IPVanish Ripper

Proof-of-Concept of IPVanish WireGuard Config Generator Broken Access Control vulnerability.

This vulnerability take advantage of IPVanish WireGuard Config Generator which does not validate the account plan hence one can generate a config to use as a VPN without paying, this code extracts all the configs as a QRCode which one can easily use to connect to any locations (this is now patched).

⚙️ Installations

Github

git clone https://github.com/ncryptsion/ipvanish-ripper.git

NpmJS

npm install

PNPM

pnpm install

🛠️ Setup

Find example@gmail.com and examplepassword in index.js then replace both with your credential.

🚀 Usage

node index.js

_{This project is distributed under MIT License}