CVE-2014-0160 PoC — OpenSSL 缓冲区错误漏洞

Source

Associated Vulnerability

Title:OpenSSL 缓冲区错误漏洞 (CVE-2014-0160)
Description:The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.

Description

CVE-2014-0160 mass test against subdomains

Readme

knockbleed
==========

CVE-2014-0160 mass test against subdomains

Requirement:
* Knock Subdomain Scan by Gianni 'guelfoweb' Amato - https://github.com/guelfoweb/knock
* check-ssl-heartbleed by Steffen Ullrich - https://github.com/noxxi/p5-scripts
* perl
* python

Usage:

    sid@sweethome:~$ ./knockbleed.sh myqnapcloud.com


Output
======

    sid@sweethome:~$ ./knockbleed.sh myqnapcloud.com
    
    Testing access.myqnapcloud.com:443 ...
    Testing adam.myqnapcloud.com:443 ...
    Testing ads.myqnapcloud.com:443 ...
    Testing adsl.myqnapcloud.com:443 ...
    Testing agent.myqnapcloud.com:443 ...
    Testing ajax.myqnapcloud.com:443 ...
    Testing alpha.myqnapcloud.com:443 ... BAD! got 16384 bytes back instead of 3 (vulnerable)
    Testing anaheim.myqnapcloud.com:443 ... BAD! got 16384 bytes back instead of 3 (vulnerable)
    Testing analyzer.myqnapcloud.com:443 ...
    Testing apollo.myqnapcloud.com:443 ...
    Testing app.myqnapcloud.com:443 ... BAD! got 16384 bytes back instead of 3 (vulnerable)
    Testing apple.myqnapcloud.com:443 ...
    Testing as400.myqnapcloud.com:443 ...
    Testing asia.myqnapcloud.com:443 ...
    Testing athena.myqnapcloud.com:443 ...
    Testing atlas.myqnapcloud.com:443 ...
    Testing austin.myqnapcloud.com:443 ...
    Testing auto.myqnapcloud.com:443 ...
    Testing backup.myqnapcloud.com:443 ...
    Testing baltimore.myqnapcloud.com:443 ... BAD! got 16384 bytes back instead of 3 (vulnerable)
    Testing bbs.myqnapcloud.com:443 ... BAD! got 16384 bytes back instead of 3 (vulnerable)
    Testing bea.myqnapcloud.com:443 ...
    Testing beta.myqnapcloud.com:443 ... BAD! got 16384 bytes back instead of 3 (vulnerable)
    Testing biz.myqnapcloud.com:443 ...
    Testing black.myqnapcloud.com:443 ...
    Testing blog.myqnapcloud.com:443 ...
    Testing blue.myqnapcloud.com:443 ...

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!