Many people have commented on the legality of using this software. I didn't think it needed pointing out that using this on servers you do not own is strictly

Many people have commented on the legality of using this software. I didn't think it needed pointing out that using this on servers you do not own is strictly against the law. My only reasons for writing this is to show exactly what can be done with the vulnerability and how scary it really is. Many people have a vague understanding of how bad it is to lose a private key that is used to sign SSL traffic, but showing that one is able to hijack sessions en masse makes this vulnerability much easier to wrap our heads around. Don't be idiots out there.