I am working on a Heartbleed example exploit. I was able to set the server up with an older version of Apache and OpenSSL and the server is infact vulnerable. However, when leaking the information, the only information that's being returned is the HTTP headers. Is there something I can do on the server to allow it to leak more interesting information? I have tried to put interesting information in the request headers but these aren't leaked. This server currently just serves a static index file.