3 ms·
So out of curiosity, I ran the python heartbleed tester against their server. Surprisingly, the first (and every response thereafter) returned a memory dump whi
by koliber 13y ago
So out of curiosity, I ran the python heartbleed tester against their server. Surprisingly, the first (and every response thereafter) returned a memory dump which contained at least part of what looked like a private key. I immediately became skeptical when each of these apparent private keys ended in LOLJK.
0690: 79 37 70 71 31 76 63 2F 74 70 49 67 68 4C 4F 4C y7pq1vc/tpIghLOL
06a0: 4A 4B 3D 3D 2D 2D 2D 2D 2D 45 4E 44 5F 52 53 41 JK==-----END_RSA
06b0: 5F 50 52 49 56 41 54 45 5F 4B 45 59 2D 2D 2D 2D _PRIVATE_KEY----
Seems like a clever setup to return hand-crafted responses.
- zenojevski 13y agoGot that too: 1ef0: 4E 63 46 39 33 51 75 34 64 2F 48 6E 47 6D 4B 50 NcF93Qu4d/HnGmKP 1f00: 51 42 72 4A 43 50 53 69 54 67 70 2F 63 79 37 70 QBrJCPSiTgp/cy7p 1f10: 71 31 76 63 2F 74 70 49 67 68 4C 4F 4C 4A 4B 3D q1vc/tpIghLOLJK= 1f20: 3D 2D 2D 2D 2D 2D 45 4E 44 25 32 30 52 53 41 25 =-----END%20RSA% 1f30: 32 30 50 52 49 56 41 54 45 25 32 30 4B 45 59 2D 20PRIVATE%20KEY- 1f40: 2D 2D 2D 2D 20 48 54 54 50 2F 31 2E 31 0D 0A 48 ---- HTTP/1.1..H Curiously enough, one of the first responses, after which they became somewhat predictable (with the occasional "herring"). Seems like some experimenting (based on differing offset, and `%20` vs `_`).
- haldean 13y agoI got a private key without the LOLJK, but I'm 99% certain this is someone trolling me. Still going to double-check though.