How to test if your server is vulnerable to Heartbleed exploit

If you heard of the “heartbleed” vulnerability and are interested in testing your servers, here are a few websites that may come in handy: Heartbleed test - Simple and works. LastPass Heartbleed checker - also simple but I found that it was giving me some false positives. Qualys SSL Labs SSL Server Test - this is serious shit, deep analysis of much more than just the heartbleed vulnerability. Good stuff! OpenSSL TLS Heartbeat Extension - Memory Disclosure - the actual exploit that you can use yourself to test if your servers are vulnerable. »

Author image Raúl Santos