CVE-2014-0160 PoC — OpenSSL 缓冲区错误漏洞

Source

https://github.com/undacmic/heartbleed-proof-of-concept

Associated Vulnerability

Title:OpenSSL 缓冲区错误漏洞 (CVE-2014-0160)
Description:OpenSSL是OpenSSL团队开发的一个开源的能够实现安全套接层（SSL v2/v3）和安全传输层（TLS v1）协议的通用加密库，它支持多种加密算法，包括对称密码、哈希算法、安全散列算法等。 OpenSSL的TLS和DTLS实现过程中的d1_both.c和t1_lib.c文件中存在安全漏洞，该漏洞源于当处理Heartbeat Extension数据包时，缺少边界检查。远程攻击者可借助特制的数据包利用该漏洞读取服务器内存中的敏感信息(如用户名、密码、Cookie、私钥等)。以下版本的OpenSSL受到

Description

Proof of concept for exploiting the Heartbeat Extension bug detailed in the CVE-2014-0160. :old_key: :unlock:

Readme

Heartbleed (CVE-2014-0160)
==========

## Setup

You will require **docker** in order to perform the setup.
The exploit, dynamically generates the random bytes from the Client Hello message,
therefore you will need to link the library when building the executable.
The required package to be installed, in order to link properly:
```
sudo apt-get install libssl-dev
```
The tool was tested on ***Docker for Desktop - Version: 20.10.21*** with ***WSL 2***.

The steps to reproduce the vulnerability are:
1.  Vulnerable server initialization
```
cd server-image/
docker build -t <image_name> .
docker run -d -p <port>:443 --name <name> <image_name>
```
2. Starting the script

```
cd ..
gcc -o heartbleed heartbleed.c -lcrypto
./heartbleed <ip> <port>

```

**You do need to specify the correct port.**

![Heartbleed Leak of 65535 bytes](./resources/heartbleed-dump.png)

## Preview

| Thesis                                                                                                       | Presentation                                                                                                                         |
|--------------------------------------------------------------------------------------------------------------|--------------------------------------------------------------------------------------------------------------------------------------|
| <a href="article/export.pdf"><kbd><img src="article/preview.png" width="400px" alt="Article preview"></kbd></a> | <a href="presentation/export.pdf"><kbd><img src="presentation/preview.png" width="400px" alt="Presentation preview"></kbd></a> |

File Snapshot


 [4.0K]  /data/pocs/cddea7315e6f167985d6ed56f5933fa34e38dec3
├── [4.0K]  article
│   ├── [219K]  export.pdf
│   ├── [281K]  preview.png
│   └── [4.0K]  project
│       ├── [1.6K]  bibliography.bib
│       ├── [275K]  IEEEtran.cls
│       ├── [4.0K]  images
│       │   └── [173K]  heartbeat-packet.png
│       └── [ 17K]  main.tex
├── [2.8K]  Dockerfile
├── [ 21K]  heartbleed.c
├── [4.0K]  presentation
│   ├── [455K]  export.pdf
│   ├── [ 44K]  preview.png
│   └── [4.0K]  project
│       ├── [4.0K]  Images
│       │   ├── [ 52K]  creodocs_logo.pdf
│       │   ├── [173K]  heartbeat-packet.png
│       │   ├── [7.1K]  heartbleed.png
│       │   ├── [431K]  Hokie2.png
│       │   ├── [ 26K]  Newey et al Graph.PNG
│       │   ├── [3.1K]  Slide Logo.png
│       │   └── [359K]  xkcd.png
│       └── [ 13K]  template.tex
├── [1.6K]  README.md
├── [4.0K]  resources
│   └── [ 20K]  heartbleed-dump.png
└── [4.0K]  server-image
    ├── [1.2K]  Dockerfile
    └── [4.0K]  web
        └── [1.3K]  index.html

9 directories, 22 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!