ike-scan

discovers and fingerprints IPsec VPN servers

TLDR

Scan for IKE hosts

$ sudo ike-scan [192.168.1.0/24]

Aggressive mode

$ sudo ike-scan -A [target]

Specify transform

$ sudo ike-scan --trans=[5,2,1,2] [target]

Show vendor ID

$ sudo ike-scan -M [target]

Source port

$ sudo ike-scan -s [500] [target]

ike-scan discovers and fingerprints IPsec VPN servers. It sends IKE packets and analyzes responses to identify VPN implementations.The tool performs IKE protocol scanning for security assessment. It identifies vendor, version, and supported transforms.

PARAMETERS

TARGETS

IP addresses or ranges.

-A, --aggressive

Aggressive mode.

-M, --multiline

Multiline output.

--trans SET

Transform set.

-s PORT

Source port.

-d PORT

Destination port.

--help

Display help information.

INSTALL

sudo apt install ike-scan

brew install ike-scan

nix profile install nixpkgs#ike-scan

CAVEATS

Security testing tool. Authorization required. UDP port 500.

HISTORY

ike-scan was created by Roy Hills for IPsec VPN discovery and fingerprinting.