996 matches found
CheckPoint-CVE-Webscanner
CP VPN CVE Scanner An approval-based local webapp for scanning configuration markers associated with Check Point CVE-2026-50751, CVE-2026-50752, CVE-2026-85102, and CVE-2026-85103 and applying selected mitigations through Check Point Management API commands. This tool is not created or supported ...
ike-scan
ike-scan Discover and fingerprint IKE hosts IPsec VPN Servers Table of Contents Building and Installing Overview Usage Implementation Details Host Input and Memory Requirements Rate Limiting Cookie Generation and Remote Host Identification IKE Packet Details Backoff Fingerprinting Program Output...
zeek-spicy-ipsec
IPSec Este es un analizador de protocolos Zeek que detecta VPN IPSec basado en Spicy. Debes instalar Spicy para usar este paquete. Un blog que detalla el desarrollo de este analizador: https://zeek.org/2021/04/20/zeeks-ipsec-protocol-analyzer/ RFCs: https://tools.ietf.org/html/rfc2406 ESP...
CVE-2023-28771-PoC
CVE-2023-28771-PoC PoC para CVE-2023-28771 basado en el excelente informe de Rapid7 Requiere la biblioteca Python scapy para enviar paquetes IKE. root@kitploit: usage: CVE-2023-28771-poc.py -h --cmd CMD --lhost LHOST --lport LPORT rhost positional arguments: rhost options: -h, --help show this he...
IkeAbuser
IkeAbuser 一个简单的工具封装，用于自动化IPSec VPN网关的枚举、指纹识别和PSK提取。 没什么特别的，只是一个我编写的脚本，用于在CTF和CPENT学习期间节省时间。它将ike-scan、nmap和hashcat串联起来，这样我就不必反复输入相同的命令了。 免责声明 仅限授权测试和教育用途。仅在你拥有或明确允许测试的机器上运行（你的实验室、CTF靶机等）。使用后果自负。 功能说明 该脚本执行测试IKE网关的常规步骤： 1. 使用nmap检查UDP端口500或4500是否开放。如果没有，则停止。 2...
ike-scan
ike-scan Descubrir e identificar hosts IKE Servidores VPN IPsec Tabla de Contenidos Construcción e Instalación Resumen Uso Detalles de Implementación Entrada de Hosts y Requisitos de Memoria Limitación de Tasa Generación de Cookies e Identificación de Hosts Remotos Detalles de Paquetes IKE...
CVE-2026-25075-check
CVE-2026-25075 Herramienta de Evaluación de Vulnerabilidad Detecte de forma segura si un servidor VPN strongSwan es vulnerable a CVE-2026-25075 sin causar interrupciones. Consulte el análisis completo en el blog de Bishop Fox. Descripción CVE-2026-25075 es una vulnerabilidad de desbordamiento por...
AZL-100040 CVE-2026-78127 affecting package strongswan 5.9.14-10
libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in the IKE message parser...
CVE-2026-78127
libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in the IKE message parser...
DEBIAN-CVE-2026-78127
libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in the IKE message parser...
CVE-2026-78127
libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in the IKE message parser...
EUVD-2026-75901
libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in the IKE message parser...
CVE-2026-78127
CVE-2026-78127 affects libcharon in strongSwan 4.1.2 through 6.0.7 , where a memory is not released after its effective lifetime during IKE message stringification (logging). The resulting memory leak can lead to denial of service via memory exhaustion. The CVSS 3.1 base score is 3.7 (LOW) , with...
CVE-2026-78127
libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in the IKE message parser...
CVE-2026-78127
libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in the IKE message parser...
PT-2026-89675
libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in the IKE message parser...
CVE-2026-33824
🚨 CVE-2026-33824: Análisis de Explotación y Remediación 🎯 Resumen Ejecutivo CVE-2026-33824 es una vulnerabilidad crítica CVSS 9.8/10 en el protocolo IKE Internet Key Exchange de Windows que permite ejecución remota de código sin autenticación previa. Esta es la "cirugía de memoria" que todo...
CVE-2026-69881
Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network...