Hack Like a Pro: How to Scan the Internet for Heartbleed Vulnerabilities « Null Byte :: WonderHowTo

Welcome back, my budding hackers!Recently, I showed youhow you could exploitthe widely disseminated OpenSSL vulnerability that has to become known as "Heartbleed". Although the world has known about this vulnerability for over a month now, it will likely take many more months—or even years—for everyone to close this vulnerability.Last week, Errata Security scanned the Web on port 443 looking for servers still affected by Heartbleed, and foundover 300,000+ serverspossibly still vulnerable, as compared to the600,000+from a month ago. If history is any judge, some websites will likely never patch this vulnerability. If that is the case, we can keep using this exploit for some time to come.In this tutorial, I will show you how to test a website/IP address to determine whether the Heartbleed vulnerability is available to you.Step 1: Open Kali & NmapThe first step is fire up Kali and get an nmap prompt. Fortunately, nmap is in our PATH variable and we can run it from any command prompt. The folks at insecure.org (Fyodor and friends) developed a script that scans a website to determine whether it is vulnerable to the OpenSSL vulnerability. That is what we will be using here.Step 2: Download Heartbleed ScannerWithKaliopen, we first need to download and install the Heartbleed scanner script fornmap. You can find ithere. Download and save it to the directory/usr/share/nmap/scripts.Of course, you can just copy and paste it into the Leafpad text editor in Kali (or any text editor) to the same location.Image viawonderhowto.comStep 3: Download & Install the Library FileThe nmap Heartbleed scanner requires a special library file to be effective. That file istls.lua. Download ithereor copy it tousr/share/nmap/nselib.Step 4: Run It Against WebsitesWith the Heartbleed script and the tls.lua library in place, we now are ready to begin hunting for vulnerable websites. The syntax for running this script is:nmap -sV --script=ssl-heartbleed 192.168.89.186Remember, I'm running it against a web server in my lab on my LAN here. When running against web servers on the Internet, simply replace my private IP with the public IP of the web server.Image viawonderhowto.comIf the website is vulnerable to the Heartbleed attack, it should get results similar that below.Image viawonderhowto.comAs most web administrators are slow to patch vulnerabilities, many web servers are still vulnerable to the Heartbleed attack. You can use this tool to find those servers and then use the Heartbleed exploit to extract critical information from the memory of the server, if it is vulnerable.Want to start making money as a white hat hacker?Jump-start your hacking career with our2020 Premium Ethical Hacking Certification Training Bundlefrom the newNull Byte Shopand get over 60 hours of training from cybersecurity professionals.Buy Now (90% off) >Other worthwhile deals to check out:97% off The Ultimate 2021 White Hat Hacker Certification Bundle99% off The 2021 All-in-One Data Scientist Mega Bundle98% off The 2021 Premium Learn To Code Certification Bundle62% off MindMaster Mind Mapping Software: Perpetual LicenseHeartbleedimage via ShutterstockRelatedHeartbleed Still Lingers:How to Check Your Android Device for VulnerabilitiesHack Like a Pro:Hacking the Heartbleed VulnerabilityHack Like a Pro:Using Nexpose to Scan for Network & System VulnerabilitiesHack Like a Pro:How to Scan for Vulnerabilities with NessusNews:How to Study for the White Hat Hacker Associate Certification (CWA)Hack Like a Pro:Linux Basics for the Aspiring Hacker, Part 18 (Scheduling Jobs)Hack Like a Pro:How to Find Website Vulnerabilities Using WiktoHack Like a Pro:Using the Nmap Scripting Engine (NSE) for ReconnaissanceBest Android Antivirus:Avast vs. AVG vs. Kaspersky vs. McAfeeHack Like a Pro:How to Hack Web Apps, Part 1 (Getting Started)Android for Hackers:How to Scan Websites for Vulnerabilities Using an Android Phone Without RootHow To:The Five Phases of HackingHow To:Scan for Vulnerabilities on Any Website Using NiktoHow To:Anti-Virus in Kali LinuxNews:The 5 Best Apps for Scanning Text & Documents on AndroidHow To:Perform a Large-Scale Network Security Audit with OpenVAS's GSAHack Like a Pro:Metasploit for the Aspiring Hacker, Part 10 (Finding Deleted Webpages)How To:Use NMAP 7 to Discover Vulnerabilities, Launch DoS Attacks and More!How To:Drop Everything! Here's How to Secure Your Data After Heartbleed: The Worst Web Security Flaw EverHow To:Discover Computers Vulnerable to EternalBlue & EternalRomance Zero-DaysHow to Hack Like a Pro:Hacking Windows Vista by Exploiting SMB2 VulnerabilitiesHack Like a Pro:Reconnaissance with Recon-Ng, Part 1 (Getting Started)How To:Probe Websites for Vulnerabilities More Easily with the TIDoS FrameworkHow To:Use Metasploit's WMAP Module to Scan Web Applications for Common VulnerabilitiesNews:Scandy Gives Tango Owners a Taste of 3D ScanningHack Like a Pro:Hacking Windows XP Through Windows 8 Using Adobe Flash PlayerHack Like a Pro:How to Scan the Globe for Vulnerable Ports & ServicesHow To:Hack WPA WiFi Passwords by Cracking the WPS PINHack Like a Pro:How to Hack Web Apps, Part 5 (Finding Vulnerable WordPress Websites)How To:13 QR Code Scanners That Won't Send You to Malicious Webpages on Your iPhoneHow To:Conduct Recon on a Web Target with Python ToolsHow To:Scan Websites for Vulnerabilities with ArachniHack Like a Pro:How to Find the Latest Exploits and Vulnerabilities—Directly from MicrosoftHow To:Spider Web Pages with Nmap for SQLi VulnerabilitiesHow To:How Hackers Use Your IP Address to Hack Your Computer & How to Stop ItHacking Reconnaissance:Finding Vulnerabilities in Your Target Using NmapCamera Plus Pro:The iPhone Camera App That Does it All