Tools to check and exploit Heartbleed(CVE-2014-0160)

Tools to check and exploit Heartbleed(CVE-2014-0160)

A flaw in the popular OpenSSL software has left millions of people vulnerable to having their banking recommendation, tax files, emails, and auxiliary online data exposed. And there's no habit to know if someone has accessed your information.Heartbleed, the bug is actually a sickness in OpenSSL's cryptographic software that makes SSL/TLS encryption backfire upon computer users. The https protocol that is supposed to identify a safe website is actually a signal to hackers that the site is vulnerable to cyber attack. The hackers can after that trick a computer's server into sending data stored in its memory.

Below are the list of the tools to check and exploit Heartbleed (CVE-2014-0160).

Online OpenSSL Heartbleed Vulnerability Scanner:

1. https://pentest-tools.com/vulnerability-scanning/openssl-heartbleed-scanner
2. https://filippo.io/Heartbleed/
3. https://www.ssllabs.com/ssltest/index.html
4. https://sslanalyzer.comodoca.com/heartbleed.html
5. https://www.ssllabs.com/ssltest/
6. https://lastpass.com/heartbleed/
7. http://tif.mcafee.com/heartbleedtest
8. http://safeweb.norton.com/heartbleed
9. http://heartbleed-checker.online-domain-tools.com/
10. https://reverseheartbleed.com/
11. http://possible.lv/tools/hb/

CrowdStrike Heartbleed Scanner built by  Robin Keir, CrowdStrike community tool developer extraordinaire. With this tool, you can now easily scan your Intranet SSL websites, OpenSSL VPNs, Secure FTP servers, Databases, Secure SMTP/POP/IMAP email servers, routers, printers, phones, and all else that may have been compiled along in the midst of OpenSSL 1.0.1-1.0.1f. In assistant to the be in to perform the list of vulnerable servers, the scanner also outputs the contents of the the 64kb of memory that a vulnerable server returns make known to the heartbeat SSL demand allowing you to see the extent of the impact of this vulnerability concerning your devices and facilities.

Bleed Out Heartbleed Command Line Tool
Bleed Out is a command origin tool written in C# for targeting instances of OpenSSL made vulnerable by the prolific "Heartbleed" bug. The tool aggressively exploits the OpenSSL vulnerability, dumping both ASCII and binary data to files. It furthermore checks the uniqueness of each chunk by now persisting it, to ensure that duplicate chunks are not saved.

Command-line Arguments
-h {host}
Required. The host to exploit.

-p {port}
The port to connect to. Default: 443.

-t {threads}
The number of threads to use. Default: 1.

-a {file}
The file to dump ASCII strings to. Default: {host}_{port}.txt.

-b {file}
The file to dump binary data to. Default: {host}_{port}.bin.

-r {retry count}
The number of times to retry the exploitability test.

-s {sleep time}
The amount of time in milliseconds to sleep between exploitability test attempts.