CVE-2014-0224 PoC — OpenSSL 加密问题漏洞

Source

https://github.com/ssllabs/openssl-ccs-cve-2014-0224

Associated Vulnerability

Title:OpenSSL 加密问题漏洞 (CVE-2014-0224)
Description:OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers to trigger use of a zero-length master key in certain OpenSSL-to-OpenSSL communications, and consequently hijack sessions or obtain sensitive information, via a crafted TLS handshake, aka the "CCS Injection" vulnerability.

Readme

Adam Langley's tool for testing for OpenSSL CVE-2014-0224,
originally published here: https://www.imperialviolet.org/2014/06/05/earlyccs.html

To build the tool:

    $ export GOPATH=$(pwd)
    $ go build openssl-ccs-cve-2014-0224.go

Tested with go 1.2.2 and 1.3.

The src/my-tls directory contains the patched version of the crypto/tls package.

File Snapshot


 [4.0K]  /data/pocs/931e1b1639aa906d35be16503360ccbdd230d122
├── [3.3K]  earlyccs_tls.patch
├── [1.4K]  LICENSE
├── [2.6K]  openssl-ccs-cve-2014-0224.go
├── [ 347]  README.md
└── [4.0K]  src
    └── [4.0K]  my-tls
        ├── [2.5K]  alert.go
        ├── [9.1K]  cipher_suites.go
        ├── [ 17K]  common.go
        ├── [ 13K]  common.go.orig
        ├── [ 28K]  conn.go
        ├── [ 26K]  conn.go.orig
        ├── [5.3K]  conn_test.go
        ├── [2.2K]  example_test.go
        ├── [3.0K]  generate_cert.go
        ├── [ 17K]  handshake_client.go
        ├── [ 11K]  handshake_client.go.orig
        ├── [3.5K]  handshake_client.go.rej
        ├── [ 12K]  handshake_client_test.go
        ├── [ 28K]  handshake_messages.go
        ├── [6.1K]  handshake_messages_test.go
        ├── [ 18K]  handshake_server.go
        ├── [ 25K]  handshake_server_test.go
        ├── [4.2K]  handshake_test.go
        ├── [ 12K]  key_agreement.go
        ├── [8.2K]  prf.go
        ├── [4.9K]  prf_test.go
        ├── [4.1K]  ticket.go
        ├── [7.5K]  tls.go
        └── [7.1K]  tls_test.go

2 directories, 28 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!