diff --git a/core/main/server.rb b/core/main/server.rb index b4530ad07..e82c9dc4a 100644 --- a/core/main/server.rb +++ b/core/main/server.rb @@ -108,6 +108,11 @@ module BeEF @rack_app) if @configuration.get('beef.http.https.enable') == true + openssl_version = OpenSSL::OPENSSL_VERSION + if openssl_version =~ / 1\.0\.1([a-f])/ + print_error "Warning: #{openssl_version} is vulnerable to Heartbleed (CVE-2014-0160)." + print_more "Upgrade OpenSSL to version 1.0.1g or newer." + end @http_server.ssl = true @http_server.ssl_options = {:private_key_file => $root_dir + "/" + @configuration.get('beef.http.https.key'), :cert_chain_file => $root_dir + "/" + @configuration.get('beef.http.https.cert'),