CVE-2014-0160 PoC — OpenSSL 缓冲区错误漏洞

Source

Associated Vulnerability

Title:OpenSSL 缓冲区错误漏洞 (CVE-2014-0160)
Description:The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.

Description

A collection of scripts and instructions to test CVE-2014-0160 (heartbleed). ❤️ 🩸

Readme

# heartbleed

## Execute the heartbleed exploit

`python heartbleed.py 127.0.0.1 -p 8443`

## Setup and run server

- Install docker and run the daemon
- Install the docker container with `docker pull hmlio/vaas-cve-2014-0160`
- Run the container with a port mapping `docker run -d -p 8443:443 hmlio/vaas-cve-2014-0160`
- Open your browser and visit `https://localhost:8443/`

## Spoof data

```
cd data_spoof
npm install
node send_data.js
```

## Edit frontend

### One file

- `docker cp container_name:/var/www/index.html .`
- Edit the file locally
- `docker cp index.html container_name:/var/www/index.html`

### Entire directory

- `docker cp container_name:/var/www .`
- Edit the file locally
- `docker cp www container_name:/var/`

File Snapshot


 [4.0K]  /data/pocs/84f3576a6a4f3c91fa2e25e446357bb5adf07106
├── [4.0K]  data_spoof
│   ├── [ 92K]  example.png
│   ├── [ 640]  package.json
│   ├── [ 16K]  package-lock.json
│   └── [ 926]  send_data.js
├── [4.1K]  heartbleed.py
├── [1.0M]  login.png
├── [ 199]  Makefile
├── [4.0K]  misc
│   └── [1.5K]  old_spoof.py
├── [ 738]  README.md
└── [4.0K]  server
    ├── [1.4K]  Dockerfile
    ├── [7.0K]  icon.png
    └── [4.0K]  www
        ├── [4.0K]  assets
        │   └── [7.1K]  heartbleed.png
        ├── [4.0K]  css
        │   ├── [ 70K]  animate.min.css
        │   ├── [174K]  bootstrap.css
        │   ├── [402K]  bootstrap.css.map
        │   ├── [ 43K]  bootstrap-grid.css
        │   ├── [ 94K]  bootstrap-grid.css.map
        │   ├── [ 33K]  bootstrap-grid.min.css
        │   ├── [ 74K]  bootstrap-grid.min.css.map
        │   ├── [141K]  bootstrap.min.css
        │   ├── [539K]  bootstrap.min.css.map
        │   ├── [4.7K]  bootstrap-reboot.css
        │   ├── [ 56K]  bootstrap-reboot.css.map
        │   ├── [3.8K]  bootstrap-reboot.min.css
        │   └── [ 25K]  bootstrap-reboot.min.css.map
        ├── [3.4K]  index.html
        └── [4.0K]  js
            ├── [191K]  bootstrap.bundle.js
            ├── [319K]  bootstrap.bundle.js.map
            ├── [ 66K]  bootstrap.bundle.min.js
            ├── [267K]  bootstrap.bundle.min.js.map
            ├── [112K]  bootstrap.js
            ├── [191K]  bootstrap.js.map
            ├── [ 48K]  bootstrap.min.js
            └── [158K]  bootstrap.min.js.map

7 directories, 34 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!