# Installer ike-scan avec Homebrew, apt, MacPorts, Nix

Consultez les chemins d'installation, exécutables, métadonnées et notes de sécurité de ike-scan pour les workflows d'agents IA.

## installation

```sh
sudo av install brew:ike-scan
```

Commandes d'installation supplémentaires:

### macOS

- Homebrew (100%):

```sh
brew install ike-scan
```

  Preuve: local Homebrew formula metadata

- MacPorts (94%):

```sh
sudo port install ike-scan
```

  Preuve: MacPorts ports tree: security/ike-scan/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

### Linux

- Debian apt (92%):

```sh
sudo apt install ike-scan
```

  Preuve: Debian stable package indexes: ike-scan from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz

- Nix (92%):

```sh
nix profile install nixpkgs#ike-scan
```

  Preuve: nixpkgs package indexes: pkgs/by-name/ik/ike-scan/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

## Faits du paquet

- **Clé du paquet:** brew:ike-scan
- **Gestionnaire de paquets:** Homebrew
- **Page du gestionnaire de paquets:** <https://formulae.brew.sh/formula/ike-scan>
- **Version:** 1.9.5
- **Résumé source:** Discover and fingerprint IKE hosts
- **Page d'accueil:** <https://github.com/royhills/ike-scan>
- **Dépôt:** <https://github.com/royhills/ike-scan>
- **Licence:** GPL-3.0-or-later WITH openvpn-openssl-exception
- **Archive source:** <https://github.com/royhills/ike-scan/archive/refs/tags/1.9.5.tar.gz>
- **Dernière mise à jour:** 2026-06-22T14:03:45-07:00
- **Généré:** 2026-08-04T22:13:35+00:00

## exécutables

- ike-scan (cli)
- psk-crack (cli)
- ike-scan (alias)
- psk-crack (alias)

## Dépendances

- openssl@3

## Dépendances de compilation

- autoconf
- automake
- libtool

## Comportement d'installation

- hook post-installation: non défini
- Bouteille: disponible sur arm64_big_sur, arm64_linux, arm64_monterey, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, big_sur, catalina, monterey, sonoma, ventura

## Version et fraîcheur

- page générée: 2026-08-04
- version du gestionnaire: 1.9.5
- gestionnaire mis à jour: 2026-06-22
- données locales: OK
- dépôt amont: https://github.com/royhills/ike-scan
- dernière version détectée: 1.9.5 (à jour)
## Historique du projet et usages

ike-scan is Roy Hills' command-line scanner for discovering IPsec VPN endpoints that speak IKE and fingerprinting their implementations. The README frames its core jobs as discovery, fingerprinting, transform enumeration, user enumeration for some VPN systems, and offline pre-shared-key cracking through the bundled psk-crack program.

### Historique du projet

The project grew out of NTA Monitor research into UDP retransmission backoff fingerprinting. Roy Hills' 2003 white paper explains the observation that many UDP services, including IKE, leave retransmission timing decisions to implementers, creating measurable patterns that can identify VPN products.

ike-scan v1.0 was the initial public release in the project's NEWS file. Subsequent releases expanded platform support, added Windows binaries, accumulated vendor ID and backoff fingerprints, and added psk-crack for aggressive-mode pre-shared-key material captured by ike-scan.

Version 1.9 marked a major feature expansion: IKEv2 packet support, NAT traversal, source IP spoofing on raw-socket systems, stdin dictionaries for psk-crack, Vendor ID fingerprinting, and improved pseudo-random packet generation. Version 1.9.4 moved development from an internal SVN repository to GitHub.

### Historique d'adoption

ike-scan became a standard package for VPN assessment work because it targets the exposed UDP/500 and UDP/4500 surfaces that often sit at network borders. The input metadata shows packaging in Homebrew, Debian, Ubuntu, MacPorts, and Nix, and the README documents builds on Linux, BSDs, Solaris, macOS, Cygwin, and several older Unix systems.

### Modes d'utilisation

Operators use ike-scan to send IKE phase-1 probes to one or many targets, list responding hosts, inspect transform support, collect Vendor ID payloads, and optionally measure retransmission backoff with --showbackoff. In aggressive mode, --pskcrack output can feed psk-crack for dictionary or brute-force testing of captured pre-shared-key hashes.

### Pourquoi les passionnés de paquets s'y intéressent

The package is significant because it packages a specific security-research technique, not just a generic network scanner. Its data files, including ike-backoff-patterns and ike-vendor-ids, are part of the value: they turn timing behavior and vendor payloads into repeatable fingerprints that can be updated as products change.

