root@localhost:~# nmap -p 443 --script ssl-heartbleed www.scrooge-and-marley.com
Starting Nmap 6.47 ( http://nmap.org ) at 2014-12-19 19:04 UTC
Nmap scan report for www.scrooge-and-marley.com (23.239.15.124)
Host is up (0.032s latency).
rDNS record for 23.239.15.124: li723-124.members.linode.com
PORT    STATE SERVICE
443/tcp open  https
| ssl-heartbleed:
|   VULNERABLE:
|   The Heartbleed Bug is a serious vulnerability in the popular OpenSSL cryptographic software library. It allows for stealing information intended to be protected by SSL/TLS encryption.
|     State: VULNERABLE
|     Risk factor: High
|     Description:
|       OpenSSL versions 1.0.1 and 1.0.2-beta releases (including 1.0.1f and 1.0.2-beta1) of OpenSSL are affected by the Heartbleed bug. The bug allows for reading memory of systems protected by the vulnerable OpenSSL versions and could allow for disclosure of otherwise encrypted confidential information as well as the encryption keys themselves.
|
|     References:
|       http://cvedetails.com/cve/2014-0160/
|       http://www.openssl.org/news/secadv_20140407.txt
|_      https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0160

Nmap done: 1 IP address (1 host up) scanned in 1.72 seconds


root@localhost:~#
X-Requested-With: XMLHttpRequest
Referer: http://chat.scrooge-and-marley.com/
Cookie: PHPSESSID=mhibb8bjouseb9h7ejh4iumjb0
Connection: keep-alive
HTTP/1.1 200 OK
Date: Mon, 25 Dec 2034 18:59:41 GMT