IKE:
Enumeration
IKE detection, transform set probing, and vendor ID fingerprinting guides
3 guides
•
Created Mar 16, 2026
•
Updated Mar 29, 2026
IKE enumeration identifies VPN gateways and their configuration. Sending IKE proposals to UDP 500 confirms the presence of a VPN endpoint and reveals supported transform sets, including encryption algorithms, hash functions, and authentication methods.
Aggressive mode detection is a key finding: when enabled, the responder returns its identity and a hash that can be cracked offline. Main mode is more restrictive but still leaks vendor IDs and supported configurations.
The subpages cover VPN gateway discovery, transform set fingerprinting, and aggressive versus main mode detection.