CVE-2014-0160 PoC — OpenSSL 缓冲区错误漏洞

Source

https://github.com/ThanHuuTuan/Heartexploit

Associated Vulnerability

Title:OpenSSL 缓冲区错误漏洞 (CVE-2014-0160)
Description:The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.

Description

Aquí está mi nuevo y primer exploit web, este exploit ataca a la vulnerabilidad de HeartBleed (CVE-2014-0160) espero que os guste.

Readme

# Heartexploit
Aquí está mi nuevo y primer exploit, este exploit ataca a la vulnerabilidad de HeartBleed (CVE-2014-0160), espero que os guste.

Este exploit solo funciona en linux ya que parte esta echa en idiomas no compatibles con windows.

El único comando que hay que poner para iniciar esta aplicación es:

- ./Heartexploit.sh

No hace falta decir que este exploit es solo educativo, por lo tanto no me hago reponsable de nada de lo que hagaís.

































--------------------------------------------------------------------------------------------------------------------------------





# #Megusta la pizza con piña

File Snapshot


 [4.0K]  /data/pocs/d73d291d93d6a3fb7f136f579de9eedb453cc67c
├── [4.0K]  Heartexploit
│   ├── [ 184]  Heartexploit.sh
│   └── [4.1K]  heart.py
└── [ 652]  README.md

1 directory, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!