debbie@cromulence.com
Cromulence LLC (CROMU)
CVE-2014-0160, commonly known as Heartbleed, was one of the first uber-famous vulnerabilities to receive its own name, dedicated website, and even a logo. Although it was a straightforward memory disclosure in OpenSSL, its effect was complex and far reaching. Its discovery in 2014 called into question the security and privacy of over 60% of encrypted Internet traffic over the past few years. Recovery from Heartbleed not only required patching the software like any other typical vulnerability but also required revocation of compromised keys, reissuing of keys and certificates, and changing of all user passwords. It is interesting to note that the Heartbleed vulnerability was originally detected by an automated testing system, Defensics by Codenomicon.
This service recreates an openssl style server utilizing a made up transport layer called (Some Layer Security) (SLS) inspired by Transport Layer Security (TLS). On top of that, the server implements a Message-based SLS protocol (MSLS). Since the heartbleed vulnerability was in the heartbeat message of a TLS session, this server implements a heartbeat style message as part of the MSLS protocol.
This service accepts messages of several types: Handshake, Error, Changespec, Application, Heartbeat, and Shutdown. The handshake protocol is similar to a TLS handshake and contains the following exchange: Client Hello -> <- Hello Verify Client Hello (w/cookie) -> <- Server Hello <- Server Key Exchange <- Hello Done Client Key Exchange -> Hello Done -> <- Finished Finished ->
Once a handshake is complete a connection is established and future data is sent within that protected connection. All 'encryption' is a simple xor based algorithm using the exchanged keys.
Once a secure connection is established, this service provides access to a message board. Application messages can be sent within the encrypted connection of the following types: APPLICATION_LIST_BOARD - List the number of messages APPLICATION_POST_MESSAGE - Post a new message APPLICATION_DELETE_MESSAGE - Delete a message APPLICATION_CLEAR_BOARD - Clear the entire board APPLICATION_READ_MESSAGE - Read a particular message
The vulnerability exists in the heartbeat message of this protocol and is very similar to the real world heartbleed vulnerability. To leverage it, a heartbeat message can be sent with a payload length longer than what exists in the heartbeat message. When the server processes it and responds, it will read past the end of the request message and return additional data from the memory space of the server. If the right conditions are in place, this additional data could contain sensitive information.
In order to prove this vulnerability, the unauthorized memory access needs to contain sensitive information (ie magic page data). Some of this data is moved to the heap during a SLS handshake. The handshake does not need to be fully complete, but the first set of messages (CLIENT_HELLO, HELLO_VERIFY, CLIENT_HELLO w/cookie) need to be successfully navigated before the sensitive information will be available on the heap. Once it is there, its just a matter of lining up the heap in a way that allows an incoming heartbeat message to be placed in memory before the desired sensitive information and with a payload length incorrectly long enough that the sensitive information will be returned in the response.
Improperly sanitizing program input allows reading past the end of the intended buffer leading to information disclosure.
