I totally understand the desire to tweak the IDS vendors. Having spent a lot of time working for vendors in that space, they often need tweaking.

But I don't get the leap from "IDS vendors suck" to "I made a command-line tool so any idiot can suck down private keys from a server." If the idea was to show that the IDS rules sucked, then just release a slightly different version of the previous heartbleed testers that gets around it.

But that's not as much fun.