{"id":13787924,"url":"https://github.com/pentesteracademy/voipshark","last_synced_at":"2025-05-12T02:30:45.221Z","repository":{"id":215861481,"uuid":"189598801","full_name":"pentesteracademy/voipshark","owner":"pentesteracademy","description":"VoIPShark is a open source VoIP Analysis Platform which will allow people to analyze live or stored VoIP traffic, easily decrypt encrypted SRTP stream, perform macro analysis, generate summary specific to VoIP traffic/nodes and export calls/SMS/DTMF in popular user friendly file formats.","archived":false,"fork":false,"pushed_at":"2020-02-18T07:49:04.000Z","size":17480,"stargazers_count":75,"open_issues_count":0,"forks_count":19,"subscribers_count":3,"default_branch":"master","last_synced_at":"2024-08-03T21:01:23.761Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Lua","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/pentesteracademy.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2019-05-31T13:31:14.000Z","updated_at":"2024-08-03T21:01:25.474Z","dependencies_parsed_at":null,"dependency_job_id":"3d9ced59-b808-40eb-94d6-29b574ca1201","html_url":"https://github.com/pentesteracademy/voipshark","commit_stats":null,"previous_names":["pentesteracademy/voipshark"],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pentesteracademy%2Fvoipshark","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pentesteracademy%2Fvoipshark/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pentesteracademy%2Fvoipshark/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pentesteracademy%2Fvoipshark/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/pentesteracademy","download_url":"https://codeload.github.com/pentesteracademy/voipshark/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":225112963,"owners_count":17422833,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-08-03T21:00:33.413Z","updated_at":"2024-11-18T01:31:31.965Z","avatar_url":"https://github.com/pentesteracademy.png","language":"Lua","funding_links":[],"categories":["Open-source tools"],"sub_categories":[],"readme":"\u003cimg src=\"https://user-images.githubusercontent.com/25884689/58698021-04963d00-83cd-11e9-8962-54a3b36a12b2.png\" width=\"50%\" \u003e\r\n\r\n## VoIPShark: Open Source VoIP Analysis Platform\r\n\r\nVoIPshark is an open source platform for VoIP analysis. It is created as a collection of Wireshark plugins. After installation, it will be available within Wireshark. This platform was created while working on \"VoIP Traffic Analysis\" course. Those interested can check the course here: https://www.pentesteracademy.com/course?id=43\r\n\r\nVoIPShark will enable the user to do the following:\r\n\r\n1. Perform macro analysis on VoIP traffic\r\n2. Decrypt live or stored VoIP traffic while preserving packet structure and time information\r\n3. Export VoIP audio streams to popular media formats\r\n4. Detect the following threats/attacks\r\n\r\n   * Message flood\r\n   * Invite flood\r\n   * SIP MiTM attack\r\n   * Teardown\r\n   * Enumeration\r\n   * Attack tool detection\r\n\r\n### Demo Video: https://www.youtube.com/watch?v=oSLyqt8A8lI\r\n\r\n\r\n## Installation\r\n\r\n### Step 1: Install library\r\n\r\n#### For Linux and MacOS:\r\n\r\n1. Create directory \"/usr/local/lib/lua/5.2/\" if it does not exist\r\n\r\n       mkdir -p /usr/local/lib/lua/5.2/\r\n\r\n2. Download VoIPShark and copy lockbox folder to \"/usr/local/lib/lua/5.2/\" directory\r\n\r\n       git clone https://github.com/pentesteracademy/voipshark.git\r\n       mv voipshark/lockbox /usr/local/lib/lua/5.2/\r\n   \r\n#### For Windows:\r\n\r\nDownload VoIPShark and copy lockbox folder to wireshark program directory.\r\n\r\nTo find out the location of wireshark program directory, check `Help \u003e About Wireshark \u003e Folders` (highlighted in green)\r\n\u003cp align=\"center\"\u003e\r\n\u003cimg src=\"https://user-images.githubusercontent.com/25884689/58771844-ee64c880-85e8-11e9-95be-2af3e7d60504.png\" width=\"60%\" \u003e\r\n\u003c/p\u003e\r\n\r\n\r\n\r\n### Step 2: Installing VoIPShark\r\n\r\n1. Copy the \"plugins\" directory to Wireshark personal plugins directory.