[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[FD] Legitimacy of new Heartbleed exploit?

To: fulldisclosure@xxxxxxxxxxxx
Subject: [FD] Legitimacy of new Heartbleed exploit?
From: Dillon Korman <me@xxxxxxxxxxxxxxxx>
Date: Fri, 25 Apr 2014 08:18:04 -1000

Saw a link to this:
http://pastebin.com/qPxR9BRv

There is no actual exploit code in there since they insist of keeping it 
private. Do you think there really is a working exploit on new versions of 
OpenSSL? 

_______________________________________________
Sent through the Full Disclosure mailing list
http://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

Follow-Ups:
- Re: [FD] Legitimacy of new Heartbleed exploit?
  - From: Jann Horn
- Re: [FD] Legitimacy of new Heartbleed exploit?
  - From: H. Dong
- Re: [FD] Legitimacy of new Heartbleed exploit?
  - From: Bennett Todd
- Re: [FD] Legitimacy of new Heartbleed exploit?
  - From: Peter Malone

Prev by Date: Re: [FD] [ANN] Struts 2 up to 2.3.16.1: Zero-Day Exploit Mitigation (security | critical)
Next by Date: Re: [FD] [ANN] Struts 2 up to 2.3.16.1: Zero-Day Exploit Mitigation (security | critical)
Previous by thread: [FD] UI redress attack on live.com (affected all pages)
Next by thread: Re: [FD] Legitimacy of new Heartbleed exploit?
Index(es):
- Date
- Thread