{"repo":"EnableSecurity/sipvicious","free":true,"listed":false,"github":"https://github.com/EnableSecurity/sipvicious","clone":"git clone https://github.com/EnableSecurity/sipvicious.git","description":"SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.","language":"Python","stars":1096,"topics":["sip","voip","password-cracker","svwar","svcrack","svmap","war-dial","svcrash","security","security-tools"],"license":null,"category":"security-tools","readme_excerpt":"Welcome to SIPVicious OSS security tools SIPVicious OSS is a set of security tools that can be used to audit SIP based VoIP systems. Specifically, it allows you to find SIP servers, enumerate SIP extensions and finally, crack their password. To get started read the following: - Getting started on the Wiki - Enable Security blog: SIPVicious Tutorial: VoIP Security Testing with DVRTC. The GitHub wiki remains the primary home for SIPVicious OSS documentation. For usage help make use of -h or --help switch. A note to vendors and service providers If you are looking for professional VoIP and WebRTC penetration testing services, please check out our offerings at Enable Security. The tools The SIPVicious OSS toolset consists of the following tools: - svmap - svwar - svcrack - svreport - svcrash svmap this is a sip scanner. When launched against ranges of ip address space, it will identify any SIP servers which it finds on the way. Also has the option to scan hosts on ranges of ports. Usage: svwar identifies working extension lines on a PBX. A working extension is one that can be registered. Also tells you if the extension line requires authentication or not. Usage: svcrack a password cracker making use of digest authentication. It is able to crack passwords on both registrar servers and proxy servers. Current cracking modes are either numeric ranges or words from dictionary files. Usage: IPv6 target syntax - svwar and svcrack accept -6 with either a bare IPv6 literal such as 2001:db","default_branch":null,"files":null,"tree":[],"storefront":"/r/EnableSecurity","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/EnableSecurity/sipvicious/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}