Search websites by keyword in title (Hi there Citrix!)
20 January 2020
With all the Citrix and Pulse Secure troubles of lately we all want to be able to quickly find them. It turn out that most of these VPN servers actually explicitly state what they are in the website title. In the past weeks you might have seen several Censys or Shodan search queries to find Citrix or Pulse secure boxes on the internet.
Of course we immediately implemented this handy trick on ShadowTrackr and by now all websites we track have their title indexed. You can easily list all your Citrix servers with this query:
website.title:*netscaler*
After that just click export and either download or directly email the list to seurity operations and have them checked.