Re: OpenSSL Heartbleed bug, Apache still vulnerable?

[shawn wilson <ag4ve.us@gmail.com>]

On Apr 9, 2014 3:51 PM, "Sven Hartge" <sven@svenhartge.de> wrote:
>
> Curt <curty@free.fr> wrote:
> > On 2014-04-09, Jochen Spieker <ml@well-adjusted.de> wrote:
>
> >> The repository now contains a fixed version (0.9.4.2-r413). I tested it
> >> and the new version looks fine.
>
> > Don't mean to hijack, but is this a useful tool?
>
> > http://filippo.io/Heartbleed/
>
> To scan your complete network in mere seconds:
>
> https://github.com/robertdavidgraham/masscan
> http://blog.erratasec.com/2014/04/using-masscan-to-scan-for-heartbleed.html
>

There's also ssl-heartbleed.nse which (even though its not threaded) is probably a bit faster (not to mention has a familiar interface). It also looks like they cleaned some stuff up in the port.