Threat Level: green Handler on Duty: Xavier Mertens

SANS ISC: Interested in a Heartbleed Challenge? - Internet Security | DShield SANS ISC InfoSec Forums

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Interested in a Heartbleed Challenge?

CloudFlare lunched a challenge yesterday: Can You Get Private SSL Keys Using Heartbleed?[1]  The site created by CloudFlare engineers is located here and is intentionally vulnerable to heartbleed. If you manage to steal the private key from the site, they will post the full details on that site. So far two individuals have succeeded: Fedor Indutny (@indutny) and Ilkka Mattila of NCSC-F.[2]

If you have time and bandwidth, this might be a fun weekend project.



Guy Bruneau IPSS Inc. gbruneau at isc dot sans dot edu


443 Posts
ISC Handler

Sign Up for Free or Log In to start participating in the conversation!