Nmap has a Heartbleed script that does a great job of detecting vulnerable servers. The script is available on the OpenSSL-Heartbleed nmap script page:
http://nmap.org/nsedoc/scripts/ssl-heartbleed.html
https://svn.nmap.org/nmap/scripts/ssl-heartbleed.nse
In the Windows operating system, by default, scripts are located in the C:\Program Files (x86)\Nmap\scripts path.
In Linux operating system, by default, scripts are located in the /usr/share/nmap/scripts/ path.
nmap -p 443 —script ssl-heartbleed [IP Address]
All we need to do is use the Heartbleed script and add in the IP address of our target site. If the target we are analyzing is vulnerable, we will see this:
