/Heartbleed

A checker (site and tool) for CVE-2014-0160
  1. Go 98.2%
  2. Python 1.5%
  3. Other 0.3%
Go Python Other
Clone or download

Clone with HTTPS

Use Git or checkout with SVN using the web URL.

Download ZIP
Find file
Switch branches/tags
Nothing to show
Latest commit 4a3332c Apr 7, 2015 @FiloSottile FiloSottile server: fix leak by adding http.Server.ReadTimeout
Permalink
Failed to load latest commit information.
deploy deploy: turn the server in a decent box Apr 8, 2015
heartbleed do a general refresh, now that I actually know some Go Apr 7, 2015
logger do a general refresh, now that I actually know some Go Apr 7, 2015
server server: fix leak by adding http.Server.ReadTimeout Apr 8, 2015
.gitignore do a general refresh, now that I actually know some Go Apr 7, 2015
LICENSE do a general refresh, now that I actually know some Go Apr 7, 2015
README.md do a general refresh, now that I actually know some Go Apr 7, 2015
main.go do a general refresh, now that I actually know some Go Apr 7, 2015

README.md

Heartbleed

A checker (site and tool) for CVE-2014-0160.

Public site at https://filippo.io/Heartbleed/

Tool usage:

    Heartbleed [-service="service_name"] example.com[:443]
    Heartbleed service_name://example.com[:443]

Exit codes: 0 - SAFE; 1 - VULNERABLE; 2 - ERROR. (recently changed)

See the online FAQ for an explanation of error messages including TIMEOUT and BROKEN PIPE.

If a service name is specified besides https, the tool checks the specified service using STARTTLS. You do still need to specify the correct port.

Install

You will need Go >= 1.2, otherwise you'll get undefined: cipher.AEAD and other errors

go get github.com/FiloSottile/Heartbleed

You can also use Docker to get a ready to run virtual machine with Heartbleed: https://github.com/kasimon/docker-heartbleed