bugtraq - New version of ike-scan (IPsec IKE scanner) available

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <6.2.0.14.0.20050207153327.02becb90@192.168.124.1>
Date: Mon, 07 Feb 2005 15:33:53 +0000
From: Roy Hills <Roy.Hills@...-monitor.com>
To: bugtraq@...urityfocus.com
Subject: New version of ike-scan (IPsec IKE scanner) available - v1.7

ike-scan v1.7 has been released.  The new version is available at 
http://www.nta-monitor.com/ike-scan/

The key changes from the previous version (v1.6) are:

a) new psk-crack program to crack IKE Aggressive Mode pre-shared keys using 
either dictionary or brute-force methods.
The new --pskcrack (-P) ike-scan option outputs the psk parameters to a 
file or stdout for cracking with psk-crack.

b) Support for IKE over TCP.
Two variants are supported: raw IKE over TCP as used by Checkpoint VPN-1, 
and encapsulated IKE over TCP as used by Cisco VPN Concentrator.

c) New --random (-R) option to randomise the target list.

d) The identity payload for aggressive mode may be specified as either a 
string or hex (previously, it could only be specified as hex).

e) Ability to use the OpenSSL MD5 and SHA1 hash functions.
This is enabled with the --with-openssl option to ./configure.
The OpenSSL hash functions are generally faster than the ike-scan built-in 
functions, which is useful for pre-shared key cracking.

f) Many more backoff fingerprints and vendor ID patterns added.

g) Tested on many new platforms. Too many to mention them all, but 
significant ones are MacOS X, HP-UX and SCO Openserver.

For full details of the changes, please read the ChangeLog and NEWS files 
in the tarball.
For usage notes, please read the README and README-WIN32 files in the tarball.

To download the new version, go to:

http://www.nta-monitor.com/ike-scan/

The direct download links are:

http://www.nta-monitor.com/ike-scan/download/ike-scan-1.7.tar.gz (Source 
tarball)

http://www.nta-monitor.com/ike-scan/download/ike-scan-win32-1.7.zip 
(Windows-32 Binary)

md5sums should be:

c06c6a3d78ba9b93c0abf79b3a3d2a11  ike-scan-1.7.tar.gz  (Source Tarball)
4e8c37775d541318e9841f17d22d492e  ike-scan-win32-1.7.zip  (Windows-32 Binary)

If you are hosting a copy of ike-scan, or you are maintaining a port or 
package, please process and upload this new version.

Please continue to send any comments or suggestions to: 
ike-scan@...-monitor.com
Comments on the new pre-shared key cracking code are particularly welcome.

Regards,

Roy Hills