Vpn

OpenVPN Configuration

OpenVPN configuration files can contain client certificates, private-key references, embedded keys, or password-file references.

Metadata

id: vpn.openvpn-config
category: vpn
sensitivity: high
subcategory: openvpn
artifact types: credential, configuration, private-key
tags: openvpn, vpn

Path Matchers

Path	Kind	Platforms
`%USERPROFILE%\OpenVPN\config\*.ovpn`	`glob`	`windows`
`%PROGRAMFILES%\OpenVPN\config\*.ovpn`	`glob`	`windows`
`/etc/openvpn/*/.conf`	`glob`	`linux`
`/etc/openvpn/*/.ovpn`	`glob`	`linux`
`$HOME/.openvpn/*.ovpn`	`glob`	`linux`, `macos`
`$HOME/Library/Application Support/OpenVPN Connect/profiles/`	`directory`	`macos`

Content Indicators

Literal strings:

auth-user-pass
<key>
pkcs12

Credential Types

private-key
password

Impact

credential_access
remote_access

References

SSH Authentication Logs

SSH authentication logs can reveal accepted login events, usernames, source addresses, and remote access patterns.

WireGuard Configuration

WireGuard configuration files commonly contain interface private keys and peer connection details.

On this page

Metadata Path Matchers Content Indicators Credential Types Impact References