bleedcheck.sh

#!/bin/bash

# check for heartbleed.com vuln
# quick, dirty, grain of salt, etc

declare -a hosts=('api.example.com' 'www.google.com')

for host in "${hosts[@]}";
do
  echo "Testing $host ..."
  echo -e "quit\n" | openssl s_client -connect $host:443 -tlsextdebug 2>&1| [ "` grep -c 'TLS server extension \"heartbeat\" (id=15), len=1'`" -gt 0 ] && echo 'Vulnerable' || echo 'Not vulnerable'
done