### Chronologie

- 2003: UDP backoff fingerprinting white paper describes ike-scan as the example program.
- v1.0: Initial public release supports Debian, FreeBSD, and OpenBSD builds.
- v1.7: psk-crack and aggressive-mode PSK capture support are added.
- v1.8: Vendor ID and UDP backoff pattern databases expand to 135 vendor IDs and 29 backoff patterns.
- v1.9: IKEv2, NAT traversal, Vendor ID fingerprinting, and stdin dictionaries for psk-crack are added.
- 2013: v1.9.4 moves development from internal SVN to GitHub.

### Related projects

- ike-scan sits beside packet tools such as tcpdump and broader scanners such as Nmap, but its closest related artifact is its own UDP backoff fingerprinting paper. Its psk-crack companion makes it part scanner and part focused IPsec assessment toolkit.

### Sources

- Project README, NEWS file, UDP backoff fingerprinting paper, vendor ID database, GitHub repository metadata, and Homebrew formula metadata.


## Notes de sécurité

narrow executable package without higher-risk signals.

- **Risque Geiger:** vert / faible
- narrow executable package without higher-risk signals

## Détails de la base source

- **Source Database:** Homebrew formula API
- **Tap:** homebrew/core
- **Full Name:** ike-scan
- **Version Scheme:** 0
- **Revision:** 0
- **Head Version:** HEAD
- **Bottle Stable Root URL:** <https://ghcr.io/v2/homebrew/core>
- **Deprecated:** no
- **Disabled:** no
- **Keg Only:** no
- **URL Keys:** head, stable

## Autres enregistrements de gestionnaires de paquets

- Debian apt - ike-scan - 1.9.5-2: normalized package name match | Debian stable package indexes: ike-scan from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | discover and fingerprint IKE hosts (IPsec VPN Servers) | https://github.com/royhills/ike-scan
- Nix - ike-scan: normalized package name match | nixpkgs package indexes: pkgs/by-name/ik/ike-scan/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- Ubuntu apt - ike-scan - 1.9.5-1ubuntu1: normalized package name match | Ubuntu 24.04 LTS package indexes: ike-scan from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | discover and fingerprint IKE hosts (IPsec VPN Servers) | https://github.com/royhills/ike-scan
- MacPorts - ike-scan: normalized package name match | MacPorts ports tree: security/ike-scan/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1


## Liens liés

- [Source-control packages](https://pkg.so/fr/source-control-tools/) - Belongs to a source-control command family.
- [Terminal utility packages](https://pkg.so/fr/terminal-utilities/) - Matched terminal and command-line workflow metadata.
- [Networking and protocol packages](https://pkg.so/fr/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata.
- [Security and crypto packages](https://pkg.so/fr/security-crypto-tools/) - Matched security, identity, cryptography, password, signing, or certificate metadata.
- [openssl@3](https://pkg.so/fr/brew/openssl-3/) - Runtime dependency declared by Homebrew.
- [libtool](https://pkg.so/fr/brew/libtool/) - Build dependency declared by Homebrew.
- [autoconf](https://pkg.so/fr/brew/autoconf/) - Build dependency declared by Homebrew.
- [automake](https://pkg.so/fr/brew/automake/) - Build dependency declared by Homebrew.
- [strongswan](https://pkg.so/fr/brew/strongswan/) - Shares pkgdb curated category or tags: cli, ike, security, vpn.
- [nmap](https://pkg.so/fr/brew/nmap/) - Shares pkgdb curated category or tags: cli, scanner, security.
- [sslscan](https://pkg.so/fr/brew/sslscan/) - Shares pkgdb curated category or tags: cli, scanner, security.
- [gosec](https://pkg.so/fr/brew/gosec/) - Shares pkgdb curated category or tags: cli, scanner, security.
- [easy-rsa](https://pkg.so/fr/brew/easy-rsa/) - Shares pkgdb curated category or tags: cli, security, vpn.
- [bbot](https://pkg.so/fr/brew/bbot/) - Shares pkgdb curated category or tags: cli, scanner, security.
- [apkleaks](https://pkg.so/fr/brew/apkleaks/) - Shares pkgdb curated category or tags: cli, scanner, security.
- [killswitch](https://pkg.so/fr/brew/killswitch/) - Shares pkgdb curated category or tags: cli, security, vpn.
- [afflib](https://pkg.so/fr/brew/afflib/) - Security-sensitive metadata or terminology overlaps. Shared terms: cli, openssl, openssl-3, security.
- [cargo-geiger](https://pkg.so/fr/brew/cargo-geiger/) - Security-sensitive metadata or terminology overlaps. Shared terms: cli, openssl, openssl-3, security.

## Combined YAML source

View the package source record on GitHub. [combined/ike-scan.yml](https://github.com/mxcl/pkgdb/blob/main/combined/ike-scan.yml)


## Sources

- pkg.so package database
- Geiger risk classifier
- package-page enrichment
- curated package history
- package version freshness
- pkgdb category and tag curation
- package relationship graph
- external package-manager database matches
- cross-ecosystem install command graph