setup-ipsec-vpn

English | 简体中文 | 繁體中文 | 日本語 | Русский IPsec VPN 服务器一键安装脚本 使用 Linux 脚本一键快速搭建自己的 IPsec VPN 服务器。支持 IPsec/L2TP, Cisco IPsec 和 IKEv2 协议。 IPsec VPN 可以加密你的网络流量，以防止在通过因特网传送时，你和 VPN 服务器之间的任何人对你的数据的未经授权的访问。在使用不安全的网络时，这是特别有用的，例如在咖啡厅，机场或旅馆房间。 我们将使用 Libreswan 作为 IPsec 服务器，以及 xl2tpd 作为 L2TP 提供者。 功能特性： 全自动的 IPs...

setup-ipsec-vpn

English | 简体中文 | 繁體中文 | 日本語 | Русский IPsec VPN Server Auto Setup Scripts Set up your own IPsec VPN server in just a few minutes, with IPsec/L2TP, Cisco IPsec and IKEv2. An IPsec VPN encrypts your network traffic, so that nobody between you and the VPN server can eavesdrop on your data as it...

algo

Algo VPN Algo VPN is a set of Ansible scripts that simplify the setup of a personal WireGuard and IPsec VPN. It uses the most secure defaults available and works with common cloud providers. See our release announcement for more information. Features Supports only IKEv2 with strong crypto AES-GCM...

killasa

killasa Prueba de vulnerabilidad para CVE-2016-1287 longitud de fragmento IKE no válida en Cisco ASA Negocia la SA IKEv2 con la fragmentación de Cisco habilitada y luego envía dos fragmentos IKE, uno de los cuales tiene una longitud no válida de 1 octeto...

Docker IPsec VPN Server

English | 简体中文 | 繁體中文 | Русский Docker 上的 IPsec VPN 服务器 使用这个 Docker 镜像快速搭建 IPsec VPN 服务器。支持 IPsec/L2TP，Cisco IPsec 和 IKEv2 协议。 本镜像以 Alpine 3.23 或 Debian 12 为基础，并使用 Libreswan IPsec VPN 软件 和 xl2tpd L2TP 服务进程。 IPsec VPN 可以加密你的网络流量，以防止在通过因特网传送时，你和 VPN...

IKEV2-POC

EpSiLoNPoInTIkEv2.cpp ⚠️ Project in finalization stage. NOT fully functional in its current state. Description EpSiLoNPoInTIkEv2.cpp is a C/C++ exploit prototype targeting Windows, developed around an exploitation of type double-free inikeext.dll Windows IKEv2 driver, referenced under research as...

Setup IPsec VPN

English | 简体中文 | 繁體中文 | 日本語 | Русский IPsec VPN 服务器一键安装脚本 使用 Linux 脚本一键快速搭建自己的 IPsec VPN 服务器。支持 IPsec/L2TP, Cisco IPsec 和 IKEv2 协议。 IPsec VPN 可以加密你的网络流量，以防止在通过因特网传送时，你和 VPN 服务器之间的任何人对你的数据的未经授权的访问。在使用不安全的网络时，这是特别有用的，例如在咖啡厅，机场或旅馆房间。 我们将使用 Libreswan 作为 IPsec 服务器，以及 xl2tpd 作为 L2TP 提供者。 功能特性： 全自动的 IPs...

watchTowr-vs-WatchGuard-CVE-2025-9242

watchTowr-vs-WatchGuard-CVE-2025-9242 Generador de artefactos de detección para WatchGuard CVE-2025-9242 https://github.com/user-attachments/assets/097f099b-ba60-4223-adea-04279570460f Consulta nuestra entrada de blog para obtener detalles técnicos Detección en acción root@kitploit: python...

CVE-2026-50751-Mitigation-Scripts

CVE-2026-50751-Scripts-de-Mitigación Existen múltiples técnicas de mitigación que puedes usar desde el sk; https://support.checkpoint.com/results/sk/sk185033 1. Deshabilitar el soporte de clientes heredados. 2. Configurar Acceso Remoto para usar solo ike v2 Hay scripts para ambos cambios; Por...

CVE-2026-33824

🚨 CVE-2026-33824: Análisis de Explotación y Remediación 🎯 Resumen Ejecutivo CVE-2026-33824 es una vulnerabilidad crítica CVSS 9.8/10 en el protocolo IKE Internet Key Exchange de Windows que permite ejecución remota de código sin autenticación previa. Esta es la "cirugía de memoria" que todo...

CVE-2026-20249

A vulnerability in the certification authentication feature of Internet Key Exchange version 2 IKEv2 for Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device...

CVE-2026-20249

A logic error in the IKEv2 certificate authentication phase of Cisco Secure Firewall ASA and FTD Software allows an unauthenticated, remote attacker to send a crafted certificate during IKEv2 VPN connection setup, crashing the IKEv2 process and causing an unexpected device reload (DoS). The vulne...

CVE-2026-20249 Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software IKEv2 Certificate Authentication Denial of Service Vulnerability

A vulnerability in the certification authentication feature of Internet Key Exchange version 2 IKEv2 for Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device...

EUVD-2026-81118

A vulnerability in the certification authentication feature of Internet Key Exchange version 2 IKEv2 for Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device...

CVE-2025-14733

WatchGuard IKEv2 Scanner — CVE-2025-14733 Identify WatchGuard Firebox appliances vulnerable to CVE-2025-14733, a critical pre-authentication vulnerability in the Fireware OS IKEv2 implementation. This tool performs safe version detection through standard IKEv2 negotiation. It does not attempt...

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software IKEv2 Certificate Authentication Denial of Service Vulnerability

A vulnerability in the certification authentication feature of Internet Key Exchange version 2 IKEv2 for Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device...

CVE-2026-45769

A flaw was found in Suricata, a network Intrusion Detection System IDS, Intrusion Prevention System IPS, and Network Security Monitoring engine. A remote attacker can exploit this vulnerability by sending repeated crafted User Datagram Protocol UDP traffic to the IKEv2 parser. This can cause the...

AZL-100049 CVE-2026-78135 affecting package strongswan 5.9.14-10

libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATECHILDSA requests are mishandled, there can be an authentication bypass...

CVE-2026-78135

libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATECHILDSA requests are mishandled, there can be an authentication bypass...

DEBIAN-CVE-2026-78135

libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATECHILDSA requests are mishandled, there can be an authentication bypass...