ike-scan
discovers and fingerprints IPsec VPN servers
TLDR
Scan for IKE hosts
$ sudo ike-scan [192.168.1.0/24]
Aggressive modecopy
$ sudo ike-scan -A [target]
Specify transformcopy
$ sudo ike-scan --trans=[5,2,1,2] [target]
Show vendor IDcopy
$ sudo ike-scan -M [target]
Source portcopy
$ sudo ike-scan -s [500] [target]
copy
SYNOPSIS
ike-scan [options] targets
DESCRIPTION
ike-scan discovers and fingerprints IPsec VPN servers. It sends IKE packets and analyzes responses to identify VPN implementations.The tool performs IKE protocol scanning for security assessment. It identifies vendor, version, and supported transforms.
PARAMETERS
TARGETS
IP addresses or ranges.-A, --aggressive
Aggressive mode.-M, --multiline
Multiline output.--trans SET
Transform set.-s PORT
Source port.-d PORT
Destination port.--help
Display help information.
CAVEATS
Security testing tool. Authorization required. UDP port 500.
HISTORY
ike-scan was created by Roy Hills for IPsec VPN discovery and fingerprinting.