full-disclosure

Open Source and information security mailing list archives

Message-ID: <CAG-OieMA11bPdsGBnXdacVRG5+deGk3koHbpXNV+FEQoQOFOJA@mail.gmail.com>
Date: Fri, 11 Apr 2014 02:49:07 +0100
From: Hacker Fantastic <hackerfantastic@...glemail.com>
To: fulldisclosure@...lists.org
Subject: Re: [FD] heartbleed.c

I made a mistake and was premature to send that last version to the list as
it had horrendous bugs and wasn't correct at all, this version now
correctly leaks from the server the full 64k heap block. It will also
attempt on client but I encountered some errors (client forcefully closing
connection etc.). It's late and I am sure there are bugs, any future
versions please see
https://github.com/HackerFantastic/Public/blob/master/exploits/heartbleed.cas
I will update it as needed.

Regards,
Matthew

On Fri, Apr 11, 2014 at 1:36 AM, Hacker Fantastic <
hackerfantastic@...glemail.com> wrote:

> Bug fix in byte order of length values returned. For any future updates
> please see github.
>
>
> On Fri, Apr 11, 2014 at 12:15 AM, Hacker Fantastic <
> hackerfantastic@...glemail.com> wrote:
>
>> Updated version, the heartbleed leak returned incorrect TLS record sizes
>> (kudos to Andrea Shepard @ tor for pointing this out) but was still leaking
>> the requested amount. Earlier code was returning only 16k of data as I
>> relied on the TLS record size. This version will leak upto 64K of data from
>> client or server heap.
>>
>>
>> On Thu, Apr 10, 2014 at 3:25 PM, Hacker Fantastic <
>> hackerfantastic@...glemail.com> wrote:
>>
>>> Exploit for CVE-2014-0160 - client/server exploit and uses encrypted
>>> stream to leak bytes for IDS evasion. Can adjust heartbeat payload_length
>>> to leak fewer bytes and also has support for pre_cmd's i.e. STARTTLS.
>>>
>>
>>
>>
>> --
>> Matthew Hickey
>> Tel: +44 7543 661237
>> Web: http://blog.hackerfantastic.com
>>
>> Please visit my website for blog postings, status updates and project
>> information.
>>
>>
>>
>>
>>
>
>
> --
> Matthew Hickey
> Tel: +44 7543 661237
> Web: http://blog.hackerfantastic.com
>
> Please visit my website for blog postings, status updates and project
> information.
>
>
>
>
>

-- 
Matthew Hickey
Tel: +44 7543 661237
Web: http://blog.hackerfantastic.com

Please visit my website for blog postings, status updates and project
information.

View attachment "heartbleed.c" of type "text/x-csrc" (17338 bytes)

_______________________________________________
Sent through the Full Disclosure mailing list
http://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives