5 ms·

Yes, but you don't really need the Makefile. Just check out README.md and do as it says, and it should build just fine. Actually just $ gcc -o heartleech -lcry

• sp332 13y ago
  It doesn't link for me on Ubuntu 13.10. I wasn't going to be too hard on a quick project for being unportable, but a broken build tool makes it difficult to get working anywhere.
  • moyix 13y ago
    Is it so hard to look at the README? > This is tricky. This uses the ssl3_write_bytes() function in order to send heartbeats encrypted after the SSL handshake is complete. This function is sometimes exported in OpenSSL libraries, and sometimes not. > If that's the trouble, then you have to download and build OpenSSL, then link this tool with their object files. I did this by doing: git clone git://git.openssl.org/openssl.git cd openssl ./config make depend make gcc ../heartleech/heartleech.c libcrypto.a libssl.a -ldl -o heartleech > This is evil, because I'm simultaneously linking to the local libraries and the system libraries for OpenSSL, but it seems to work without too much trouble.
    • sp332 13y ago
      Sorry if I wasn't clear, but I did try that. Result: http://pastebin.com/mM3G7NgX http://pastebin.com/mM3G7NgX I finally got it working by using instructions from a different heartbleed PoC: gcc heartleech.c -o heartleech -lssl -lcrypto -ldl -I~/openssl-1.0.1g/include -L~/openssl-1.0.1g
      • moyix 13y ago
        Gotcha. Sorry to be snippy earlier!