heartbleed-poc

HeartBleed Tester & Exploit NB Nearly all the tools nmap, metasploit, nessus, even burp have the most up to date versions of their scanners. These tools were released at the early stages when tools were still being developed. Rather use those than these now. Tool Guide If you want to mass scan, t...

heartbleed-poc

HeartBleed 测试与利用工具 注意 目前几乎所有工具（nmap、metasploit、nessus，甚至burp）都已拥有最新版本的扫描器。这些工具是在早期工具仍在开发时发布的。现在请优先使用那些工具，而非这些。 工具指南 若要进行大规模扫描，目前NMAP脚本是最佳选择。 如需支持最多的协议（STARTTLS），请使用修改后的Metasploit脚本。 若要进行实际利用，请使用Python脚本（针对非SMTP的STARTTLS需要修改）。 Python 工具 用法: heartbleed-poc.py server options 测试SSL心跳漏洞 CVE-2014-0160...

heartbleed

HEARTBLEED : VULNERABILIDAD HEARTBLEED DE OpenSSL TLS Extensión Heartbeat de OpenSSL TLS - Divulgación de memoria - Escáner y exploit de vulnerabilidad para múltiples versiones SSL/TLS necesita: root@kitploit: sudo apt-get install nmap lolcat java root@kitploit: sudo apt install default-jre...

heartbleed-lab

Laboratorio Heartbleed Laboratorio educativo para estudiar la vulnerabilidad Heartbleed CVE-2014-0160 usando un entorno OpenSSL vulnerable real dentro de Docker. Este proyecto reproduce un servidor TLS vulnerable usando OpenSSL 1.0.1f e implementa un cliente TLS heartbeat crudo y personalizado pa...

heartbleed-masstest

This tool allows you to scan multiple hosts for Heartbleed, in an efficient multi-threaded manner. This tests for OpenSSL versions vulnerable to Heartbleed without exploiting the server, so the heartbeat request does not cause the server to leak any data from memory or expose any data in an...

bleeding_onions

BleedingOnions Tracking the Exit and Guard relays edges of the Tor network for CVE-2014-0160. https://encrypted.redteam.net/bleedingonions/ Special thanks to: Stem, a python controller library for Tor https://stem.torproject.org/. Steffen Ullrich's perl script to check for CVE-2014-0160...

heartbleed_exploit

This repository does not have a README...

exploit_dev_overview

ExploitDev Overview ExpDev Welcome Peeps to an short overvie...

Exploit for Out-of-bounds Read in Openssl

CVE-2014-0160 Lab dựng lab sử dụng Heartbleed để leak memory...

Exploit for Out-of-bounds Read in Openssl

CVE-2014-0160 Lab dựng lab sử dụng Heartbleed để leak memory...

cve-poc-collection

CVE PoC Vulnerability Reproduction Collection This repository...

sslpwn

sslpwn sslpwn is a security research tool for testing web app...

NewStart CGSL MAIN 6.06 (SP) : openssl Multiple Vulnerabilities (NS-SA-2026-0004)

The remote NewStart CGSL host, running version MAIN 6.06 SP, has openssl packages installed that are affected by multiple vulnerabilities: - In addition to the crehash shell command injection identified in CVE-2022-1292, further circumstances where the crehash script does not properly sanitise...

nanshihui__PocCollect.e13e1379

PocCollect !Build Statushttp://nanshihui.github.io/public...

Exploit for Out-of-bounds Read in Openssl

CVE-2014-0160 Lab dựng lab sử dụng Heartbleed để leak memory...

Exploit for Out-of-bounds Read in Openssl

CTT-HEARTBLEED-Temporal-Resonance-Memory-Leak-Exploit-Heartble...

MiracleLinux 4 : openssl-1.0.1e-16.AXS4.7 (AXSA:2014-245:02)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2014-245:02 advisory. The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which...

New Study Warns Several Free iOS and Android VPN Apps Leak Data

A Zimperium zLabs analysis of 800 free Android and iOS VPN apps exposes critical security flaws, including the Heartbleed bug, excessive system permissions, and non-transparent data practices. Learn how these 'privacy' tools are actually major security risks, especially for BYOD environments...

NewStart CGSL MAIN 6.06 : openssl Multiple Vulnerabilities (NS-SA-2025-0211)

The remote NewStart CGSL host, running version MAIN 6.06, has openssl packages installed that are affected by multiple vulnerabilities: - In addition to the crehash shell command injection identified in CVE-2022-1292, further circumstances where the crehash script does not properly sanitise shell...

Exploit for Out-of-bounds Read in Openssl

This repository is an exploit for CVE-2014-0160, also known as the Heartbleed vulnerability. The exploit is designed to abuse OpenSSL clients that are vulnerable to this issue. The target product/service is OpenSSL, and the vulnerability class/vector is a buffer overflow in the TLS heartbeat...