3 ms·
One important thing to realize about the PoC -- if you change "40 00" to "FF FF" or similar, it may seem that you still only get 16KB back. In fact (in violatio
by moyix 13y ago
One important thing to realize about the PoC -- if you change "40 00" to "FF FF" or similar, it may seem that you still only get 16KB back. In fact (in violation of the TLS spec) OpenSSL is just fragmenting heartbeat message into multiple packets. If you modify the script to read and print heartbeat responses in a loop, you can get the full 64KB mentioned in the advisory.
- richm44 13y agoThat's a very good point (and easy to change in the code). When I was thinking about what to write I considered making a modified version of the PoC that was a bit more readable and adding a few tweaks like handling different TLS versions but in the end I decided that explaining it as-is would be worthwhile in itself.