https://www.rchitect.in/tags/ipsec/Recent content in Ipsec on rchitectHugoenTue, 08 Mar 2022 00:00:00 +0000https://www.rchitect.in/posts/ipsec-enumeration/Tue, 08 Mar 2022 00:00:00 +0000https://www.rchitect.in/posts/ipsec-enumeration/<h1 id="vpnike-enumeration"> VPN(IKE) enumeration <a class="heading-link" href="#vpnike-enumeration"> <i class="fa-solid fa-link" aria-hidden="true" title="Link to heading"></i> <span class="sr-only">Link to heading</span> </a> </h1> <p>isakmp service( port-500 related to ipsec VPN) only opened on server.There are some inbuilt scanners in Kali linux to enumerate IPSEC VPN</p> <pre tabindex="0"><code>$ ike-scan -M 10.10.10.116 Starting ike-scan 1.9.4 with 1 hosts (http://www.nta-monitor.com/tools/ike-scan/) 10.10.10.116 Main Mode Handshake returned HDR=(CKY-R=8ec1706b5f6632a8) SA=(Enc=3DES Hash=SHA1 Group=2:modp1024 Auth=PSK LifeType=Seconds LifeDuration(4)=0x00007080) VID=1e2b516905991c7d7c96fcbfb587e46100000009 (Windows-8) VID=4a131c81070358455c5728f20e95452f (RFC 3947 NAT-T) VID=90cb80913ebb696e086381b5ec427b1f (draft-ietf-ipsec-nat-t-ike-02\n) VID=4048b7d56ebce88525e7de7f00d6c2d3 (IKE Fragmentation) VID=fb1de3cdf341b7ea16b7e5be0855f120 (MS-Negotiation Discovery Capable) VID=e3a5966a76379fe707228231e5ce8652 (IKE CGA version 1) Ending ike-scan 1.9.4: 1 hosts scanned in 0.325 seconds (3.08 hosts/sec). 1 returned handshake; 0 returned notify </code></pre><p>The tunnel uses IKE-V1 as per above results.To confirm its not running on IKE-V2</p>