egebalci/ticketbleedThis is a tool for exploiting Ticketbleed (CVE-2016-9244) vulnerability.
This tool is for exploiting Ticketbleed (CVE-2016-9244) vulnerability, the Ticketbleed library inside src folder is a modified version of go's crypto/tls, it has few changes inside handshake_client.go, tls.go, common.go files but it is almost same.
cd Ticketbleed
mv Ticketbleed.go.tmp Ticketbleed.go
go get github.com/EgeBalci/Ticketbleed
go build Ticketbleed.go
./Ticketbleed <ip:port> <options>
OPTIONS:
-o, --out Output filename for raw memory
-s, --size Size in bytes to read (Output value may vary)
-h, --help Print this message
Ticketbleed (CVE-2016-9244) is a software vulnerability in the TLS stack of certain F5 products that allows a remote attacker to extract up to 31 bytes of uninitialized memory at a time, which can contain any kind of random sensitive information, like in Heartbleed.
Founder: Filippo Valsorda
Finding Ticketbleed: https://blog.filippo.io/finding-ticketbleed/
VULNERABLE VERSIONS:
| Product | Version |
|---|---|
| BIG-IP LTM | 12.0.0 - 12.1.2 & 11.4.0 - 11.6.1 |
| BIG-IP AAM | 12.0.0 - 12.1.2 & 11.4.0 - 11.6.1 |
| BIG-IP AFM | 12.0.0 - 12.1.2 & 11.4.0 - 11.6.1 |
| BIG-IP Analytics | 12.0.0 - 12.1.2 & 11.4.0 - 11.6.1 |
| BIG-IP APM | 12.0.0 - 12.1.2 & 11.4.0 - 11.6.1 |
| BIG-IP ASM | 12.0.0 - 12.1.2 & 11.4.0 - 11.6.1 |
| BIG-IP GTM | 11.4.0 - 11.6.1 |
| BIG-IP Link Controller | 12.0.0 - 12.1.2 |
| BIG-IP PEM | 12.0.0 - 12.1.2 & 11.4.0 - 11.6.1 |
| BIG-IP PSM | 11.4.0 - 11.4.1 |