RE: [NSE] SSL Heartbleed

[Andrew Klaus <andrewklaus () gmail com>]

So, I don't think the nmap heartbleed detection script doesn't always work,
and I'm not sure why.

There are hosts I know about that it does detect, but this one it doesn't...

nmap -p 443 --script ssl-heartbleed cloudflarechallenge.com
Nmap scan report for cloudflarechallenge.com (107.170.194.215)
Host is up (0.095s latency).
PORT    STATE SERVICE
443/tcp open  https

Nmap done: 1 IP address (1 host up) scanned in 18.19 seconds


If I use the python detection script, it pulls back 64k of memory..  So I
know the site is affected by it.

Any ideas?

Thanks
_______________________________________________
Sent through the dev mailing list
http://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/