Heartbleed

Heartbleed copied to clipboard

Several attempts at trying to test a site, still no response

1

I've been trying to test https://seap.asee.org/award to see if it is susceptible. The website doesn't seem to be working however. Each time I hit go, the progress bar at the...

RobRoseKnows

tls: server selected unsupported protocol version 300

1

When testing domain brandyourself.com I get the following error: tls: server selected unsupported protocol version 300 The site only works with TLS v1.0

Wiggum127

dail tcp i/o timeout error

1

Hi all, Getting error while testing heartbleed bug ??? here is the error: dial tcp https://xxx.xxx.xx.x i/o timeout dial tcp https://xxx.xxx.xx.x:443 i/o timeout dial tcp xxx.xxx.xx.x:443 i/o timeout Tried different...

ghost

multiple Read calls return no data or error

1

I'm getting a yellow (warning?) with the message "multiple Read calls return no data or error" when testing on my servers. This error is not mentioned anywhere and I haven't...

fnmartinez

broken pipe?

6

testing dashlane.com = write tcp 213.186.33.5:443: broken pipe

manbartlett

Broken pipe output shows for a website which doesn't accept Heartbit

3

Hi Fillipo, Your program gives following output for this website. $$ > bin/Heartbleed myprint-online.com:443 2014/04/11 23:36:42 myprint-online.com:443 - ERROR: write tcp 70.91.223.11:443: broken pipe Whereas when i send the heartbit...

ankit249

-service or -starttls

1

some commens say the options is -starttls, but the script says # ./Heartbleed -starttls imap 192.168.0.10:993 flag provided but not defined: -starttls Usage of ./Heartbleed: -service="https": Specify a service name...

sejtam

False positives

45

Thanks for a very useful tool :D However, we've had some issues using it whereby the website would produce false positives (ie, consider that a server was vulnerable when it...

robredpath

smtp does not work on office365

4

Heartbleed -service=smtp smtp.office365.com:587 2014/04/11 10:17:51 smtp.office365.com:587 - ERROR: Server does not support STARTTLS (503 5.5.2 Send hello first)

torstenwerner

Display issue date of SSL certificate on server

2

Should help identify sites which have updated OpenSSL but not created a new certificate.

fraserhess