Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/enablesecurity/sipvicious
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
https://github.com/enablesecurity/sipvicious
audit-sip hacking-tools password-cracker security security-tools sip svcrack svcrash svmap svwar voip war-dial
Last synced: about 2 months ago
JSON representation
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
- Host: GitHub
- URL: https://github.com/enablesecurity/sipvicious
- Owner: EnableSecurity
- License: other
- Created: 2015-03-13T06:11:55.000Z (over 9 years ago)
- Default Branch: master
- Last Pushed: 2022-11-18T14:40:03.000Z (almost 2 years ago)
- Last Synced: 2024-05-19T00:28:04.930Z (4 months ago)
- Topics: audit-sip, hacking-tools, password-cracker, security, security-tools, sip, svcrack, svcrash, svmap, svwar, voip, war-dial
- Language: Python
- Homepage: https://www.enablesecurity.com/sipvicious/oss/
- Size: 863 KB
- Stars: 846
- Watchers: 44
- Forks: 156
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Changelog: Changelog
- License: LICENSE
Awesome Lists containing this project
README
# Welcome to SIPVicious OSS security tools
SIPVicious OSS is a set of security tools that can be used to audit SIP based VoIP systems. Specifically, it allows you to find SIP servers, enumerate SIP extensions and finally, crack their password.
To get started read the following:
- [Getting started on the Wiki](https://github.com/enablesecurity/sipvicious/wiki/Getting-Started)
- Communication Breakdown blog: [Attacking a real VoIP System with SIPVicious OSS](https://www.rtcsec.com/2020/06/02-attacking-voip-system-with-sipvicious/).
For usage help make use of `-h` or `--help` switch.
## A note to vendors and service providers
If you are looking for a professional grade toolset to test your RTC systems, please consider [SIPVicious PRO](https://www.sipvicious.pro).
## The tools
The SIPVicious OSS toolset consists of the following tools:
- svmap
- svwar
- svcrack
- svreport
- svcrash
### svmap
this is a sip scanner. When launched against
ranges of ip address space, it will identify any SIP servers
which it finds on the way. Also has the option to scan hosts
on ranges of ports.
Usage:
### svwar
identifies working extension lines on a PBX. A working
extension is one that can be registered.
Also tells you if the extension line requires authentication or not.
Usage:
### svcrack
a password cracker making use of digest authentication.
It is able to crack passwords on both registrar servers and proxy
servers. Current cracking modes are either numeric ranges or
words from dictionary files.
Usage:
### svreport
able to manage sessions created by the rest of the tools
and export to pdf, xml, csv and plain text.
Usage:
### svcrash
responds to svwar and svcrack SIP messages with a message that
causes old versions to crash.
Usage:
## Installation
Please refer to the [installation documentation](https://github.com/EnableSecurity/sipvicious/wiki/Basics#installation).
## Further information
Check out the [wiki](https://github.com/enablesecurity/sipvicious/wiki) for documentation.