Saint Shitrix, the Name Says It All

Patron of exposed NetScalers, temporary mitigations that last for months, and whoever names vulnerabilities.

Life

Announced by Citrix in December 2019 with a mitigation but no patch, he exploded in January 2020 with the first public exploits. A well-placed ../ was enough to climb out of the right folder and run code on the gateways guarding half the corporate internet. Researcher Kevin Beaumont gave him the name he went down in history with.

Prayer

O Saint Shitrix, who climbs folders one ../ at a time, grant us patches before exploits and not the other way round. Amen.

How to celebrate

Celebrated by hunting for suspicious XML files among the templates and answering 'yes, we're patched' with less and less conviction.

One ../ leads to another, and soon you're root.