# Enumeration

> IKE detection, transform set probing, and vendor ID fingerprinting guides

- **URL:** https://hackindex.io/services/ike/enumeration
- **Service:** [IKE](https://hackindex.io/services/ike.md)
- **Published:** 2026-03-16
- **Updated:** 2026-03-29

IKE enumeration identifies VPN gateways and their configuration. Sending IKE proposals to UDP 500 confirms the presence of a VPN endpoint and reveals supported transform sets, including encryption algorithms, hash functions, and authentication methods.

Aggressive mode detection is a key finding: when enabled, the responder returns its identity and a hash that can be cracked offline. Main mode is more restrictive but still leaks vendor IDs and supported configurations.

The subpages cover VPN gateway discovery, transform set fingerprinting, and aggressive versus main mode detection.

## Guides

- [IKE Service Detection and Version Identification](https://hackindex.io/services/ike/enumeration/ike-service-detection.md)
- [IKE Transform Set Enumeration](https://hackindex.io/services/ike/enumeration/ike-transform-set-enumeration.md)
- [IKE Vendor ID Fingerprinting](https://hackindex.io/services/ike/enumeration/ike-vendor-id-fingerprinting.md)