SIPVicious v0.2.3 – VoIP/SIP Auditing Toolkit

June 11, 2008 – 6:10 AM

SIPVicious suite is a set of tools that can be used to audit SIP based VoIP systems. It currently consists of four tools:

• svmap – this is a sip scanner. Lists SIP devices found on an IP range
• svwar – identifies active extensions on a PBX
• svcrack – an online password cracker for SIP PBX
• svreport – manages sessions and exports reports to various formats

svmap

This is a sip scanner. When launched against ranges of ip address space, it will identify any SIP servers which it finds on the way. Also has the option to scan hosts on ranges of ports. For usage instructions check out SvmapUsage.

svwar

Traditionally a war dialer used to call up numbers on the phone network to identify ones that are interesting from ones that are not. With SIP, you can do something similar to identify active users.

svcrack

This is a password cracker making use of digest authentication. It is able to crack passwords on both registrar servers and proxy servers. It can make use of ranges of numbers or a dictionary file full of possible passwords.

svreport

Able to manage sessions created by the rest of the tools and export to pdf, xml, csv and plain text.

You can download SIPVicious v0.2.3 here:

sipvicious-0.2.3.tar.gz

Or read more here.

Source: Darknet