HEA...DER(1)

💖 HEA...DER(1) 💖

okay bestie, so this is heartbleeder, a manual page from the test servers for OpenSSL CVE-2014-0160 aka Heartbleed zone. buckle up, it's giving security nerd excellence ✨

🌸 NAME 🌸

heartbleeder — Test servers for OpenSSL CVE-2014-0160, aka Heartbleed 🩸💔

🎀 SYNOPSIS 🎀

heartbleeder [options] host[:443]

✨ DESCRIPTION ✨

so like, heartbleeder is this tool that tests remotely (over a network, not like, sneaking into the server room) whether a system is compromised by an insecure OpenSSL service — in accordance with CVE-2014-0160, aka Heartbleed. no cap, this bug was A LOT. 😭

want the tea on the Heartbleed Bug? it's all at http://heartbleed.com 🌐

💅 OPTIONS 💅

• -hostfile="" — path to a newline separated file with hosts or IPs. like a lil guest list but for servers 📝
• -listen="localhost:5000" — address to serve the HTTP dashboard from. your main character stage 🎭
• -pg=false — check PostgreSQL TLS. > warning bestie: this option is incompatible with -hostfile, they cannot both be on the invite list 💀
• -refresh=10m0s — seconds to wait before rechecking secure hosts. patience is a virtue ig ⏳
• -retry=10s — seconds to wait before retesting a host after an unfavorable response. giving them a lil glow-up moment before round two 🙈
• -timeout=5s — timeout after sending heartbeat. if it doesn't answer in time, we're moving on 💔
• -workers=40 — number of workers to scan hosts with, only used with the hostfile flag. a whole squad, fr fr 👑

🦋 NOTES 🦋

you can monitor multiple hosts by setting the '-hostfile' flag to a file with newline separated addresses. and a web dashboard will be available at 'http://localhost:5000' by default. iconic. 👑

Postgres uses OpenSSL in a slightly different way. so to test whether a Postgres server is vulnerable, run the following (defaults to port 5432). Example, bestie:

$ heartbleeder -pg example.com.br

🚨 WARNING 🚨

No guarantees are made about the accuracy of results, and you should verify them independently by checking your OpenSSL build. do NOT just trust the vibes on this one, fr fr. go double-check your own build, periodt. 💀

👑 AUTHOR 👑

heartbleeder was written by Jonathan Rudenberg <jonathan@titanous.com>. The TLS implementation was borrowed from the Go standard library. This manual page was written by Joao Eriberto Mota Filho <eriberto@eriberto.pro.br> for the Debian project (but may be used by others). The heartbleeder help page was the source. shoutout to the whole team honestly 🫶

and that's the whole page bestie, brought to you by HEARTBLEEDER 🌈, version Apr 2014 — yes she's an old queen but she ATE 🎀💖✨