !

I have access to a Citrix with several RDPs, some Windows and others Windows 7, the question is what would be the best method, or if you know of any exploit to escalate privileges from ( normal or limited user ) to ( administrator or system ) , preferably without Windows registry, thanks

 

[espe0n]

I think the logs are the last problem because you can clean them after you've done something.
now about privilege escalation, look for some password in files or try to escalate through services or exploits like hotpotato and etc : )

 

[cr4ka]

Sweet Potato for the rescue.
if you want more help, let me know.

 

[AK13Auth]

Citrix is a virtual operating system with limited permissions. It is a virtual system built on Linux. You can use whoami /priv to check that it cannot elevate permissions. Perhaps you can find an escape method.