poodle-PoC
poodle-PoC copied to clipboard
Fix exploit on chrome
On chrome, the exploit doesn't work because of multiple exceptions that break completely the socket connection. Those errors were not raised on firefox.
Edit: fix
try:
(content_type, version, length) = struct.unpack('>BHH', ssl_header)
except struct.error as err:
return
Another problem:
Chrome (2 requests) VS Firefox (1 request)
Every request send to the server with chrome is followed by another request, the favivon !
Well, chrome doesn't handle data like firefox... After sending multiple request with javascript, the server always return hmac error even if there is no hmac error. Very very strange