musalbas / heartbleed-masstest Goto Github PK

python --version
Python 2.7.3

Traceback (most recent call last):
File "ssltest.py", line 176, in
main()
File "ssltest.py", line 167, in main
if int(rank) >= int(args[1]):
IndexError: list index out of range

This repo does not have a license. Can you please add one?
GPL-v2 is good for humanity :-D

the script should modify it's heartbeat request packet to match the server's version, otherwise the server will anser with an 'protocol_version' alertpacket.

in that case the script will not actually have checked for the heartbleed bug.

python3 --version
Python 3.2.3
python3 ssltest.py
File "ssltest.py", line 65
except Exception, e:
^

Our server engineers here at Fool.com have pulled this script and set it up on systems external to our network (along with other testing scripts as well) and we have confirmed that we are no longer vulnerable...Please update this list accordingly, thank you!

Just because the main domain is safe does not mean the domain they use for their logins/secure area is safe.

For example Stackoverflow is not built on top of OpenSSL: http://meta.stackoverflow.com/questions/10369/which-tools-and-technologies-are-used-to-build-the-stack-exchange-network

Hi,

your test only runs again SLDs, on which we for example (immobilienscout24.de) don't have SSL running. Our www.immobilienscout24.de is capable of SSL (and not vulnerable). I guess there are quite a few other domains which also are listed as "no SSL", but do have SSL enabled on subdomains.

it need to be updated to python3