# 使用 Homebrew, apt, MacPorts, Nix 安装 ike-scan

查看 ike-scan 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

## 安装

```sh
sudo av install brew:ike-scan
```

其他安装命令:

### macOS

- Homebrew (100%):

```sh
brew install ike-scan
```

  证据: local Homebrew formula metadata

- MacPorts (94%):

```sh
sudo port install ike-scan
```

  证据: MacPorts ports tree: security/ike-scan/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

### Linux

- Debian apt (92%):

```sh
sudo apt install ike-scan
```

  证据: Debian stable package indexes: ike-scan from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz

- Nix (92%):

```sh
nix profile install nixpkgs#ike-scan
```

  证据: nixpkgs package indexes: pkgs/by-name/ik/ike-scan/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

## 软件包事实

- **软件包键:** brew:ike-scan
- **软件包管理器:** Homebrew
- **版本:** 1.9.5
- **来源摘要:** Discover and fingerprint IKE hosts
- **主页:** <https://github.com/royhills/ike-scan>
- **仓库:** <https://github.com/royhills/ike-scan>
- **最后更新:** 2026-06-22T14:03:45-07:00
- **已生成:** 2026-08-03T19:37:03+00:00

## 可执行文件

- ike-scan (别名)
- psk-crack (别名)

## 安装行为

- Bottle: 不可用

## 版本和新鲜度

- 页面生成时间: 2026-08-03
- 管理器版本: 1.9.5
## 项目历史与用法

ike-scan is Roy Hills' command-line scanner for discovering IPsec VPN endpoints that speak IKE and fingerprinting their implementations. The README frames its core jobs as discovery, fingerprinting, transform enumeration, user enumeration for some VPN systems, and offline pre-shared-key cracking through the bundled psk-crack program.

### 项目历史

The project grew out of NTA Monitor research into UDP retransmission backoff fingerprinting. Roy Hills' 2003 white paper explains the observation that many UDP services, including IKE, leave retransmission timing decisions to implementers, creating measurable patterns that can identify VPN products.

ike-scan v1.0 was the initial public release in the project's NEWS file. Subsequent releases expanded platform support, added Windows binaries, accumulated vendor ID and backoff fingerprints, and added psk-crack for aggressive-mode pre-shared-key material captured by ike-scan.

Version 1.9 marked a major feature expansion: IKEv2 packet support, NAT traversal, source IP spoofing on raw-socket systems, stdin dictionaries for psk-crack, Vendor ID fingerprinting, and improved pseudo-random packet generation. Version 1.9.4 moved development from an internal SVN repository to GitHub.

### 采用历史

ike-scan became a standard package for VPN assessment work because it targets the exposed UDP/500 and UDP/4500 surfaces that often sit at network borders. The input metadata shows packaging in Homebrew, Debian, Ubuntu, MacPorts, and Nix, and the README documents builds on Linux, BSDs, Solaris, macOS, Cygwin, and several older Unix systems.

### 使用方式

Operators use ike-scan to send IKE phase-1 probes to one or many targets, list responding hosts, inspect transform support, collect Vendor ID payloads, and optionally measure retransmission backoff with --showbackoff. In aggressive mode, --pskcrack output can feed psk-crack for dictionary or brute-force testing of captured pre-shared-key hashes.

### 为什么软件包爱好者会关心

The package is significant because it packages a specific security-research technique, not just a generic network scanner. Its data files, including ike-backoff-patterns and ike-vendor-ids, are part of the value: they turn timing behavior and vendor payloads into repeatable fingerprints that can be updated as products change.

### 时间线

- 2003: UDP backoff fingerprinting white paper describes ike-scan as the example program.
- v1.0: Initial public release supports Debian, FreeBSD, and OpenBSD builds.
- v1.7: psk-crack and aggressive-mode PSK capture support are added.
- v1.8: Vendor ID and UDP backoff pattern databases expand to 135 vendor IDs and 29 backoff patterns.
- v1.9: IKEv2, NAT traversal, Vendor ID fingerprinting, and stdin dictionaries for psk-crack are added.
- 2013: v1.9.4 moves development from internal SVN to GitHub.

### Related projects

- ike-scan sits beside packet tools such as tcpdump and broader scanners such as Nmap, but its closest related artifact is its own UDP backoff fingerprinting paper. Its psk-crack companion makes it part scanner and part focused IPsec assessment toolkit.

### 来源

- Project README, NEWS file, UDP backoff fingerprinting paper, vendor ID database, GitHub repository metadata, and Homebrew formula metadata.


## 安全说明

narrow executable package without higher-risk signals.

- **Geiger 风险:** 绿色 / 低
- narrow executable package without higher-risk signals

## 其他软件包管理器记录

- Debian apt - ike-scan - 1.9.5-2: normalized package name match | Debian stable package indexes: ike-scan from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | discover and fingerprint IKE hosts (IPsec VPN Servers) | https://github.com/royhills/ike-scan
- Nix - ike-scan: normalized package name match | nixpkgs package indexes: pkgs/by-name/ik/ike-scan/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- Ubuntu apt - ike-scan - 1.9.5-1ubuntu1: normalized package name match | Ubuntu 24.04 LTS package indexes: ike-scan from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | discover and fingerprint IKE hosts (IPsec VPN Servers) | https://github.com/royhills/ike-scan
- MacPorts - ike-scan: normalized package name match | MacPorts ports tree: security/ike-scan/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1


## Combined YAML source

View the package source record on GitHub. [combined/ike-scan.yml](https://github.com/mxcl/pkgdb/blob/main/combined/ike-scan.yml)


## 来源

- pkg.so package database
- Geiger risk classifier
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph