PenTest/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2026-01-04 21:59:02 +00:00
Code Issues Projects Releases Wiki Activity

Remove hardcoded TLSv1.1 from heartbeat message build

Browse Source
This commit is contained in:
dmiller
2014-04-10 20:53:12 +00:00
parent 3fd18f7752
commit 353291aeba
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
scripts/ssl-heartbleed.nse
View File

@@ -144,7 +144,7 @@ local function testversion(host, port, version)
})
local payload = "Nmap ssl-heartbleed"
local hb = tls.record_write("heartbeat", "TLSv1.1", bin.pack("C>SA",
local hb = tls.record_write("heartbeat", version, bin.pack("C>SA",
1, -- HeartbeatMessageType heartbeat_request
0x0fe9, -- payload length (falsified)
-- payload length is based on 4096 - 16 bytes padding - 8 bytes packet