zeek-spicy-ipsec

IPSec This is a Zeek protocol analyzer that detects IPSec VPN based on Spicy. You must install Spicy to use this package. A blog detailing the development of this analyzer: https://zeek.org/2021/04/20/zeeks-ipsec-protocol-analyzer/ RFCs: https://tools.ietf.org/html/rfc2406 ESP...

Setup IPsec VPN

English | 简体中文 | 繁體中文 | 日本語 | Русский IPsec VPN Server Auto Setup Scripts Set up your own IPsec VPN server in just a few minutes, with IPsec/L2TP, Cisco IPsec and IKEv2. An IPsec VPN encrypts your network traffic, so that nobody between you and the VPN server can eavesdrop on your data as it...

algo

Algo VPN Algo VPN is a set of Ansible scripts that simplify the setup of a personal WireGuard and IPsec VPN. It uses the most secure defaults available and works with common cloud providers. See our release announcement for more information. Features Supports only IKEv2 with strong crypto AES-GCM...

setup-ipsec-vpn

English | 简体中文 | 繁體中文 | 日本語 | Русский IPsec VPN Server Auto Setup Scripts Set up your own IPsec VPN server in just a few minutes, with IPsec/L2TP, Cisco IPsec and IKEv2. An IPsec VPN encrypts your network traffic, so that nobody between you and the VPN server can eavesdrop on your data as it...

CVE-2026-43284

Dirty Frag - kernel Linux critical Vulnerability- CVE-2026-43284 📚 Introduction The exploit chain, classified as a Local Privilege Escalation LPE , allows an unprivileged user to obtain root access on virtually all modern Linux distributions running kernels released since 2017, spanning...

ipdecap

ipdecap Decapsulate traffic encapsulated within GRE, IPIP, 6in4 and ESP ipsec protocols, from a pcap file. Can also remove IEEE 802.1Q virtual lan - vlan header. Documentation available at http://loicpefferkorn.net/ipdecap...

dirtyclone-exploit

DirtyClone Exploit Framework CVE-2026-46331 — Linux Kernel Local Privilege Escalation TC pedit + IPsec TEE Page Cache Corruption · Affected kernels: ≤ 6.12.9 ╔═══════════════════════════════════════════════════════════════╗ ║ ║ ║ | \ | | / | | ║ ║ | | | | | '| | | | | | | |/ | ' \ / \ ║ ║ | || | ...

strongswan

strongSwan Configuration Overview strongSwan is an OpenSource IPsec-based VPN solution. This document is just a short introduction of the strongSwan swanctl command which uses the modern vici Versatile IKE Configuration Interface. The deprecated ipsec command using the legacy stroke configuration...

ike-scan

ike-scan Discover and fingerprint IKE hosts IPsec VPN Servers Table of Contents Building and Installing Overview Usage Implementation Details Host Input and Memory Requirements Rate Limiting Cookie Generation and Remote Host Identification IKE Packet Details Backoff Fingerprinting Program Output...

CVE-2022-27666

CVE-2022-27666 Heap buffer overflow in Linux kernel's IPsec ESP6 implementation linux 5.13.19. Setup Assuming root user 1. Build Kernel inside VM Install dependencies: apt update && apt install -y \ build-essential bc bison flex \ libssl-dev libelf-dev libncurses-dev \ dwarves pahole gcc make wge...

algo

Algo VPN Algo VPN es un conjunto de scripts de Ansible que simplifican la configuración de una VPN personal con WireGuard e IPsec. Utiliza los valores predeterminados más seguros disponibles y funciona con proveedores de nube comunes. Consulte nuestro anuncio de lanzamiento para obtener más...

IkeAbuser

IkeAbuser A simple tool wrapper to automate the enumeration, fingerprinting, and PSK extraction of an IPSec VPN gateway. Nothing fancy here, just a script I put together to save time during CTFs and while studying for the CPENT. It chains together ike-scan, nmap and hashcat so I don't have to typ...

ike-scan

ike-scan Descubrir e identificar hosts IKE Servidores VPN IPsec Tabla de Contenidos Construcción e Instalación Resumen Uso Detalles de Implementación Entrada de Hosts y Requisitos de Memoria Limitación de Tasa Generación de Cookies e Identificación de Hosts Remotos Detalles de Paquetes IKE...

setup-ipsec-vpn

English | 简体中文 | 繁體中文 | 日本語 | Русский Script di configurazione automatica del server VPN IPsec Configura il tuo server VPN IPsec in pochi minuti, con IPsec/L2TP, Cisco IPsec e IKEv2. Una VPN IPsec crittografa il tuo traffico di rete, in modo che nessuno tra te e il server VPN possa intercettare i...

CVE-2026-98241

A flaw was found in the Linux kernel's IPv6 IPsec XFRM networking framework. When handling TCP connection handshakes routed through an IPsec tunnel with a reduced Maximum Transmission Unit MTU, the kernel's local error-handling path incorrectly treats incomplete connection request sockets as full...

CVE-2026-98230

A flaw was found in the Linux kernel's IPsec xfrm subsystem. A local attacker can trigger repeated state deletion during cleanup, leading to a use-after-free condition where the kernel attempts to access memory that has already been released. This vulnerability may allow an attacker to achieve...

CVE-2026-98231

A flaw was found in the Linux kernel's IPsec XFRM subsystem. A race condition between device state flushing and background memory cleanup allows kernel memory to be accessed after it has already been freed. A local attacker could exploit this flaw during network device state changes to cause a...

CVE-2026-98229

A flaw was found in the Linux kernel's XFRM IPsec subsystem. During incoming packet processing, certain network receive paths can reset security context information before the system finishes handling the IPsec state. If that state is concurrently deleted, the kernel can dereference freed memory,...

Paranoid-Dirty-Frag-CVE-2026-43284

Dirty Frag mitigation script This script: 1. Blocks vulnerable kernel modules from loading 2. Unloads them if currently active 3. Verifies mitigation status WARNING: Disables Linux IPsec ESP support esp4/esp6 and RxRPC support. This may break: - strongSwan - libreswan - some enterprise VPNs -...

DirtyFrag-Detector

🔍 Dirty Frag — CVE-2026-43284 / CVE-2026-43500 Detection Script TL;DR: There are two new Linux kernel bugs. This script tells you if you're vulnerable. Patch your stuff. What's this about? On May 7th 2026, a vulnerability class called Dirty Frag was publicly disclosed by security researcher Hyunw...