DEVCORE on 小惡魔 - AppleBOYhttps://blog.wu-boy.com/tags/devcore/Recent content in DEVCORE on 小惡魔 - AppleBOYHugoen-usappleboy.tw@gmail.com (Appleboy)appleboy.tw@gmail.com (Appleboy)Mon, 14 Apr 2014 06:24:07 +0000OpenSSL CVE-2014-0160 (Heartbleed) 漏洞攻擊手法https://blog.wu-boy.com/2014/04/openssl-cve-2014-0160-heartbleed/Mon, 14 Apr 2014 06:24:07 +0000appleboy.tw@gmail.com (Appleboy)https://blog.wu-boy.com/2014/04/openssl-cve-2014-0160-heartbleed/<div style="margin:0 auto; text-align:center"> <a href="https://www.flickr.com/photos/appleboy/13774392623" title="heartbleed by Bo-Yi Wu, on Flickr"><img src="https://i1.wp.com/farm8.staticflickr.com/7102/13774392623_7baaa68597_m.jpg?resize=198%2C240&#038;ssl=1" alt="heartbleed" data-recalc-dims="1" /></a> </div> <p><a href="http://devco.re/">DEVCORE</a> 資安公司寫了一篇 <a href="http://devco.re/blog/2014/04/11/openssl-heartbleed-how-to-hack-how-to-protect/">OpenSSL Heartbleed 全球駭客的殺戮祭典，你參與了嗎？</a> 內如介紹如何透過工具攻擊及測試現有網站，也提供如何修正 OpenSSL 漏洞，Debian，Centos，FreeBSD 等。要檢查機器是否更新到正確版本，可以透過底下指令</p> <div> <pre class="brush: bash; title: ; notranslate" title="">$ openssl version -a</pre> </div>