ike-scan

ike-scan Discover and fingerprint IKE hosts IPsec VPN Servers Table of Contents Building and Installing Overview Usage Implementation Details Host Input and Memory Requirements Rate Limiting Cookie Generation and Remote Host Identification IKE Packet Details Backoff Fingerprinting Program Output...

zeek-spicy-ipsec

IPSec This is a Zeek protocol analyzer that detects IPSec VPN based on Spicy. You must install Spicy to use this package. A blog detailing the development of this analyzer: https://zeek.org/2021/04/20/zeeks-ipsec-protocol-analyzer/ RFCs: https://tools.ietf.org/html/rfc2406 ESP...

CVE-2023-28771-PoC

CVE-2023-28771-PoC PoC for CVE-2023-28771 based on Rapid7's excellent writeup Requires the scapy Python library for sending IKE packets. usage: CVE-2023-28771-poc.py -h --cmd CMD --lhost LHOST --lport LPORT rhost positional arguments: rhost options: -h, --help show this help message and exit --cm...

ike-scan

ike-scan Découvrir et identifier les hôtes IKE serveurs VPN IPsec Table des matières Construction et installation Aperçu Utilisation Détails d'implémentation Saisie d'hôtes et besoins en mémoire Limitation du débit Génération de cookies et identification de l'hôte distant Détails des paquets IKE...

CVE-2026-25075-check

CVE-2026-25075 Vulnerability Assessment Tool Safely detect whether a strongSwan VPN server is vulnerable to CVE-2026-25075 without causing any disruption. See the full write-up at the Bishop Fox blog. Description CVE-2026-25075 is an integer underflow vulnerability in strongSwan's EAP-TTLS plugin...

CVE-2026-33824

🚨 CVE-2026-33824: Exploitation Analysis and Remediation 🎯 Executive Summary CVE-2026-33824 is a critical vulnerability CVSS 9.8/10 in Windows' IKE Internet Key Exchange protocol that allows unauthenticated remote code execution. This is the "memory surgery" every elite attacker seeks: a Double Fr...

IkeAbuser

IkeAbuser A simple tool wrapper to automate the enumeration, fingerprinting, and PSK extraction of an IPSec VPN gateway. Nothing fancy here, just a script I put together to save time during CTFs and while studying for the CPENT. It chains together ike-scan, nmap and hashcat so I don't have to typ...

CheckPoint-CVE-Webscanner

CP VPN CVE Scanner An approval-based local webapp for scanning configuration markers associated with Check Point CVE-2026-50751, CVE-2026-50752, CVE-2026-85102, and CVE-2026-85103 and applying selected mitigations through Check Point Management API commands. This tool is not created or supported ...

Astra Linux – Vulnerability in StrongSwan

StrongSwan before version 5.9.12 has a buffer overflow vulnerability, and there is a possibility of unauthenticated remote code execution through a DH public key value that exceeds the internal buffer of charon-tkm’s DH proxy. The earliest affected version is 5.3.0. An attack can occur through a...

AZL-100040 CVE-2026-78127 affecting package strongswan for versions less than 5.9.14-11

libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in the IKE message parser...

CVE-2026-78127

libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in the IKE message parser...

DEBIAN-CVE-2026-78127

libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in the IKE message parser...

CVE-2026-78127

libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in the IKE message parser...

EUVD-2026-75901

libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in the IKE message parser...

CVE-2026-78127

libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in the IKE message parser...

CVE-2026-78127

CVE-2026-78127 affects libcharon in strongSwan 4.1.2 through 6.0.7 , where a memory is not released after its effective lifetime during IKE message stringification (logging). The resulting memory leak can lead to denial of service via memory exhaustion. The CVSS 3.1 base score is 3.7 (LOW) , with...

CVE-2026-78127

libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in the IKE message parser...

CVE-2026-78127

libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in the IKE message parser...

CVE-2026-78127

libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in the IKE message parser...

CVE-2026-78127: Missing Release of Memory after Effective Lifetime

libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in the IKE message parser...