\r\n2. Start wireshark. :)\r\n\r\nOne can get the location of wireshark plugins directory by checking `Help \u003e About Wireshark \u003e Folders` (highlighted in yellow)\r\n\r\n![](https://user-images.githubusercontent.com/743886/43845711-72426d36-9ae1-11e8-9945-0bbe8e078e2a.png)\r\n\r\n\r\n## Tool featured at\r\n\r\n- DEF CON China 1.0 Main stage \u003chttps://www.defcon.org/html/dc-china-1/dc-cn-1-speakers.html\u003e\r\n- Blackhat Asia 2019 Arsenal \u003chttps://www.blackhat.com/asia-19/arsenal/schedule/index.html#voip-wireshark-attack-defense-toolkit-14349\u003e\r\n\r\n\r\n## Sister Project\r\n\r\nPA-Toolkit (https://github.com/pentesteracademy/patoolkit)\r\n\r\n\r\n## Author\r\n\r\n- Nishant Sharma, R \u0026 D Manager, Pentester Academy \u003cnishant@binarysecuritysolutions.com\u003e\r\n- Ashish Bhangale, Sr. Security Researcher, Pentester Academy \u003cashish@binarysecuritysolutions.com\u003e \r\n- Jeswin Mathai, Security Researcher, Pentester Academy \u003cjeswin@binarysecuritysolutions.com\u003e \r\n\r\nUnder the guidance of Mr. Vivek Ramachandran, CEO, Pentester Academy\r\n\r\n\r\n## Screenshots\r\n\r\nDecrypting SRTP: SRTP Packets\r\n\r\n![Wireshark_2019-04-30_13-19-16](https://user-images.githubusercontent.com/25884689/58720935-1b0cba80-8406-11e9-9473-2142f93377de.png)\r\nDecrypting SRTP: Enabling Auto Decryption\r\n\r\n\r\n\u003cimg width=\"400\" alt=\"Wireshark_2019-04-30_13-19-55\" src=\"https://user-images.githubusercontent.com/25884689/58720923-15af7000-8406-11e9-9af5-835e1a52303e.png\"\u003e\r\n\r\n\r\nDecrypting SRTP: Decrypted SRTP (RTP)\r\n\r\n![Wireshark_2019-04-30_13-20-14](https://user-images.githubusercontent.com/25884689/58721022-5b6c3880-8406-11e9-94fa-7a03d6558f0f.png)\r\n\r\n\r\n\r\nExporting Call Audio: Exported Streams \r\n\r\n\u003cimg width=\"621\" alt=\"2019-04-30_12-59-42\" src=\"https://user-images.githubusercontent.com/25884689/58720944-252eb900-8406-11e9-80df-1e19fd1ebdd0.png\"\u003e\r\n\r\n\r\n\r\n\r\nSIP Information Gathering : SIP Auth Export\r\n\r\n\u003cimg width=\"621\" alt=\"Wireshark_2019-04-30_13-09-11\" src=\"https://user-images.githubusercontent.com/25884689/58720623-4e027e80-8405-11e9-85a7-6a39c030af4e.png\"\u003e\r\n\r\nSIP Information Gathering : DTMF\r\n\r\n\u003cimg width=\"634\" alt=\"Wireshark_2019-04-30_13-13-18\" src=\"https://user-images.githubusercontent.com/25884689/58720647-55c22300-8405-11e9-9f6f-95ca7c206440.png\"\u003e\r\n\r\n\r\n VoIP Attack Detection: Bruteforce\r\n\r\n\u003cimg width=\"766\" alt=\"Wireshark_2019-04-30_13-08-07\" src=\"https://user-images.githubusercontent.com/25884689/58720310-63c37400-8404-11e9-8418-509f7eb0ff84.png\"\u003e\r\n\r\n\r\n VoIP Attack Detection: Unauthenticated Users\r\n\r\n\u003cimg width=\"381\" alt=\"Wireshark_2019-04-30_13-17-16\" src=\"https://user-images.githubusercontent.com/25884689/58720237-34ad0280-8404-11e9-8605-1b1bf41fa58d.png\"\u003e\r\n\r\n\r\n## License\r\n\r\n\r\nThis program is free software: you can redistribute it and/or modify\r\nit under the terms of the GNU General Public License v2 as published by\r\nthe Free Software Foundation.\r\n\r\nThis program is distributed in the hope that it will be useful,\r\nbut WITHOUT ANY WARRANTY; without even the implied warranty of\r\nMERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the\r\nGNU General Public License for more details.\r\n\r\nYou should have received a copy of the GNU General Public License\r\nalong with this program.  If not, see \u003chttp://www.gnu.org/licenses/\u003e.\r\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fpentesteracademy%2Fvoipshark","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fpentesteracademy%2Fvoipshark","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fpentesteracademy%2Fvoipshark/lists"}