Metadata-Version: 2.1
Name: what-vpn
Version: 0.4
Summary: Identify servers running various SSL VPNs
Home-page: https://github.com/dlenski/what-vpn
Author: Daniel Lenski
Author-email: dlenski@gmail.com
License: GPL v3 or later
Platform: UNKNOWN
Requires-Dist: requests (>=2.0.0)

what-vpn
========

Identifies servers running various SSL VPNs. (They should really be called
"TLS-based" VPNs, but "SSL VPN" has become the de facto standard jargon.)
Currently it can recognize…

- Cisco AnyConnect and `OpenConnect (ocserv <https://ocserv.gitlab.io/www>`__
- Juniper Network Connect/Pulse
- PAN GlobalProtect
- Barracuda Networks
- Check Point
- Microsoft SSTP
- `OpenVPN <https://openvpn.net/>`__
- Fortinet
- Array Networks

Examples
--------

::

    $ what-vpn vpn.colorado.edu vpn.northeastern.edu \
        vpn.tnstate.edu vpn.smith.edu vpn.caltech.edu \
        vpn.yale.edu vpn.drew.edu vpn.uca.edu vpn.simmons.edu \
        vpn.nl.edu ssl-vpn.***.com
    vpn.colorado.edu: AnyConnect/OpenConnect (Cisco)
    vpn.northeastern.edu: PAN GlobalProtect (portal)
    vpn.tnstate.edu: PAN GlobalProtect (portal+gateway)
    vpn.smith.edu: Juniper Network Connect
    vpn.caltech.edu: AnyConnect/OpenConnect (Cisco, ASA (9.1(6)6))
    vpn.yale.edu: AnyConnect/OpenConnect (Cisco, ASA (8.4(5)))
    vpn.drew.edu: OpenVPN (OpenVPN-AS)
    vpn.uca.edu: Barracuda (2017)
    vpn.simmons.edu: Check Point (2015, 20%)
    vpn.nl.edu: Check Point
    vpn.***.com: Array Networks (40%)
    ssl-vpn.***.com: no match

    $ what-vpn -v vpn.***.com

    Sniffing ***.***.com ...
      Is it AnyConnect/OpenConnect? AnyConnect/OpenConnect (ocserv)
      Is it Juniper Network Connect? no match
      Is it PAN GlobalProtect? no match
      Is it Barracuda? no match
      Is it Check Point? no match
      Is it SSTP? no match
      Is it OpenVPN? no match
      => OpenConnect

TODO
----

- Identify non-SSL/TLS-based VPNs? (e.g. IPSEC, à la `ike-scan <//github.com/royhills/ike-scan>`__)
- Identify more SSL VPNs: Citrix, Dell/SonicWall, F5 … any others?
- Identify specific versions or flavors of VPN servers?
- Better confidence levels?

Home page
---------

https://github.com/dlenski/what-vpn


