Tools

SIPVicious Tools for auditing SIP devices

Introduction

Welcome to SIPVicious security tools.

The 4 tools that you should be looking at are:

• svmap
• svwar
• svcrack
• svreport

The tools

svmap

This is a sip scanner. When launched against ranges of ip address space, it will identify any SIP servers which it finds on the way. Also has the option to scan hosts on ranges of ports.
See: svmap Usage

svwar

Traditionally a war dialer used to call up numbers on the phone network to identify ones that are interesting from ones that are not. With SIP, you can do something similar to identify active users.
See: svwar Usage

svcrack

This is a password cracker making use of digest authentication. It is able to crack passwords on both registrar servers and proxy servers. It can make use of ranges of numbers or a dictionary file full of possible passwords.
See: svcrack Usage

svreport

Able to manage sessions created by the rest of the tools and export to pdf, xml, csv and plain text.
See: svreport Usage

General help

For usage help make use of -h or --help switch.

And if you're stuck you can always pull up issues on the bug tracker.