Collaborate Disseminate
I would like to include the following IPs to a whitelist. However I can only create a single CIDR range to be included. Given the below IPs, what CIDR range should be used?
123.45.67.3
123.45.68.3
Continue reading How to annotate IPV4 CIDR range in /32 notation for the following IPs
I’m studying IKEv1+XAUTH+Aggressive vulnerabilities and I’ve found the fiked tool that knowing preshared and group id can steal user credentials.
I’m trying to use this tool, but it doesn’t work and I can’t explain why.
This is my setup:
… Continue reading How to properly use FakeIKEd (fiked) tool (IPSec attack)
I’m trying to setup an Ikev1 XAUTH lab in order to test some attacks (in particular the aggressive mode and Fake Ike attack).
I have three virtual machines:
-A Fedora 31 machine running this container https://github.com/hwdsl2/docke… Continue reading VPN on Virtual Machine pentest lab setup
I am trying to create an IPsec Tunnel that connects two devices (VMs – Linux Centos). I mistakenly thought IPsec Tunnel meant VPN, so I used OpenVPN (application and protocol) and managed to get it to work fine.
The only issue is that I w… Continue reading Creating/Configuring an IPsec tunnel [closed]
Guidance on the PRIME profile for IPsec (https://www.ncsc.gov.uk/guidance/using-ipsec-protect-data) does not explicitly mention the use of PFS.
Is there a recommendation for its use in the Prime profile I’m missing?
Continue reading Is PFS recommended by the NCSC in the PRIME profile for IPsec
I’m looking for a way to limit the certs that my IPsec can accept. I’m using StrongSwan (swanctl version 5.7), I want to accept only certs coming from a remote with a name of yoji.*.example.com
I searched a lot on the internet. The docume… Continue reading StrongSwan, IPsec remote certs and cert_policy
I’m looking for a way to limit the certs that my IPsec can accept. I’m using StrongSwan (swanctl version 5.7), I want to accept only certs coming from a remote with a name of yoji.*.example.com
I searched a lot on the internet. The docume… Continue reading StrongSwan, IPsec remote certs and cert_policy
From our team’s experience so far, we have found out that if you want to connect to an IP Sec VPN it does not automatically advertise the route to the clien and it has to be done manually in the client.
Is this bug, missing configuration … Continue reading How can StrongSwan server for IP Sec VPN automatically advertise routes?
There is something which is bothering me when i think about the CA cert and Local cert.
Below are my queries which pertains to juniper but may be generic as well.
1) “request security pki ca-certificate enroll ca-profile ROOT2” The above… Continue reading CA certificate and Local certificate
Currently i am using TLS protocol for a secure communication between my server and client. I use PKI for key/certificate Management. If i want to switch to IPsec for secure communication, how will the PKI be affected or what changes should… Continue reading What are the changes in PKI when i move from TLS protocol to IPSec Protocol?