Exploit for CVE-2014-0160-Chrome-Plugin

kitploit · 2026-08-25

Description

Deprecated Chrome plugin that checks if a site and subdomains are vulnerable to Heartbleed via API.

Affected Openssl versions

Openssl< 1.0.1g

All known vulnerabilities by product

Alt Linux Centos Huawei Vrp Openssl Opera Red Hat Suse

CVSS 7.5 for CVE-2014-0160

7.5

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:NONE

Availability:NONE

CVE Information

References

https://gist.github.com/Xyl2k/f2bbc5fb6304ebf47d86

Exploit Details

Modified:2026-08-25 04:29

Last Seen:2026-08-26 08:06

Reporter:KitPloit

Tags

Heartbleed Chrome PluginCVE-2014-0160Chrome extensiondeprecatedsubdomain check

Other exploits for CVE-2014-0160

2026-08-27 KitPloitKITPLOIT

ssl-heartbleed.nse

2026-08-27 KitPloitKITPLOIT

CVE-2014-0160-Scanner

2026-08-27 KitPloitKITPLOIT

heartbleedscanner

2026-08-27 KitPloitKITPLOIT

2026-08-27 KitPloitKITPLOIT

2026-08-27 KitPloitKITPLOIT

heartbleed-dtls

2026-08-27 KitPloitKITPLOIT

vaas-cve-2014-0160

2026-08-27 KitPloitKITPLOIT

Exploit Code

MARKDOWN9 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-MRE-FOG-CVE-2014-0160-CHROME-PLUGIN
# Heartbleed chrome plugin _DESCONTINUADO_

![2016-02-16_16-52-07](https://assets.kitploit.com/production/public/readmes/38122/4aeaef011b3127c1e28556a6589e1de4825cf94af4e9263932e30fb22df52343.jpg)

Plugin do Chrome que verifica se o site atual (e todos os subdomínios chamados) são vulneráveis ao CVE-2014-0160.  
A verificação de vulnerabilidade é feita por um serviço de API que agora está morto (não estava em 2014!).  
Talvez o código possa ser útil para alguém de qualquer forma, se alguém encontrar um novo provedor de API para a verificação do Heartbleed.  
Veja também, o CVE-2014-0160 spl0it editado.