HeartLeak

HeartLeak Yet, another exploitation script for the most buzzed bug of all the time. The script has two features: scan: Generates random hosts IP addresses, checks if they supports OpenSSL, test them if they vulnerable to CVE-2014-0160 Heartbeat Buffer over-read bug and save vulnerable hosts in a...

heartbleed-lab

heartbleed-lab A small, self-contained lab for CVE-2014-0160 Heartbleed — the TLS heartbeat over-read in OpenSSL 1.0.1–1.0.1f. It builds the genuinely vulnerable OpenSSL from pinned upstream source in a throwaway container, serves it, and includes a proof-of-concept client that leaks live process...

OpenSSL Heartbleed CVE-2014-0160 - Memory dump

Repeatedly triggers the TLS heartbeat over-read CVE-2014-0160 to collect server memory. Optional RSA private key reconstruction when the leaked buffer contains prime factors matching the service certificate modulus. !/usr/bin/env python3 -- coding: utf-8 -- """Exploit OpenSSL Heartbleed...