CWE-788 - Access of Memory Location After End of Buffer
Identifying and patching this vulnerability should be straightforward. To leverage the vulnerability to actually prove the type 2 pov will require a bit more effort. A partial handshake needs to be completed to move the magic page data into the correct location on the heap so a successful proof of the vulnerability will access the magic page data necessary to score. Finding: Easy Proving: Medium Patching: Easy
| Round | Source | Destination | Result | POV | Analysis | Video |
|---|---|---|---|---|---|---|
| 1 | CSDS | CodeJitsu | Failed POV | POV | Watch | |
| 1 | CSDS | DeepRed | Failed POV | POV | Watch | |
| 1 | CSDS | Disekt | Failed POV | POV | Watch | |
| 1 | CSDS | ForAllSecure | Failed POV | POV | Watch | |
| 1 | CSDS | Shellphish | Failed POV | POV | Watch | |
| 1 | CSDS | TECHx | Failed POV | POV | Watch | |
| 1 | DeepRed | CodeJitsu | Failed POV | POV | Watch | |
| 1 | DeepRed | CSDS | Failed POV | POV | Watch | |
| 1 | DeepRed | Disekt | Failed POV | POV | Watch | |
| 1 | DeepRed | ForAllSecure | Failed POV | POV | Watch | |
| 1 | DeepRed | Shellphish | Failed POV | POV | Watch | |
| 1 | DeepRed | TECHx | Failed POV | POV | Watch | |
| 1 | ForAllSecure | CodeJitsu | Failed POV | POV | Watch | |
| 1 | ForAllSecure | CSDS | Failed POV | POV | Watch | |
| 1 | ForAllSecure | DeepRed | Failed POV | POV | Watch | |
| 1 | ForAllSecure | Disekt | Failed POV | POV | Watch | |
| 1 | ForAllSecure | Shellphish | Failed POV | POV | Watch | |
| 1 | ForAllSecure | TECHx | Failed POV | POV | Watch | |
| 2 | CodeJitsu | CSDS | Failed POV through defenses | POV | Watch | |
| 2 | CodeJitsu | Shellphish | Failed POV through defenses | POV | Watch | |
| 2 | CodeJitsu | TECHx | Failed POV through defenses | POV | Watch | |
| 2 | CSDS | DeepRed | Failed POV | POV | Watch | |
| 2 | CSDS | Disekt | Failed POV | POV | Watch | |
| 2 | CSDS | ForAllSecure | Failed POV | POV | Watch | |
| 2 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 2 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 2 | DeepRed | CodeJitsu | Failed POV | POV | Watch | |
| 2 | DeepRed | CSDS | Failed POV through defenses | POV | Watch | |
| 2 | DeepRed | Disekt | Failed POV | POV | Watch | |
| 2 | DeepRed | ForAllSecure | Failed POV | POV | Watch | |
| 2 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 2 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 2 | ForAllSecure | CodeJitsu | Failed POV | POV | Watch | |
| 2 | ForAllSecure | CSDS | Failed POV through defenses | POV | Watch | |
| 2 | ForAllSecure | DeepRed | Failed POV | POV | Watch | |
| 2 | ForAllSecure | Disekt | Failed POV | POV | Watch | |
| 2 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 2 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 3 | CSDS | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 3 | CSDS | Disekt | Failed POV | POV | Watch | |
| 3 | CSDS | ForAllSecure | Failed POV | POV | Watch | |
| 3 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 3 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 3 | DeepRed | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 3 | DeepRed | CSDS | Failed POV through defenses | POV | Watch | |
| 3 | DeepRed | Disekt | Failed POV | POV | Watch | |
| 3 | DeepRed | ForAllSecure | Failed POV | POV | Watch | |
| 3 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 3 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 3 | ForAllSecure | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 3 | ForAllSecure | CSDS | Failed POV through defenses | POV | Watch | |
| 3 | ForAllSecure | Disekt | Successful POV | POV | Analysis | Watch |
| 3 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 3 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 4 | CodeJitsu | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 4 | CSDS | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 4 | CSDS | DeepRed | Failed POV through defenses | POV | ||
| 4 | CSDS | Disekt | Failed POV | POV | Watch | |
| 4 | CSDS | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 4 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 4 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 4 | DeepRed | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 4 | DeepRed | CSDS | Failed POV through defenses | POV | Watch | |
| 4 | DeepRed | Disekt | Failed POV | POV | Watch | |
| 4 | DeepRed | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 4 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 4 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 4 | ForAllSecure | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 4 | ForAllSecure | CSDS | Failed POV through defenses | POV | Watch | |
| 4 | ForAllSecure | DeepRed | Failed POV through defenses | POV | ||
| 4 | ForAllSecure | Disekt | Successful POV | POV | Analysis | Watch |
| 4 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 4 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 5 | CodeJitsu | DeepRed | Failed POV through defenses | POV | ||
| 5 | CSDS | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 5 | CSDS | DeepRed | Failed POV through defenses | POV | ||
| 5 | CSDS | Disekt | Failed POV | POV | Watch | |
| 5 | CSDS | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 5 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 5 | DeepRed | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 5 | DeepRed | CSDS | Failed POV through defenses | POV | Watch | |
| 5 | DeepRed | Disekt | Failed POV | POV | Watch | |
