rapid7/metasploit-framework — pull request #3273 by abes975 (2014-04-17 17:50:49+00:00)
Title: Heartbleed

- Added all suported cipher suite as stated on iana web site
https://www.iana.org/assignments/tls-parameters/tls-parameters.xhtml#tls-parameters-4
in order to reduce false negatives and have the opportunity to test more server for the vulnerability (cipher suite are ordered by numerical ID)
- Added a loop in order to read all memory leaked when the responses from the server comes in different chunks. (maybe it it possible to use also sock.get instead...)
- Added another test to have certainty of true positive (it's not enough that server send back data, but those data has to be more than the amount we really sent with in the malformed packet), in order to to this function heartbeat has to return also the "effective" length of the payload (currently is 3 bytes)