Home page logo
/

fulldisclosure logo Full Disclosure mailing list archives

New version of ike-scan (IPsec IKE scanner) available - v1.7
From: Roy Hills <Roy.Hills () nta-monitor com>
Date: Mon, 07 Feb 2005 15:32:32 +0000

ike-scan v1.7 has been released. The new version is available at http://www.nta-monitor.com/ike-scan/

The key changes from the previous version (v1.6) are:

a) new psk-crack program to crack IKE Aggressive Mode pre-shared keys using either dictionary or brute-force methods. The new --pskcrack (-P) ike-scan option outputs the psk parameters to a file or stdout for cracking with psk-crack.

b) Support for IKE over TCP.
Two variants are supported: raw IKE over TCP as used by Checkpoint VPN-1, and encapsulated IKE over TCP as used by Cisco VPN Concentrator.

c) New --random (-R) option to randomise the target list.

d) The identity payload for aggressive mode may be specified as either a string or hex (previously, it could only be specified as hex).

e) Ability to use the OpenSSL MD5 and SHA1 hash functions.
This is enabled with the --with-openssl option to ./configure.
The OpenSSL hash functions are generally faster than the ike-scan built-in functions, which is useful for pre-shared key cracking.

f) Many more backoff fingerprints and vendor ID patterns added.

g) Tested on many new platforms. Too many to mention them all, but significant ones are MacOS X, HP-UX and SCO Openserver.

For full details of the changes, please read the ChangeLog and NEWS files in the tarball.
For usage notes, please read the README and README-WIN32 files in the tarball.

To download the new version, go to:

http://www.nta-monitor.com/ike-scan/

The direct download links are:

http://www.nta-monitor.com/ike-scan/download/ike-scan-1.7.tar.gz (Source tarball)

http://www.nta-monitor.com/ike-scan/download/ike-scan-win32-1.7.zip (Windows-32 Binary)

md5sums should be:

c06c6a3d78ba9b93c0abf79b3a3d2a11  ike-scan-1.7.tar.gz  (Source Tarball)
4e8c37775d541318e9841f17d22d492e  ike-scan-win32-1.7.zip  (Windows-32 Binary)

If you are hosting a copy of ike-scan, or you are maintaining a port or package, please process and upload this new version.

Please continue to send any comments or suggestions to: ike-scan () nta-monitor com
Comments on the new pre-shared key cracking code are particularly welcome.

Regards,

Roy Hills

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


  By Date           By Thread  

Current thread:
  • New version of ike-scan (IPsec IKE scanner) available - v1.7 Roy Hills (Feb 07)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]