offensivepython/heartleak

CVE-2014-0160 (Heartbeat Buffer over-read bug)

HeartLeak

Yet, another exploitation script for the most buzzed bug of all the time. The script has two features:

scan: Generates random hosts (IP addresses), checks if they supports OpenSSL, test them if they vulnerable to CVE-2014-0160 (Heartbeat Buffer over-read bug) and save vulnerable hosts in a TXT file

monitor: This keeps sending malicious heartbeat requests, dumps leaked data "as is" in a file. It also looks for printable data, save them in a TXT file and display them on the screen.

heartleak's Issues

exploit stop

Hello
when i use Heartleak exploit, it stop working afther a 3040 min or 34 horus...
it show me this error:

Traceback (most recent call last):
File "C:\Documents and Settings\Administrator\lek.py", line 235, in
main()
File "C:\Documents and Settings\Administrator\lek.py", line 228, in main
monitor(host, port)
File "C:\Documents and Settings\Administrator\lek.py", line 177, in monitor
if target and target.handshake():
File "C:\Documents and Settings\Administrator\lek.py", line 73, in handshake
self.sick.send(self.hello) # send handshake
AttributeError: 'heartleak' object has no attribute 'hello'

i use monitor mode.