Re: heartbleed.c

[Hacker Fantastic <hackerfantastic () googlemail com>]

I made a mistake and was premature to send that last version to the list as
it had horrendous bugs and wasn't correct at all, this version now
correctly leaks from the server the full 64k heap block. It will also
attempt on client but I encountered some errors (client forcefully closing
connection etc.). It's late and I am sure there are bugs, any future
versions please see
https://github.com/HackerFantastic/Public/blob/master/exploits/heartbleed.cas
I will update it as needed.

Regards,
Matthew


On Fri, Apr 11, 2014 at 1:36 AM, Hacker Fantastic <
hackerfantastic () googlemail com> wrote:

> Bug fix in byte order of length values returned. For any future updates
> please see github.
>
>
> On Fri, Apr 11, 2014 at 12:15 AM, Hacker Fantastic <
> hackerfantastic () googlemail com> wrote:
>
> > Updated version, the heartbleed leak returned incorrect TLS record sizes
> > (kudos to Andrea Shepard @ tor for pointing this out) but was still leaking
> > the requested amount. Earlier code was returning only 16k of data as I
> > relied on the TLS record size. This version will leak upto 64K of data from
> > client or server heap.
> >
> >
> > On Thu, Apr 10, 2014 at 3:25 PM, Hacker Fantastic <
> > hackerfantastic () googlemail com> wrote:
> >
> > > Exploit for CVE-2014-0160 - client/server exploit and uses encrypted
> > > stream to leak bytes for IDS evasion. Can adjust heartbeat payload_length
> > > to leak fewer bytes and also has support for pre_cmd's i.e. STARTTLS.
> >
> >
> >
> > --
> > Matthew Hickey
> > Tel: +44 7543 661237
> > Web: http://blog.hackerfantastic.com
> >
> > Please visit my website for blog postings, status updates and project
> > information.
>
>
> --
> Matthew Hickey
> Tel: +44 7543 661237
> Web: http://blog.hackerfantastic.com
>
> Please visit my website for blog postings, status updates and project
> information.


-- 
Matthew Hickey
Tel: +44 7543 661237
Web: http://blog.hackerfantastic.com

Please visit my website for blog postings, status updates and project
information.

Attachment: heartbleed.c
Description:

_______________________________________________
Sent through the Full Disclosure mailing list
http://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/