Basic Info:

Fingerprinting IKE implementation

install size: 4289024
build date: 2017-11-10 00:10:23 +0000
package file: ike-scan-1.9nb5.tgz
package size: 1237783


ike-scan discovers IKE hosts and can also fingerprint them using the
retransmission backoff pattern.

ike-scan does two things:

a) Discovery: Determine which hosts are running IKE.
This is done by displaying those hosts which respond to the IKE requests
sent by ike-scan.

b) Fingerprinting: Determine which IKE implementation the hosts are using.
This is done by recording the times of the IKE response packets from the
target hosts and comparing the observed retransmission backoff pattern
against known patterns.

The retransmission backoff fingerprinting concept is discussed in more
detail in the UDP backoff fingerprinting paper which should be included
in the ike-scan kit as udp-backoff-fingerprinting-paper.txt.

The program sends IKE main mode requests to the specified hosts and displays
any responses that are received. It handles retry and retransmission with
backoff to cope with packet loss. It also limits the amount of bandwidth
used by the outbound IKE packets.






Package List

File NameDateSize
bin/ike-scan2017-11-09 17:10109608 bytes
bin/psk-crack2017-11-09 17:1031432 bytes
man/man1/ike-scan.12017-11-09 17:1020724 bytes
man/man1/psk-crack.12017-11-09 17:102956 bytes
share/doc/ike-scan/README2017-11-09 17:1048389 bytes
share/ike-scan/ike-backoff-patterns2017-11-09 17:1012501 bytes
share/ike-scan/ike-vendor-ids2017-11-09 17:1022450 bytes
share/ike-scan/psk-crack-dictionary2017-11-09 17:104040964 bytes