ubernycmarketplace.com is vulnerable to the Heartbleed Bug

Summary

The Heartbleed Bug was a serious vulnerability in the popular OpenSSL cryptographic software library. This weakness allows stealing the information protected, under normal conditions, by the SSL/TLS encryption used to secure the Internet. This allows attackers to eavesdrop on communications, steal data directly from the services and users and to impersonate services and users.

Thanks again @healdb!

This was my first bug bounty submission to the Uber program and one of my first bug bounty submissions overall. Thanks Uber for disclosing this!

The following python script was used in creating a POC: https://github.com/mpgn/heartbleed-PoC

And be sure to check out my blog https://healdb.tech/blog/ or my twitter https://twitter.com/heald_ben for Bug Bounty tips and guides!