fiked | IPsec IKEv1 PSKXAUTH MitM attack daemon

fiked is a C library. fiked has no bugs, it has no vulnerabilities, it has a Strong Copyleft License and it has low support. You can download it from GitHub.

this is a fake ike daemon supporting just enough of the standards and cisco extensions to attack commonly found insecure cisco psk+xauth vpn setups. basically, if you know the pre-shared key, also known as shared secret or group password, you can impersonate the vpn gateway in ike phase 1, and learn xauth user credentials in phase 2. this attack [2,3] is not new. it has been known for a long time that ike using psk with xauth is insecure, and this is not the first actual implementation of the attack. the configuration supported by fiked is ike aggressive mode using pre-shared keys and xauth. supported algorithms are des, 3des, aes128, aes192, aes256;