Hacker News new | past | comments | ask | show | jobs | submit login

It doesn't link for me on Ubuntu 13.10. I wasn't going to be too hard on a quick project for being unportable, but a broken build tool makes it difficult to get working anywhere.



Is it so hard to look at the README?

> This is tricky. This uses the ssl3_write_bytes() function in order to send heartbeats encrypted after the SSL handshake is complete. This function is sometimes exported in OpenSSL libraries, and sometimes not.

> If that's the trouble, then you have to download and build OpenSSL, then link this tool with their object files. I did this by doing:

    git clone git://git.openssl.org/openssl.git
    cd openssl
    ./config
    make depend
    make

    gcc ../heartleech/heartleech.c libcrypto.a libssl.a -ldl -o heartleech
> This is evil, because I'm simultaneously linking to the local libraries and the system libraries for OpenSSL, but it seems to work without too much trouble.


Sorry if I wasn't clear, but I did try that. Result: http://pastebin.com/mM3G7NgX I finally got it working by using instructions from a different heartbleed PoC:

  gcc heartleech.c -o heartleech -lssl -lcrypto -ldl -I~/openssl-1.0.1g/include -L~/openssl-1.0.1g


Gotcha. Sorry to be snippy earlier!




Consider applying for YC's Spring batch! Applications are open till Feb 11.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: