Vulnerability Discovery

IKE vulnerability discovery checks the VPN gateway's configuration for weaknesses that enable exploitation. Aggressive mode enabled is the primary finding, as it exposes a crackable PSK hash to any unauthenticated client.

Weak encryption in transform sets (DES, MD5, short Diffie-Hellman groups) makes cracking faster and may indicate outdated configurations throughout. Default or common pre-shared keys are worth testing against known vendor defaults.

The subpages cover aggressive mode detection, weak transform set identification, and default credential checks.