The tale of a bleeding heart

Heartbleed is a vulnerability in OPENSSL cryptography that was introduced in 2012 and publicly disclosed in 2014. It is a buffer over-read vulnerability, which is when more data can be read than is allowed.

In this recipe, we will learn how to exploit heartbleed via using metasploit's auxiliary module.

How to do it...

Let's perform the following steps:

1. We start msfconsole by typing this:

msfconsole  

The output of the preceding command is shown in the following screenshot:

2. Search for the heartbleed auxiliary using the following command:

search heartbleed  

The output of the preceding command is shown in the following screenshot:

3. Use auxiliary with the following command:

use auxiliary...