CVE-2011-1473 PoC — OpenSSL 权限许可和访问控制问题漏洞

Source

https://github.com/XDLDCG/bash-tls-reneg-attack

Associated Vulnerability

Title:OpenSSL 权限许可和访问控制问题漏洞 (CVE-2011-1473)
Description:OpenSSL before 0.9.8l, and 0.9.8m through 1.x, does not properly restrict client-initiated renegotiation within the SSL and TLS protocols, which might make it easier for remote attackers to cause a denial of service (CPU consumption) by performing many renegotiations within a single connection, a different vulnerability than CVE-2011-5094. NOTE: it can also be argued that it is the responsibility of server deployments, not a security library, to prevent or limit renegotiation when it is inappropriate within a specific environment

Description

A bash script that attempts to flood a server with TLS renegotiations by using the openssl client.  See CVE-2011-1473 and CVE-2011-1473 for details.

Readme

bash-tls-reneg-attack
==============

A bash script that attempts to flood a server with TLS renegotiations by using the openssl client. See CVE-2011-1473 and CVE-2011-1473 for details.

Usage: ./tls-reneg.sh some.hostname.here:port

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!