3 ms·
Is it so hard to look at the README? > This is tricky. This uses the ssl3_write_bytes() function in order to send heartbeats encrypted after the SSL handshake
by moyix 13y ago
Is it so hard to look at the README?
> This is tricky. This uses the ssl3_write_bytes() function in order to send heartbeats encrypted after the SSL handshake is complete. This function is sometimes exported in OpenSSL libraries, and sometimes not.
> If that's the trouble, then you have to download and build OpenSSL, then link this tool with their object files. I did this by doing:
git clone git://git.openssl.org/openssl.git
cd openssl
./config
make depend
make
gcc ../heartleech/heartleech.c libcrypto.a libssl.a -ldl -o heartleech
> This is evil, because I'm simultaneously linking to the local libraries and the system libraries for OpenSSL, but it seems to work without too much trouble.
- sp332 13y agoSorry if I wasn't clear, but I did try that. Result: http://pastebin.com/mM3G7NgX http://pastebin.com/mM3G7NgX I finally got it working by using instructions from a different heartbleed PoC: gcc heartleech.c -o heartleech -lssl -lcrypto -ldl -I~/openssl-1.0.1g/include -L~/openssl-1.0.1g
- moyix 13y agoGotcha. Sorry to be snippy earlier!