CVE-2014-0160 PoC — OpenSSL 缓冲区错误漏洞

Source

https://github.com/undacmic/heartbleed-proof-of-concept

Associated Vulnerability

Title:OpenSSL 缓冲区错误漏洞 (CVE-2014-0160)
Description:The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.

Description

Proof of concept for exploiting the Heartbeat Extension bug detailed in the CVE-2014-0160. :old_key: :unlock:

Readme

Heartbleed (CVE-2014-0160)
==========

## Setup

You will require **docker** in order to perform the setup.
The exploit, dynamically generates the random bytes from the Client Hello message,
therefore you will need to link the library when building the executable.
The required package to be installed, in order to link properly:
```
sudo apt-get install libssl-dev
```
The tool was tested on ***Docker for Desktop - Version: 20.10.21*** with ***WSL 2***.

The steps to reproduce the vulnerability are:
1.  Vulnerable server initialization
```
cd server-image/
docker build -t <image_name> .
docker run -d -p <port>:443 --name <name> <image_name>
```
2. Starting the script

```
cd ..
gcc -o heartbleed heartbleed.c -lcrypto
./heartbleed <ip> <port>

```

**You do need to specify the correct port.**

![Heartbleed Leak of 65535 bytes](./resources/heartbleed-dump.png)

## Preview

| Thesis                                                                                                       | Presentation                                                                                                                         |
|--------------------------------------------------------------------------------------------------------------|--------------------------------------------------------------------------------------------------------------------------------------|
| <a href="article/export.pdf"><kbd><img src="article/preview.png" width="400px" alt="Article preview"></kbd></a> | <a href="presentation/export.pdf"><kbd><img src="presentation/preview.png" width="400px" alt="Presentation preview"></kbd></a> |

File Snapshot


 [4.0K]  /data/pocs/cddea7315e6f167985d6ed56f5933fa34e38dec3
├── [4.0K]  article
│   ├── [219K]  export.pdf
│   ├── [281K]  preview.png
│   └── [4.0K]  project
│       ├── [1.6K]  bibliography.bib
│       ├── [275K]  IEEEtran.cls
│       ├── [4.0K]  images
│       │   └── [173K]  heartbeat-packet.png
│       └── [ 17K]  main.tex
├── [2.8K]  Dockerfile
├── [ 21K]  heartbleed.c
├── [4.0K]  presentation
│   ├── [455K]  export.pdf
│   ├── [ 44K]  preview.png
│   └── [4.0K]  project
│       ├── [4.0K]  Images
│       │   ├── [ 52K]  creodocs_logo.pdf
│       │   ├── [173K]  heartbeat-packet.png
│       │   ├── [7.1K]  heartbleed.png
│       │   ├── [431K]  Hokie2.png
│       │   ├── [ 26K]  Newey et al Graph.PNG
│       │   ├── [3.1K]  Slide Logo.png
│       │   └── [359K]  xkcd.png
│       └── [ 13K]  template.tex
├── [1.6K]  README.md
├── [4.0K]  resources
│   └── [ 20K]  heartbleed-dump.png
└── [4.0K]  server-image
    ├── [1.2K]  Dockerfile
    └── [4.0K]  web
        └── [1.3K]  index.html

9 directories, 22 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!