The quickest way to detect if your site, organizations sites or just sites you use are vulnerable to the heartbleed bug you can use one of the following:
mcafee: http://tif.mcafee.com/heartbleedtesthttp://www.f-secure.com/en/web/home_us/key?ecid=5856
Another way to check is to used nmap. Â .
Requirements:
-nmap -or-zenmap-authorization to scan*-ssl-heartbleed.nse (http://nmap.org/nsedoc/scripts/ssl-heartbleed.html) -tls.lua (https://svn.nmap.org/nmap/nselib/tls.lua)
Step 1. Â Install nmap/zenmap
For Windows NT – 2K8
Latest release self-installer: nmap-6.40-setup.exe
Latest command-line zipfile: nmap-6.40-win32.zip
*ridiculously Windows Install instructions:Â http://nmap.org/book/inst-
Step 2. Install nmap heartbleed script & tls.lua
Download the file tls.lua (https://svn.nmap.org/nmap/
Move the tls.lua file to the nmap directory
download the file ssl-heartbleed.nse (http://nmap.org/nsedoc/
Move the file to nmap scripts folder
Step 3. Run the Command
nmap -sV –script=ssl-heartbleed <target>
Other SSL Testers
qualys overall ssl status:Â https://www.ssllabs.com/ssltest/
Android SSL testers:
Bluebox heartbleed scanner:Â https://play.google.com/store/apps/details?id=com.bblabs.heartbleedscanner
Heartbleed detector:Â https://play.google.com/store/apps/details?id=com.lookout.heartbleeddetector
Ready to actually get the RMF/ISSO job?
Go from reading about the Risk Management Framework to doing it — with the full video course, the books, and a community of GRC professionals taught by Bruce Brown (CISSP, CGRC).
Get the RMF ISSO Foundations course → Browse the RMF & GRC books Join the free GRC community
Leave a Reply