# Vulnerability Discovery

> IKE vuln guides: aggressive mode, weak ciphers, IKEv1 detection

- **URL:** https://hackindex.io/services/ike/vulnerability-discovery
- **Service:** [IKE](https://hackindex.io/services/ike.md)
- **Published:** 2026-03-16
- **Updated:** 2026-03-29

IKE vulnerability discovery checks the VPN gateway's configuration for weaknesses that enable exploitation. Aggressive mode enabled is the primary finding, as it exposes a crackable PSK hash to any unauthenticated client.

Weak encryption in transform sets (DES, MD5, short Diffie-Hellman groups) makes cracking faster and may indicate outdated configurations throughout. Default or common pre-shared keys are worth testing against known vendor defaults.

The subpages cover aggressive mode detection, weak transform set identification, and default credential checks.

## Guides

- [IKEv1 Aggressive Mode Enabled](https://hackindex.io/services/ike/vulnerability-discovery/ike-aggressive-mode-enabled.md)
- [IKEv1 Only Gateway Detection](https://hackindex.io/services/ike/vulnerability-discovery/ike-ikev1-only.md)
- [IKE Weak Transform Set Detection](https://hackindex.io/services/ike/vulnerability-discovery/ike-weak-transform-sets.md)