sharathwe45/heartbleed repository overview

⁠HeartBleed Exploit

• Pull the docker image

  docker pull sharathwe45/heartbleed

• Run the docker image

  docker run -d -p 8443:443 --name heartbleed sharathwe45/heartbleed

• Exploit the vulnerability

  nmap -sV -p 8443 --script=ssl-heartbleed localhost

  You should see nmap printing the vulnerability info for you

• Fix the vulnerability

  • List the running containers

    docker ps

  • Exec into the docker

    docker exec -it heartbleed bash

  • Upgrade the OpenSSL and LibSSL libraries

    apt-get update && apt-get install --only-upgrade openssl libssl1.0.0

  • Restart the container

    docker restart heartbleed

• Now retest the vulnerability

  nmap -sV -p 8443 --script=ssl-heartbleed localhost

  As the vulnerability is been fixed now the nmap will not result any vulnerability info