ike-scan
discovers and fingerprints IPsec VPN servers
TLDR
Scan for IKE hosts
$ sudo ike-scan [192.168.1.0/24]
Aggressive mode$ sudo ike-scan -A [target]
Specify transform$ sudo ike-scan --trans=[5,2,1,2] [target]
Show vendor ID$ sudo ike-scan -M [target]
Source port$ sudo ike-scan -s [500] [target]
SYNOPSIS
ike-scan [options] targets
DESCRIPTION
ike-scan discovers and fingerprints IPsec VPN servers. It sends IKE packets and analyzes responses to identify VPN implementations.The tool performs IKE protocol scanning for security assessment. It identifies vendor, version, and supported transforms.
PARAMETERS
TARGETS
IP addresses or ranges.-A, --aggressive
Aggressive mode.-M, --multiline
Multiline output.--trans SET
Transform set.-s PORT
Source port.-d PORT
Destination port.--help
Display help information.
INSTALL
sudo apt install ike-scan
brew install ike-scan
nix profile install nixpkgs#ike-scan
CAVEATS
Security testing tool. Authorization required. UDP port 500.
HISTORY
ike-scan was created by Roy Hills for IPsec VPN discovery and fingerprinting.