OpenSSLの「Heartbleed」脆弱性を悪用する攻撃の仕組み | Symantec

To meet today's Cyber Security challenges, enterprises need an integrated cyber defense platform that integrates industry-leading solutions and solves for the most pressing C-level challenges like evolving threats, privacy & compliance, and digital transformation.

[dombly]

攻撃の機序を説明する図

[yakitori2008]

“Encryption Family”

[kaito834]

2011年12月に英Amnesty InternationalのWebサイトに仕込まれたJREの脆弱性CVE-2011-3544のExploitコードは、これかな。「3max.com.br ai.jar」で検索→「B8AE7608B6E85B8B435AE3561A4D400D」で検索。

[dbfireball]

買ったので申し込む

[ytumagar]

Windows用のstrace/truss。system call