I am trying to detect if a server is vulnerable to heartbleed. To do this, only idea i have is to actually send a heartbeat packet having length field and actual payload having different length.
But since it is a specially crafted packet firewalls and softwares block this request.
Is there any other way to check for the heartbleed (OR openssl version)? As far as i know, openssl version is not sent by the server in any hello case.