You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Pinaki Mondal edited this page May 7, 2020
·
2 revisions
SIPVicious Tools for auditing SIP devices
Introduction
Welcome to SIPVicious security tools.
The 4 tools that you should be looking at are:
svmap
svwar
svcrack
svreport
The tools
svmap
This is a sip scanner. When launched against ranges of ip address space, it will identify any SIP servers which it finds on the way. Also has the option to scan hosts on ranges of ports.
See: svmap Usage
svwar
Traditionally a war dialer used to call up numbers on the phone network to identify ones that are interesting from ones that are not. With SIP, you can do something similar to identify active users.
See: svwar Usage
svcrack
This is a password cracker making use of digest authentication. It is able to crack passwords on both registrar servers and proxy servers. It can make use of ranges of numbers or a dictionary file full of possible passwords.
See: svcrack Usage
svreport
Able to manage sessions created by the rest of the tools and export to pdf, xml, csv and plain text.
See: svreport Usage
General help
For usage help make use of -h or --help switch.
And if you're stuck you can always pull up issues on the bug tracker.