Heart Bleed
Summary: PortSwigger lists a Burp Suite extension, authored by Ashkan Jahanbakhsh and last updated 22 June 2023, that adds a tab to Burp's main UI for testing a server for the Heartbleed bug and dumping data retrieved from the server's memory if it is vulnerable. The text describes Heartbleed as a serious flaw in the OpenSSL cryptographic library that lets anyone on the Internet read the memory of systems running vulnerable versions, compromising secret keys, user names and passwords, and traffic content, and enabling eavesdropping, direct data theft, and impersonation of services and users.
What's compelling: Heartbleed exposes the secret keys that identify a service provider and encrypt its traffic, so a single vulnerable OpenSSL server can hand an attacker the material needed to impersonate that service and read its users' communications.
Read the original at PortSwigger Research ↗
- Topics
- Privacy
- Related
- Italy Fines Meta €805 Million Over Facebook's Android Gallery Access Without Explicit Consent Cyber Risks · Nov 15, 2026