@daveaitel Do you know the best reference offhand where you compare heartbleed (useless) vs shellshock (useful)?
-
This Tweet is unavailable.
-
This Tweet is unavailable.
-
@suqdiq@daveaitel@dguido@flyryan pulling valid creds or sessions is not useless, not sure why Dave said the vuln was
@jstnkndy @suqdiq @daveaitel @flyryan It requires attention to detail and does not easily scale as an attack vector. Shellshock does.
-
-
-
@daveaitel@jstnkndy@suqdiq@flyryan which brings me back to reason for asking: hard to find data breaches with Heartbleed listed as factor - 3 more replies
New conversation -
-
-
@jstnkndy@suqdiq@daveaitel@flyryan Shellshock is much easier to dev into a repeatable process that works across targets w/ known results -
@jstnkndy@suqdiq@daveaitel@flyryan Heartbleed tends to be different for every target, may lead to creds, but then what do you do? thinky
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.