algo

Algo VPN Algo VPN is a set of Ansible scripts that simplify the setup of a personal WireGuard and IPsec VPN. It uses the most secure defaults available and works with common cloud providers. See our release announcement for more information. Features Supports only IKEv2 with strong crypto AES-GCM...

setup-ipsec-vpn

English | 简体中文 | 繁體中文 | 日本語 | Русский IPsec VPN Server Auto Setup Scripts Set up your own IPsec VPN server in just a few minutes, with IPsec/L2TP, Cisco IPsec and IKEv2. An IPsec VPN encrypts your network traffic, so that nobody between you and the VPN server can eavesdrop on your data as it...

Docker IPsec VPN Server

English | 简体中文 | 繁體中文 | Русский IPsec VPN Server on Docker Docker image to run an IPsec VPN server, with IPsec/L2TP, Cisco IPsec and IKEv2. Based on Alpine 3.23 or Debian 12 with Libreswan IPsec VPN software and xl2tpd L2TP daemon. An IPsec VPN encrypts your network traffic, so that nobody betwee...

Setup IPsec VPN

English | 简体中文 | 繁體中文 | 日本語 | Русский IPsec VPN Server Auto Setup Scripts Set up your own IPsec VPN server in just a few minutes, with IPsec/L2TP, Cisco IPsec and IKEv2. An IPsec VPN encrypts your network traffic, so that nobody between you and the VPN server can eavesdrop on your data as it...

CVE-2026-50751-Mitigation-Scripts

CVE-2026-50751-Mitigation-Scripts There are multiple mitigation techniques you can use from the sk; https://support.checkpoint.com/results/sk/sk185033 1. Disable legacy client support. 2. Configure Remote Access to only use ike v2 There are scripts for both of those changes; Please...

CVE-2025-14733

WatchGuard IKEv2 Scanner — CVE-2025-14733 Identify WatchGuard Firebox appliances vulnerable to CVE-2025-14733, a critical pre-authentication vulnerability in the Fireware OS IKEv2 implementation. This tool performs safe version detection through standard IKEv2 negotiation. It does not attempt...

IKEV2-POC

EpSiLoNPoInTIkEv2.cpp ⚠️ Project in finalization stage. NOT fully functional in its current state. Description EpSiLoNPoInTIkEv2.cpp is a C/C++ exploit prototype targeting Windows, developed around an exploitation of type double-free inikeext.dll Windows IKEv2 driver, referenced under research as...

killasa

killasa Vulnerability Test for CVE-2016-1287 Cisco ASA invalid IKE fragment length Negotiates IKEv2 SA with Cisco fragmentation enabled, then sends two IKE fragments, one of which has an invalid length of 1 octet...

watchTowr-vs-WatchGuard-CVE-2025-9242

watchTowr-vs-WatchGuard-CVE-2025-9242 Detection Artifact Generator for WatchGuard CVE-2025-9242 https://github.com/user-attachments/assets/097f099b-ba60-4223-adea-04279570460f See our blog post for technical details Detection in Action python watchTowr-vs-WatchGuard-CVE-2025-9242.py --rhost...

CVE-2026-33824

🚨 CVE-2026-33824: Exploitation Analysis and Remediation 🎯 Executive Summary CVE-2026-33824 is a critical vulnerability CVSS 9.8/10 in Windows' IKE Internet Key Exchange protocol that allows unauthenticated remote code execution. This is the "memory surgery" every elite attacker seeks: a Double Fr...

Medium: libreswan

Issue Overview: In Libreswan before 5.3.2, when the operating system and Libreswan are running in FIPS mode and at least one CA certificate is loaded, a malformed X.509 certificate payload can cause the pluto daemon to abort on an assertion. In FIPS mode, adddecodedcert calls CERTExtractPublicKey...

libreswan security update

An update is available for libreswan. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the...

RLSA-2026:90492 Important: libreswan security update

Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network VPN...

RHEL 8 : libreswan (RHSA-2026:90492)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:90492 advisory. Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide...

Rocky Linux 9.6 [TuxCare] Security Update: libreswan Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1793271759)

The Rocky Linux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793271759 advisory. - Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for authentication. As a result of...

RockyLinux 8 : libreswan (RLSA-2026:90492)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:90492 advisory. libreswan: IKEv2 Use-After-Free bug when using IKE-over-TCP CVE-2026-94453 libreswan: IKEv2 pre-authentication Null Pointer deref in EAP code...

Rocky Linux 9 [CIQ] Security Update: libreswan / libreswan-debuginfo / libreswan-debugsource Multiple Vulnerabilities (crlsa-2026_89748)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202689748 advisory. libreswan: IKEv2 Use-After-Free bug when using IKE-over-TCP CVE-2026-94453 libreswan: IKEv2 pre-authentication Null Pointer deref in EAP code CVE-2026-772...

MiracleLinux 9 : libreswan-4.15-11.el9_8 (AXSA:2026-2176:03)

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-2176:03 advisory. libreswan: IKEv2 Use-After-Free bug when using IKE-over-TCP CVE-2026-94453 libreswan: IKEv2 pre-authentication Null Pointer deref in EAP code...

MiracleLinux 8 : libreswan-4.12-2.el8_10.7 (AXSA:2026-2190:04)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-2190:04 advisory. libreswan: IKEv2 Use-After-Free bug when using IKE-over-TCP CVE-2026-94453 libreswan: IKEv2 pre-authentication Null Pointer deref in EAP code...

libreswan security update

An update is available for libreswan. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the...