# ike-scan を Homebrew, apt, MacPorts, Nix でインストール

ike-scan のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。

## インストール

```sh
sudo av install brew:ike-scan
```

追加のインストールコマンド:

### macOS

- Homebrew (100%):

```sh
brew install ike-scan
```

  証拠: local Homebrew formula metadata

- MacPorts (94%):

```sh
sudo port install ike-scan
```

  証拠: MacPorts ports tree: security/ike-scan/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

### Linux

- Debian apt (92%):

```sh
sudo apt install ike-scan
```

  証拠: Debian stable package indexes: ike-scan from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz

- Nix (92%):

```sh
nix profile install nixpkgs#ike-scan
```

  証拠: nixpkgs package indexes: pkgs/by-name/ik/ike-scan/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

## パッケージ情報

- **パッケージキー:** brew:ike-scan
- **パッケージマネージャ:** Homebrew
- **バージョン:** 1.9.5
- **ソース概要:** Discover and fingerprint IKE hosts
- **ホームページ:** <https://github.com/royhills/ike-scan>
- **リポジトリ:** <https://github.com/royhills/ike-scan>
- **最終更新:** 2026-06-22T14:03:45-07:00
- **生成日時:** 2026-08-03T19:37:03+00:00

## 実行可能ファイル

- ike-scan (エイリアス)
- psk-crack (エイリアス)

## インストール挙動

- Bottle: 利用不可

## バージョンと鮮度

- ページ生成日: 2026-08-03
- マネージャ版: 1.9.5
## プロジェクトの歴史と使われ方

ike-scan is Roy Hills' command-line scanner for discovering IPsec VPN endpoints that speak IKE and fingerprinting their implementations. The README frames its core jobs as discovery, fingerprinting, transform enumeration, user enumeration for some VPN systems, and offline pre-shared-key cracking through the bundled psk-crack program.

### プロジェクトの歴史

The project grew out of NTA Monitor research into UDP retransmission backoff fingerprinting. Roy Hills' 2003 white paper explains the observation that many UDP services, including IKE, leave retransmission timing decisions to implementers, creating measurable patterns that can identify VPN products.

ike-scan v1.0 was the initial public release in the project's NEWS file. Subsequent releases expanded platform support, added Windows binaries, accumulated vendor ID and backoff fingerprints, and added psk-crack for aggressive-mode pre-shared-key material captured by ike-scan.

Version 1.9 marked a major feature expansion: IKEv2 packet support, NAT traversal, source IP spoofing on raw-socket systems, stdin dictionaries for psk-crack, Vendor ID fingerprinting, and improved pseudo-random packet generation. Version 1.9.4 moved development from an internal SVN repository to GitHub.

### 採用の歴史

ike-scan became a standard package for VPN assessment work because it targets the exposed UDP/500 and UDP/4500 surfaces that often sit at network borders. The input metadata shows packaging in Homebrew, Debian, Ubuntu, MacPorts, and Nix, and the README documents builds on Linux, BSDs, Solaris, macOS, Cygwin, and several older Unix systems.

### 使われ方

Operators use ike-scan to send IKE phase-1 probes to one or many targets, list responding hosts, inspect transform support, collect Vendor ID payloads, and optionally measure retransmission backoff with --showbackoff. In aggressive mode, --pskcrack output can feed psk-crack for dictionary or brute-force testing of captured pre-shared-key hashes.

### パッケージ好きにとっての重要性

The package is significant because it packages a specific security-research technique, not just a generic network scanner. Its data files, including ike-backoff-patterns and ike-vendor-ids, are part of the value: they turn timing behavior and vendor payloads into repeatable fingerprints that can be updated as products change.

### タイムライン

- 2003: UDP backoff fingerprinting white paper describes ike-scan as the example program.
- v1.0: Initial public release supports Debian, FreeBSD, and OpenBSD builds.
- v1.7: psk-crack and aggressive-mode PSK capture support are added.
- v1.8: Vendor ID and UDP backoff pattern databases expand to 135 vendor IDs and 29 backoff patterns.
- v1.9: IKEv2, NAT traversal, Vendor ID fingerprinting, and stdin dictionaries for psk-crack are added.
- 2013: v1.9.4 moves development from internal SVN to GitHub.

### Related projects

- ike-scan sits beside packet tools such as tcpdump and broader scanners such as Nmap, but its closest related artifact is its own UDP backoff fingerprinting paper. Its psk-crack companion makes it part scanner and part focused IPsec assessment toolkit.

### ソース

- Project README, NEWS file, UDP backoff fingerprinting paper, vendor ID database, GitHub repository metadata, and Homebrew formula metadata.


## セキュリティノート

narrow executable package without higher-risk signals.

- **Geiger リスク:** グリーン / 低
- narrow executable package without higher-risk signals

## 他のパッケージマネージャ記録

- Debian apt - ike-scan - 1.9.5-2: normalized package name match | Debian stable package indexes: ike-scan from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | discover and fingerprint IKE hosts (IPsec VPN Servers) | https://github.com/royhills/ike-scan
- Nix - ike-scan: normalized package name match | nixpkgs package indexes: pkgs/by-name/ik/ike-scan/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- Ubuntu apt - ike-scan - 1.9.5-1ubuntu1: normalized package name match | Ubuntu 24.04 LTS package indexes: ike-scan from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | discover and fingerprint IKE hosts (IPsec VPN Servers) | https://github.com/royhills/ike-scan
- MacPorts - ike-scan: normalized package name match | MacPorts ports tree: security/ike-scan/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1


## Combined YAML source

View the package source record on GitHub. [combined/ike-scan.yml](https://github.com/mxcl/pkgdb/blob/main/combined/ike-scan.yml)


## ソース

- pkg.so package database
- Geiger risk classifier
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph