SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.

This honeypot is designed to listen on all TCP and UDP ports. It emulates the following services: SSH (22/tcp) telnet (23/tcp) SMTP (25/tcp) HTTPS (443/tcp only) HTTP GET and CONNECT (on every other tcp port) SIP (5060/udp, with special support to detect sipvicious scans) Netis factory backdoor HTTP is autodetected by monitoring whether the first bytes sent by the client are either GET or CONNECT. In case of HTTP CONNECT requests, the emulated proxy always loops back to the honeypot itself. Similarly, SSL/TLS is also autodetected by checking if the first bytes sent by the client look like the first bytes of the SSL Client Hello handshake message. Any other unrecognized TCP connection or UDP packet is logged as-is in hexdump-like form.

SIPVicious PRO docker image to make it easier to run the toolset anywhere

VoIP security testing toolset for ANDRAX-NG

SIPVicious suite is a set of tools that can be used to audit SIP based VoIP systems. This suite has five tools: svmap, svwar, svcrack, svreport, svcrash.

Detect and block scanners based on pattern match headers (e.g. sipvicious User-Agent header)

No description available

Automatically exported from code.google.com/p/sipvicious

Automatically exported from code.google.com/p/sipvicious

Automatically exported from code.google.com/p/sipvicious

Automatically exported from code.google.com/p/sipvicious

No description available

Automatically exported from code.google.com/p/sipvicious

No description available

No description available

Making some add to sipvicious

SIPVicious as a nix flake

voip security

A SIP scanner written in Golang, inspired by SIPvicious.