| 5 | DeepRed | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 5 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 5 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 5 | ForAllSecure | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 5 | ForAllSecure | CSDS | Failed POV through defenses | POV | Watch | |
| 5 | ForAllSecure | DeepRed | Failed POV through defenses | POV | ||
| 5 | ForAllSecure | Disekt | Successful POV | POV | Analysis | Watch |
| 5 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 5 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 6 | CodeJitsu | DeepRed | Failed POV through defenses | POV | ||
| 6 | CSDS | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 6 | CSDS | DeepRed | Failed POV through defenses | POV | ||
| 6 | CSDS | Disekt | Failed POV | POV | Watch | |
| 6 | CSDS | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 6 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 6 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 6 | DeepRed | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 6 | DeepRed | CSDS | Failed POV through defenses | POV | Watch | |
| 6 | DeepRed | Disekt | Failed POV | POV | Watch | |
| 6 | DeepRed | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 6 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 6 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 6 | ForAllSecure | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 6 | ForAllSecure | CSDS | Failed POV through defenses | POV | Watch | |
| 6 | ForAllSecure | DeepRed | Failed POV through defenses | POV | ||
| 6 | ForAllSecure | Disekt | Successful POV | POV | Analysis | Watch |
| 6 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 6 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 7 | CodeJitsu | DeepRed | Failed POV through defenses | POV | ||
| 7 | CSDS | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 7 | CSDS | DeepRed | Failed POV through defenses | POV | ||
| 7 | CSDS | Disekt | Failed POV | POV | Watch | |
| 7 | CSDS | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 7 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 7 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 7 | DeepRed | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 7 | DeepRed | CSDS | Failed POV through defenses | POV | Watch | |
| 7 | DeepRed | Disekt | Failed POV | POV | Watch | |
| 7 | DeepRed | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 7 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 7 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 7 | ForAllSecure | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 7 | ForAllSecure | CSDS | Failed POV through defenses | POV | Watch | |
| 7 | ForAllSecure | DeepRed | Failed POV through defenses | POV | ||
| 7 | ForAllSecure | Disekt | Successful POV | POV | Analysis | Watch |
| 7 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 7 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 8 | CodeJitsu | DeepRed | Failed POV through defenses | POV | ||
| 8 | CSDS | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 8 | CSDS | DeepRed | Failed POV through defenses | POV | ||
| 8 | CSDS | Disekt | Failed POV | POV | Watch | |
| 8 | CSDS | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 8 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 8 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 8 | DeepRed | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 8 | DeepRed | CSDS | Failed POV through defenses | POV | Watch | |
| 8 | DeepRed | Disekt | Failed POV | POV | Watch | |
| 8 | DeepRed | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 8 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 8 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 8 | ForAllSecure | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 8 | ForAllSecure | CSDS | Failed POV through defenses | POV | Watch | |
| 8 | ForAllSecure | DeepRed | Failed POV through defenses | POV | ||
| 8 | ForAllSecure | Disekt | Successful POV | POV | Analysis | Watch |
| 8 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 8 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 9 | CSDS | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 9 | CSDS | Disekt | Failed POV | POV | Watch | |
| 9 | CSDS | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 9 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 9 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 9 | DeepRed | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 9 | DeepRed | CSDS | Failed POV through defenses | POV | Watch | |
| 9 | DeepRed | Disekt | Failed POV | POV | Watch | |
| 9 | DeepRed | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 9 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 9 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 9 | ForAllSecure | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 9 | ForAllSecure | CSDS | Failed POV through defenses | POV | Watch | |
| 9 | ForAllSecure | Disekt | Successful POV | POV | Analysis | Watch |
| 9 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 9 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 10 | CSDS | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 10 | CSDS | Disekt | Failed POV | POV | Watch | |
| 10 | CSDS | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 10 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 10 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 10 | DeepRed | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 10 | DeepRed | CSDS | Failed POV through defenses | POV | Watch | |
| 10 | DeepRed | Disekt | Failed POV | POV | Watch | |
| 10 | DeepRed | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 10 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 10 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 10 | ForAllSecure | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 10 | ForAllSecure | CSDS | Failed POV through defenses | POV | Watch | |
| 10 | ForAllSecure | Disekt | Successful POV | POV | Analysis | Watch |
| 10 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 10 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 11 | CSDS | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 11 | CSDS | DeepRed | Failed POV through defenses | POV | Watch | |
| 11 | CSDS | Disekt | Failed POV | POV | Watch | |
| 11 | CSDS | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 11 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 11 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 11 | DeepRed | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 11 | DeepRed | CSDS | Failed POV through defenses | POV | Watch | |
| 11 | DeepRed | Disekt | Failed POV | POV | Watch | |
| 11 | DeepRed | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 11 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 11 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 11 | ForAllSecure | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 11 | ForAllSecure | CSDS | Failed POV through defenses | POV | Watch | |
| 11 | ForAllSecure | DeepRed | Failed POV through defenses | POV | ||
| 11 | ForAllSecure | Disekt | Successful POV | POV | Analysis | Watch |
| 11 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 11 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 12 | CSDS | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 12 | CSDS | DeepRed | Failed POV through defenses | POV | ||
| 12 | CSDS | Disekt | Failed POV | POV | Watch | |
| 12 | CSDS | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 12 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 12 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 12 | DeepRed | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 12 | DeepRed | CSDS | Failed POV through defenses | POV | Watch | |
| 12 | DeepRed | Disekt | Failed POV | POV | Watch | |
| 12 | DeepRed | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 12 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 12 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 12 | ForAllSecure | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 12 | ForAllSecure | CSDS | Failed POV through defenses | POV | Watch | |
| 12 | ForAllSecure | DeepRed | Failed POV through defenses | POV | Watch | |
| 12 | ForAllSecure | Disekt | Successful POV | POV | Analysis | Watch |
| 12 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 12 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 13 | CSDS | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 13 | CSDS | DeepRed | Failed POV through defenses | POV | ||
| 13 | CSDS | Disekt | Failed POV | POV | Watch | |
| 13 | CSDS | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 13 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 13 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 13 | DeepRed | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 13 | DeepRed | CSDS | Failed POV through defenses | POV | Watch | |
| 13 | DeepRed | Disekt | Failed POV | POV | Watch | |
| 13 | DeepRed | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 13 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 13 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 13 | ForAllSecure | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 13 | ForAllSecure | CSDS | Failed POV through defenses | POV | Watch | |
| 13 | ForAllSecure | DeepRed | Failed POV through defenses | POV | ||
| 13 | ForAllSecure | Disekt | Successful POV | POV | Analysis | Watch |
| 13 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 13 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 14 | CSDS | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 14 | CSDS | DeepRed | Failed POV through defenses | POV | ||
| 14 | CSDS | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 14 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 14 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 14 | DeepRed | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 14 | DeepRed | CSDS | Failed POV through defenses | POV | Watch | |
| 14 | DeepRed | Disekt | Failed POV | POV | Watch | |
| 14 | DeepRed | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 14 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 14 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 14 | ForAllSecure | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 14 | ForAllSecure | CSDS | Failed POV through defenses | POV | Watch | |
| 14 | ForAllSecure | DeepRed | Failed POV through defenses | POV | Watch | |
| 14 | ForAllSecure | Disekt | Successful POV | POV | Analysis | Watch |
| 14 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 14 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 15 | CSDS | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 15 | CSDS | DeepRed | Failed POV through defenses | POV | ||
| 15 | CSDS | Disekt | Failed POV | POV | Watch | |
| 15 | CSDS | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 15 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 15 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 15 | DeepRed | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 15 | DeepRed | CSDS | Failed POV through defenses | POV | Watch | |
