Lucene search
KitPloitKITPLOIT:8800200070735873517HistoryApr 10, 2014 - 12:55 a.m.
Collection of Heartbleed Tools (OpenSSL CVE-2014-0160)
2014-04-1000:55:00
www.kitploit.com
125
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
8
Confidence
High
EPSS
0.974
Percentile
99.9%
- A checker (site and tool) for CVE-2014-0160: <https://github.com/FiloSottile/Heartbleed>
- ssltest.py: Quick and dirty demonstration of CVE-2014-0160 by Jared Stafford <http://pastebin.com/WmxzjkXJ>
- SSL Server Test <https://www.ssllabs.com/ssltest/index.html>
- Metasploit Module:<https://github.com/rapid7/metasploit-framework/pull/3206/files>
- Nmap NSE script: Detects whether a server is vulnerable to the OpenSSL Heartbleed: <https://svn.nmap.org/nmap/scripts/ssl-heartbleed.nse>
- Nmap NSE script: Quick’n’Dirty OpenVAS nasl wrapper for ssl_heartbleed based on ssl_cert_expiry.nas <https://gist.github.com/RealRancor/10140249>
- **Heartbleeder:**Tests your servers for OpenSSL: <https://github.com/titanous/heartbleeder?files=1>
- Heartbleed Attack POC and Mass Scanner:<https://bitbucket.org/fb1h2s/cve-2014-0160>
- Heartbleed Honeypot Script: <http://packetstormsecurity.com/files/126068/hb_honeypot.pl.txt>
Related
freebsd
freebsd
OpenSSL -- Remote Information Disclosure
2014-04-07 00:00:00
redhat
redhat
(RHSA-2014:0396) Important: rhev-hypervisor6 security update
2014-04-10 00:00:00
(RHSA-2014:0376) Important: openssl security update
2014-04-08 00:00:00
(RHSA-2014:0378) Important: rhev-hypervisor6 security update
2014-04-08 00:00:00
nessus
nessus
RHEL 6 : rhev-hypervisor6 (RHSA-2014:0396) (Heartbleed)
2014-11-08 00:00:00
Blue Coat ProxySG Heartbeat Information Disclosure (Heartbleed)
2014-04-15 00:00:00
hackerone
hackerone
Mail.ru: scfbp.tng.mail.ru: Heartbleed
2015-02-25 07:49:11
Internet Bug Bounty: TLS heartbeat read overrun
2014-04-05 23:51:06
Mail.ru: Heartbleed: my.com (185.30.178.33) port 1433
2015-01-19 13:54:12
ics
ics
Digi International OpenSSL Vulnerability
2018-09-06 12:00:00
Siemens Industrial Products OpenSSL Heartbleed Vulnerability (Update B)
2018-09-06 12:00:00
ABB Relion 650 Series OpenSSL Vulnerability (Update A)
2018-09-06 12:00:00
atlassian
atlassian
Update Tomcat Native DLL in JIRA Installer
2014-06-26 19:39:26
Update Tomcat Native DLL in JIRA Installer
2014-06-26 19:39:26
openvas
openvas
HP Printers Information Disclosure Vulnerability (Apr 2014, Heartbleed)
2014-06-03 00:00:00
SuSE Update for update openSUSE-SU-2014:0492-1 (update)
2014-04-10 00:00:00
thn
thn
How Heartbleed Bug Exposes Your Passwords to Hackers
2014-04-10 07:00:00
Billions of Smartphone Users affected by Heartbleed Vulnerability
2014-04-13 08:19:00
NSA denies Report that Agency knew and exploited Heartbleed Vulnerability
2014-04-11 23:21:00
threatpost
threatpost
Oracle Gives Heartbleed Update, Patches 14 Products
2014-04-21 13:55:42
Tor Blacklisting Exit Nodes Vulnerable to Heartbleed Bug
2014-04-17 11:40:41
April 2014 Oracle Critical Patch Update
2014-04-16 12:32:06
debian
debian
[SECURITY] [DSA 2896-2] openssl security update
