Kali Linux uses a version of OpenSSL that is vulnerable to the heartbleed attack. Your ram could be dumped as you use a terminal tool to connect to a malicious server.
Kali hasn't updated their repositories to include the updated version of OpenSSL yet, so I will walk you through the process of installing the updated version.
OpenSSL 1.0.1g download:
http://www.openssl.org/source/openssl-1.0.1g.tar.gz
tar xzf openssl-1.0.1g.tar.gz
Terminal Commands:
openssl version
cd openssl-1.0.1g
./config --prefix=/usr --openssldir=/etc/ssl
make
Subscribe to my channel: http://www.youtube.com/subscription_center?add_user=GarrettFogerlie
Have a video request? Let me know: https://www.youtube.com/user/GarrettFogerlie/discussion
No comments:
Post a Comment