Heartbleed test with data dump functionality.
ssltest.py ��*x V ���y V #!/usr/bin/python # Quick and dirty demonstration of CVE-2014-0160 by Jared Stafford (jspenguin@jspenguin.org) # The author disclaims copyright to this source code. # # Modified slightly by Andreas Thienemann <athienemann@schubergphilis.com> for clearer exploit code # and 64k reads # # This version of the exploit does write received data to a file called "dump" in the loca
Cracking Cloudflare's heartbleed challenge - Fedor Indutny's blog
Challenge # At April 11th 2014 Cloudflare has published a blog post suggesting to try out extracting a private key of their specially prepared challenge site using the Heartbleed OpenSSL vulnerability. Being busy at the time, I decided to give it a try a couple of hours later, if noone would crack it yet. This was a legal way to do some hackery, after all! Method # The method of attack was followi
Heartbleed - Schneier on Security
Heartbleed Heartbleed is a catastrophic bug in OpenSSL: “The Heartbleed bug allows anyone on the Internet to read the memory of the systems protected by the vulnerable versions of the OpenSSL software. This compromises the secret keys used to identify the service providers and to encrypt the traffic, the names and passwords of the users and the actual content. This allows attackers to eavesdrop co
1
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
処理を実行中です
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
GitHub - indutny/heartbleed: Extracting server private key using Heartbleed OpenSSL vulnerability.
