Check for known TLS/SSL vulnerabilities (BEAST, POODLE, Heartbleed).
The BEAST / POODLE / Heartbleed Scanner probes a server for several well-known TLS and SSL vulnerabilities. It checks whether the server is susceptible to BEAST (TLS 1.0 CBC issue), POODLE (SSLv3 fallback), Heartbleed (OpenSSL heartbeat read-overrun), and optionally other issues. Use it to quickly verify that legacy vulnerabilities are patched and that SSLv3 and weak protocols are disabled. This is not a full replacement for comprehensive scans (e.g. SSL Labs) but gives a fast, focused check for these high-profile issues.
OpenSSL bug allowing reading of server memory; patch OpenSSL and rotate certs and secrets if affected.
Attack on SSLv3 CBC; disable SSLv3 and avoid SSLv3 fallback to mitigate.
Attack on TLS 1.0 CBC; mitigate by using TLS 1.2+ and modern ciphers; disabling 1.0 removes the risk.
No. It checks specific issues; use SSL Labs or similar for a full TLS configuration review.
Update software, disable weak protocols and ciphers, rotate certificates and any exposed secrets.