first post here so be gentle please!
I understand the Heartbleed vulnerability concept, and I have a general grasp of Python. I'm struggling to understand the PoC Python code though, so was after a bit of code dissection :)
Particularly the two sections where it defines the 'hello' and'hb' message? I watched the messages going across the wire in Wireshark and can clearly see the hex going back and forth. Then comparing this to a normal SSL connection it's fairly similar.
So I'm guessing the content of that hex is setting up the SSL connection and heartbeat request? But can anyone explain the hex involved, or more specifically what this is derived from?
I've seen the RFC that defines the heartbleed extension, but for some reason I can't translate that into how this hex has been derived. Am I being stupid or just missing something?!