September 2018
Intermediate to advanced
426 pages
10h 46m
English
Content preview from Mastering Python for Networking and Security
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
Start your free trial
Scanning for Heartbleed with the nmap port scanner
Nmap has a Heartbleed script that does a great job of detecting vulnerable servers. The script is available on the OpenSSL-Heartbleed nmap script page:
http://nmap.org/nsedoc/scripts/ssl-heartbleed.html
https://svn.nmap.org/nmap/scripts/ssl-heartbleed.nse
In the Windows operating system, by default, scripts are located in the C:\Program Files (x86)\Nmap\scripts path.
In Linux operating system, by default, scripts are located in the /usr/share/nmap/scripts/ path.
nmap -p 443 —script ssl-heartbleed [IP Address]
All we need to do is use the Heartbleed script and add in the IP address of our target site. If the target we are analyzing is vulnerable, we will see this: