Heartbleed variants
Dockerized training lab for exploiting Heartbleed (CVE-2014-0160) via TLS heartbeat to leak nginx memory, plus Snort rule to detect attacks.
The objective of this project was to assess a remote host for the Heartbleed vulnerability (CVE-2014-0160), verify its presence, and exploit it to extract potentially sensitive information from server memory over the TLS protocol.
Detects the Heartbleed vulnerability (CVE-2014-0160) in OpenSSL on HTTP and HTTPS services via version checking, with guidance for using nmap, masscan, and bleed.py for broader scanning.
Self-contained Heartbleed (CVE-2014-0160) lab: builds vulnerable OpenSSL 1.0.1f in Docker and includes a Python memory-leak PoC for authorised testing.
A collection of scripts and instructions to test CVE-2014-0160 (heartbleed). ❤️ 🩸
Educational Docker-based lab demonstrating the Heartbleed bug (CVE-2014-0160) with hacker, victim, and server containers for hands-on exploitation and session cookie extraction.
Docker container for CVE-2014-0160 (Heartbleed) vulnerability, part of the Cved framework for managing and deploying vulnerable environments for security training and testing.
OpenSSL Heartbleed (CVE-2014-0160) vulnerability scanner, data miner and RSA key-restore tools.
Dockerfile for testing CVE-2014-0160 Heartbleed exploitation.
Nmap NSE script that discovers/exploits Heartbleed/CVE-2014-0160.
CVE-2014-0160 OpenSSL Heartbleed Proof of Concept
Vulnerability as a service: showcasing CVS-2014-0160, a.k.a. Heartbleed
Network Scanner for OpenSSL Memory Leak (CVE-2014-0160)
This Python PoC script detects the Heartbleed vulnerability (CVE-2014-0160) by performing a TLS handshake with heartbeat extension and sending a crafted heartbeat request. It parses responses to identify leaked memory, helping assess server susceptibility to this critical OpenSSL flaw.
OpenSSL TLS heartbeat read overrun (CVE-2014-0160)
Heartbleed (CVE-2014-0160) client exploit
:broken_heart: Hearbleed exploit to retrieve sensitive information CVE-2014-0160 :broken_heart:
Deprecated Chrome plugin that checks websites for the Heartbleed vulnerability (CVE-2014-0160) via an API, with linked exploit code for educational reference.
PHP CLI script to scan domains for the CVE-2014-0160 (Heartbleed) vulnerability using an external API service.
The Heartbleed bug `CVE-2014-0160` is a severe implementation flaw in the OpenSSL library, which enables attackers to steal data from the memory of the victim server. The contents of the stolen data depend on what is there in the memory of the server. It could potentially contain private keys, TLS session keys, usernames, passwords, credit cards, etc. The vulnerability is in the implementation of the Heartbeat protocol, which is used by SSL/TLS to keep the connection alive.
Demonstration of the Heartbleed CVE (CVE-2014-0160), including lab setup instructions and source code to build your own Heartbleed lab for educational purposes
OpenSSL Heartbleed (CVE-2014-0160) Fix script
Test for SSL heartbeat vulnerability (CVE-2014-0160)
This is the Heratbleed bug (CVE-2014-0160) documentation I did for Advenced Cyber Attacks course.
Heartbleed (CVE-2014-0160) was devastating because it leaked adjacent memory. CTT-Heartbleed goes further—it uses 33-layer temporal resonance to map, reconstruct, and extract specific memory regions across time, not just adjacent buffers.
Python script to detect the Heartbleed vulnerability (CVE-2014-0160) in SSL/TLS servers, designed for educational and authorized security testing.
Docker-based lab environment for exploiting CVE-2014-0160 (Heartbleed) to leak sensitive memory from nginx web servers, with Snort IDS detection rules.
Proof of concept for exploiting the Heartbeat Extension bug detailed in the CVE-2014-0160. :old_key: :unlock:
Educational laboratory for studying CVE-2014-0160 (Heartbleed) and framing inconsistencies in TLS heartbeat handling.
Heartbleed
Python exploit for CVE-2014-0160 (Heartbleed) that extracts memory contents from vulnerable OpenSSL servers, adapted for Python 3 compatibility.
Patch openssl #heartbleed with ansible
hands on investigation of the heartbleed vulnerability (CVE-2014-0160).
CVE-2014-0160
Script to find Exit and Guard nodes in the Tor Network, that are still suffering from CVE-2014-0160
来自：https://www.freebuf.com/articles/web/31700.html
Python-based exploit for CVE-2014-0160 (Heartbleed) targeting vulnerable OpenSSL TLS/SSL implementations to leak memory contents.
Proof-of-concept exploit for CVE-2014-0160 (Heartbleed) targeting DTLS, demonstrating memory disclosure vulnerability in TLS/DTLS implementations.
Python scripts for detecting and exploiting OpenSSL Heartbleed (CVE-2014-0160), leaking sensitive memory contents from vulnerable TLS services.
CVE-2014-0160 (Heartbeat Buffer over-read bug)
Simple OpenSSL TLS Heartbeat (CVE-2014-0160) Scanner and Exploit (Multiple SSL/TLS versions)
CVE-2014-0160
Aquí está mi nuevo y primer exploit web, este exploit ataca a la vulnerabilidad de HeartBleed (CVE-2014-0160) espero que os guste.
Example and demo setup for Heartbleed vulnerability (CVE-2014-0160). This should be used for testing purposes only!💔
Exploit for the Heartbleed vulnerability (CVE-2014-0160) in OpenSSL 1.0.1f, allowing memory disclosure from vulnerable servers.
exploits and proof-of-concept vulnerability demonstration files from the team at Hacker House
CVE-2025-13834 Technical Summary Vulnerability Type: Memory Disclosure / Out-of-Bounds (OOB) Read (CWE-125). CVSS Score: 7.5–8.1 (High/Critical). Vector: Adjacent Network (Bluetooth range) via single-packet exploit without authentication. Root Cause: A critical flaw exists in the RFCOMM protocol’s TEST command (Frame Type 0x10).
Jared Stafford · multiple · Apr 8, 2014
Fitzl Csaba · multiple · Apr 9, 2014
prdelka · multiple · Apr 10, 2014
Ayman Sagy · multiple · Apr 24, 2014
