Using Metasploit to exploit Heartbleed
In this recipe, we will be using Metasploit, available in Kali Linux, to exploit to the vulnerability. It is not mandatory to use to exploit Heartbleed. It can be done using simple Python script or a simple Burp plugin (in the free version) to figure out whether the server/service is vulnerable to Heartbleed. However, we wanted to introduce Metasploit exploit and an auxiliary module, which can be very helpful at times.
Getting ready
To step through this recipe, you will need the following:
- Kali Linux running on Oracle Virtualbox/VMware
- Docker running on Kali Linux
- Vulnerable Web Application Docker container
- An Internet connection
How to do it...
For this recipe, you need to perform the following steps:
- We will start this recipe by searching and downloading a container from the Docker hub that is vulnerable to Shellshock using the following command:
docker search heartbleed
You will see the following output:
- We will use the very first Docker image for...
