So you've not bothered to fix Heartbleed on your systems?
There are techniques for figuring out where interesting data lies--that's what all the address randomization stuff it supposed to help with.
Yes, this is hard, or nigh-impossible without the right tools. Get those tools, however, and it becomes a craps shoot. And generally, you don't need snake eyes to win.