| 15 | DeepRed | Disekt | Failed POV | POV | Watch | |
| 15 | DeepRed | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 15 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 15 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 15 | ForAllSecure | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 15 | ForAllSecure | CSDS | Failed POV through defenses | POV | Watch | |
| 15 | ForAllSecure | DeepRed | Failed POV through defenses | POV | ||
| 15 | ForAllSecure | Disekt | Successful POV | POV | Analysis | Watch |
| 15 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 15 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 16 | CSDS | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 16 | CSDS | DeepRed | Failed POV through defenses | POV | ||
| 16 | CSDS | Disekt | Failed POV | POV | Watch | |
| 16 | CSDS | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 16 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 16 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 16 | DeepRed | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 16 | DeepRed | CSDS | Failed POV through defenses | POV | Watch | |
| 16 | DeepRed | Disekt | Failed POV | POV | Watch | |
| 16 | DeepRed | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 16 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 16 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 16 | ForAllSecure | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 16 | ForAllSecure | CSDS | Failed POV through defenses | POV | Watch | |
| 16 | ForAllSecure | DeepRed | Failed POV through defenses | POV | ||
| 16 | ForAllSecure | Disekt | Successful POV | POV | Analysis | Watch |
| 16 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 16 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 17 | CSDS | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 17 | CSDS | DeepRed | Failed POV through defenses | POV | ||
| 17 | CSDS | Disekt | Failed POV | POV | Watch | |
| 17 | CSDS | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 17 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 17 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 17 | DeepRed | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 17 | DeepRed | CSDS | Failed POV through defenses | POV | Watch | |
| 17 | DeepRed | Disekt | Failed POV | POV | Watch | |
| 17 | DeepRed | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 17 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 17 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 17 | ForAllSecure | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 17 | ForAllSecure | CSDS | Failed POV through defenses | POV | Watch | |
| 17 | ForAllSecure | DeepRed | Failed POV through defenses | POV | ||
| 17 | ForAllSecure | Disekt | Successful POV | POV | Analysis | Watch |
| 17 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 17 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 18 | CSDS | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 18 | CSDS | DeepRed | Failed POV through defenses | POV | Watch | |
| 18 | CSDS | Disekt | Failed POV | POV | Watch | |
| 18 | CSDS | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 18 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 18 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 18 | DeepRed | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 18 | DeepRed | CSDS | Failed POV through defenses | POV | Watch | |
| 18 | DeepRed | Disekt | Failed POV | POV | Watch | |
| 18 | DeepRed | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 18 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 18 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 18 | ForAllSecure | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 18 | ForAllSecure | CSDS | Failed POV through defenses | POV | Watch | |
| 18 | ForAllSecure | DeepRed | Failed POV through defenses | POV | ||
| 18 | ForAllSecure | Disekt | Successful POV | POV | Analysis | Watch |
| 18 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 18 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 19 | CSDS | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 19 | CSDS | DeepRed | Failed POV through defenses | POV | ||
| 19 | CSDS | Disekt | Failed POV | POV | Watch | |
| 19 | CSDS | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 19 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 19 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 19 | DeepRed | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 19 | DeepRed | CSDS | Failed POV through defenses | POV | Watch | |
| 19 | DeepRed | Disekt | Failed POV | POV | Watch | |
| 19 | DeepRed | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 19 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 19 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 19 | ForAllSecure | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 19 | ForAllSecure | CSDS | Failed POV through defenses | POV | Watch | |
| 19 | ForAllSecure | DeepRed | Failed POV through defenses | POV | ||
| 19 | ForAllSecure | Disekt | Successful POV | POV | Analysis | Watch |
| 19 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 19 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 20 | CSDS | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 20 | CSDS | DeepRed | Failed POV through defenses | POV | ||
| 20 | CSDS | Disekt | Failed POV | POV | Watch | |
