titanous/heartbleeder — pull request #16 by CrackerJackMack (2014-04-09 05:41:48+00:00)
Title: Made an HTTP constant monitor

Now accepts a file with a newline seperated list of hosts in multiple formats (domain:port, ip:port, [ip]:port, ip, [ip], domain). Startsup HTTP server on port :5779 and displays the status of the hosts.

Made this so I can patch up a crap load of servers and make sure my automation scripts work. I suck at HTML things so I'm sure there is a 100% better way to do this. The continuous monitoring could us more work as well such as sorting the different states into priority queues and feeding those on different timers into the main work queue.

Happy to accept pull requests onto my branch as well prior to merging if anyone has some input for me.

New feature usage (and backwards compatibility):
```
$ ./heartbleeder www.crackerjackmack.com
2014/04/09 00:41:16 VULNERABLE - www.crackerjackmack.com:443 has the heartbeat extension enabled and is vulnerable to CVE-2014-0160
2014/04/09 00:41:16
$ cat hosts
www.crackerjackmack.com
www.reddit.com
$ ./heartbleeder -f hosts
2014/04/09 00:40:02 Failed () lookup : no such host
2014/04/09 00:40:02 Error connecting to [2600:3c00::f03c:91ff:fe69:6a08]:443: dial tcp [2600:3c00::f03c:91ff:fe69:6a08]:443: network is unreachable
2014/04/09 00:40:02 dial tcp [2600:3c00::f03c:91ff:fe69:6a08]:443: network is unreachable
2014/04/09 00:40:02 Error connecting to [2a01:7e00::f03c:91ff:fedb:78fc]:443: dial tcp [2a01:7e00::f03c:91ff:fedb:78fc]:443: network is unreachable
2014/04/09 00:40:02 dial tcp [2a01:7e00::f03c:91ff:fedb:78fc]:443: network is unreachable
2014/04/09 00:40:02 SECURE - 216.206.30.9:443 does not have the heartbeat extension enabled
2014/04/09 00:40:02 tls: server does not accept heartbeats
2014/04/09 00:40:02 SECURE - 216.206.30.41:443 does not have the heartbeat extension enabled
2014/04/09 00:40:02 tls: server does not accept heartbeats
2014/04/09 00:40:02 VULNERABLE - 198.58.112.43:443 has the heartbeat extension enabled and is vulnerable to CVE-2014-0160
2014/04/09 00:40:03 VULNERABLE - 212.71.255.168:443 has the heartbeat extension enabled and is vulnerable to CVE-2014-0160
```

![](http://i.imgur.com/0srGi4u.png)