2014-04-08 13:47:13
[SECURITY] [DSA 2896-2] openssl security update
2014-04-08 13:47:13
[SECURITY] [DSA 2896-1] openssl security update
2014-04-07 21:36:46
malwarebytes
malwarebytes
Five years later, Heartbleed vulnerability still unpatched
2019-09-12 15:00:00
ibm
ibm
securityvulns
securityvulns
veracode
veracode
Information Disclosure Through Buffer Over-read
2019-01-15 09:00:11
f5
f5
SOL15159 - OpenSSL vulnerability CVE-2014-0160
2014-04-08 00:00:00
K15159 : OpenSSL vulnerability CVE-2014-0160
2015-02-16 00:00:00
seebug
seebug
OpenSSL 1.0.1f TLS Heartbeat Extension - Memory Disclosure (Multiple SSL/TLS versions)
2014-07-01 00:00:00
SAP Sybase SQL Anywhere OpenSSL TLS心跳信息泄漏漏洞
2014-04-21 00:00:00
Heartbleed OpenSSL - Information Leak Exploit (1)
2014-07-01 00:00:00
packetstorm
packetstorm
Heartbleed OpenSSL Information Leak Proof Of Concept
2014-04-24 00:00:00
OpenSSL Heartbeat (Heartbleed) Client Memory Exposure
2024-08-31 00:00:00
Streamworks Job Scheduler Release 7 Authentication Weakness
2019-01-16 00:00:00
zdt
zdt
OpenSSL TLS Heartbeat Extension - Memory Disclosure
2014-04-08 00:00:00
Heartbleed OpenSSL - Information Leak Exploit (2) - DTLS Support
2014-04-24 00:00:00
OpenSSL Heartbeat (Heartbleed) Information Leak Exploit
2014-04-10 00:00:00
kitploit
kitploit
myhack58
myhack58
cisco
cisco
OpenSSL Heartbeat Extension Vulnerability in Multiple Cisco Products
2014-04-09 03:00:00
OpenSSL TLS/DTLS Heartbeat Information Disclosure Vulnerability
2014-04-08 14:39:29
debiancve
debiancve
CVE-2014-0160
2014-04-07 22:55:03
centos
centos
openssl security update
2014-04-08 02:54:58
oraclelinux
oraclelinux
openssl security update
2014-04-07 00:00:00
qt
qt
Heartbleed Bug (CVE-2014-0160) and Qt
2014-04-10 00:00:00
cert
cert
vulnerlab
vulnerlab
HeartBleed SSL CVE 20140160 - 10 Steps to Fix in Ubuntu
2014-04-09 00:00:00
HeartBleed SSL CVE 20140160 - 10 Steps to Fix in Ubuntu
2014-04-09 00:00:00
suse
suse
update for openssl (important)
2014-04-08 13:04:15
checkpoint_security
checkpoint_security
Check Point response to OpenSSL vulnerability (CVE-2014-0160)
2014-04-07 21:00:00
hp
hp
ubuntucve
ubuntucve
CVE-2014-0160
2014-04-07 00:00:00
attackerkb
attackerkb
CVE-2014-0160 (AKA: Heartbleed)
2014-04-07 00:00:00
fortinet
fortinet
Information Disclosure Vulnerability in OpenSSL (Heartbleed)
2014-04-08 00:00:00
n0where
n0where
Access Point Impersonation Attacks: hostapd-wpe
2016-04-12 22:19:39
exploitpack
exploitpack
OpenSSL TLS Heartbeat Extension - Heartbleed Memory Disclosure
2014-04-08 00:00:00
nvd
nvd
CVE-2014-0160
2014-04-07 22:55:03
prion
prion
Buffer overflow
2014-04-07 22:55:00
osv
osv
openssl - security update
2014-04-07 00:00:00
intel
intel
Multiple Intel Software Products and API Services impacted by CVE-2014-0160
2014-04-30 00:00:00
symantec
symantec
openssl
openssl
Vulnerability in OpenSSL - TLS heartbeat read overrun
2014-04-07 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
8
Confidence
High
EPSS
0.974
Percentile
99.9%
Related for KITPLOIT:8800200070735873517