| 20 | CSDS | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 20 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 20 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 20 | DeepRed | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 20 | DeepRed | CSDS | Failed POV through defenses | POV | Watch | |
| 20 | DeepRed | Disekt | Failed POV | POV | Watch | |
| 20 | DeepRed | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 20 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 20 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 20 | ForAllSecure | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 20 | ForAllSecure | CSDS | Failed POV through defenses | POV | Watch | |
| 20 | ForAllSecure | DeepRed | Failed POV through defenses | POV | Watch | |
| 20 | ForAllSecure | Disekt | Successful POV | POV | Analysis | Watch |
| 20 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 20 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 21 | CSDS | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 21 | CSDS | DeepRed | Failed POV through defenses | POV | ||
| 21 | CSDS | Disekt | Failed POV | POV | Watch | |
| 21 | CSDS | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 21 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 21 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 21 | DeepRed | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 21 | DeepRed | CSDS | Failed POV through defenses | POV | Watch | |
| 21 | DeepRed | Disekt | Failed POV | POV | Watch | |
| 21 | DeepRed | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 21 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 21 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 21 | ForAllSecure | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 21 | ForAllSecure | CSDS | Failed POV through defenses | POV | Watch | |
| 21 | ForAllSecure | DeepRed | Failed POV through defenses | POV | ||
| 21 | ForAllSecure | Disekt | Successful POV | POV | Analysis | Watch |
| 21 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 21 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 22 | CSDS | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 22 | CSDS | DeepRed | Failed POV through defenses | POV | ||
| 22 | CSDS | Disekt | Failed POV | POV | Watch | |
| 22 | CSDS | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 22 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 22 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 22 | DeepRed | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 22 | DeepRed | CSDS | Failed POV through defenses | POV | Watch | |
| 22 | DeepRed | Disekt | Failed POV | POV | Watch | |
| 22 | DeepRed | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 22 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 22 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 22 | ForAllSecure | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 22 | ForAllSecure | CSDS | Failed POV through defenses | POV | Watch | |
| 22 | ForAllSecure | DeepRed | Failed POV through defenses | POV | Watch | |
| 22 | ForAllSecure | Disekt | Successful POV | POV | Analysis | Watch |
| 22 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 22 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 23 | CSDS | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 23 | CSDS | DeepRed | Failed POV through defenses | POV | ||
| 23 | CSDS | Disekt | Failed POV | POV | Watch | |
| 23 | CSDS | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 23 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 23 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 23 | DeepRed | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 23 | DeepRed | CSDS | Failed POV through defenses | POV | Watch | |
| 23 | DeepRed | Disekt | Failed POV | POV | Watch | |
| 23 | DeepRed | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 23 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 23 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 23 | ForAllSecure | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 23 | ForAllSecure | CSDS | Failed POV through defenses | POV | Watch | |
| 23 | ForAllSecure | DeepRed | Failed POV through defenses | POV | ||
| 23 | ForAllSecure | Disekt | Successful POV | POV | Analysis | Watch |
| 23 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 23 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 24 | CSDS | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 24 | CSDS | DeepRed | Failed POV through defenses | POV | ||
| 24 | CSDS | Disekt | Failed POV | POV | Watch | |
| 24 | CSDS | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 24 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 24 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 24 | DeepRed | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 24 | DeepRed | CSDS | Failed POV through defenses | POV | Watch | |
| 24 | DeepRed | Disekt | Failed POV | POV | Watch | |
| 24 | DeepRed | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 24 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 24 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 24 | ForAllSecure | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 24 | ForAllSecure | CSDS | Failed POV through defenses | POV | Watch | |
| 24 | ForAllSecure | DeepRed | Failed POV through defenses | POV | ||
| 24 | ForAllSecure | Disekt | Successful POV | POV | Analysis | Watch |
| 24 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 24 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch |
Curated by Lunge Technology, LLC. Questions or comments? Send us email