A tool to perform SIP/SDP INVITE message flooding over UDP/IP.
The purpose of this test-suite is to evaluate implementation level security and robustness of Session Initiation Protocol (SIP) implementations.
SIP Army Knife is a fuzzer that searches for cross site scripting, SQL injection, log injection, format strings, buffer overflows, and more.
SIPcrack is a suite for sniffing and cracking the digest authentication used in the SIP protocol
SIPVicious suite is a set of tools that can be used to audit SIP based VoIP systems. It currently consists of four tools:. svmap – this is a sip scanner. Lists SIP devices found on an IP range svwar – identifies active extensions on a PBX svcrack – an online password cracker for SIP PBX svreport – manages sessions and exports reports to various formats svcrash – attempts to stop unauthorized svwar and svcrack scans.
Is a small and simple RTP fuzzer that has been successfully tested on a small number of SIP phones
homepage kali A command line tool used to flood any device that is processing RTP.
enumIAX is an Inter Asterisk Exchange protocol username brute-force enumerator.
A UDP Inter-Asterisk_eXchange (i.e. IAX) packet was captured from an IAX channel between two Asterisk IP PBX’s.
ACE works by using DHCP, TFTP, and HTTP in order to download the VoIP corporate directory.
SCTPscan is a tool to scan SCTP enabled machines. Typically, these are Telecom oriented machines carrying SS7 and SIGTRAN over IP. Using SCTPscan, you can find entry points to Telecom networks. This is especially useful when doing pentests on Telecom Core Network infrastructures. SCTP is also used in high-performance networks (internet2).
homepage kali VoIP Hopper does this by mimicking the behavior of an IP Phone, in Cisco, Avaya, Nortel, and Alcatel-Lucent environments. This requires two important steps in order for the tool to traverse VLANs for unauthorized access. First, discovery of the correct 12 bit Voice VLAN ID (VVID) used by the IP Phones is required. VoIP Hopper supports multiple protocol discovery methods (CDP, DHCP, LLDP-MED, 802.1q ARP) for this important first step. Second, the tool creates a virtual VoIP ethernet interface on the OS. It then inserts a spoofed 4-byte 802.1q vlan header containing the 12 bit VVID into a spoofed DHCP request. Once it receives an IP address in the VoIP VLAN subnet, all subsequent ethernet frames are “tagged” with the spoofed 802.1q header. VoIP Hopper is a VLAN Hop test tool but also a tool to test VoIP infrastructure security.
See folder tests
Interactive sip toolkit for packet manipulations, sniffing, man in the middle attacks, fuzzing, simulating of dos attacks.
Performs a SIP registration and then optionally places a call into an echo test, plays audio, and verifies that the audio is echoed back clearly. The result is returned using shell exit codes.
SIPq is a test tool for SIP protocol. Its ambition is to be a next generation of SIPp. There is for sure a long way to go. The primary purpose of it for now is for study, on how to design a SIP stack and test tool. If you want to do something serious, go for SIPp.
Async SIP + RTP test tool
This project offers set of tools for testing SIP.
SIP Swiss Army Knife, very useful test utility
KiF: a Stateful SIP Fuzzer. Free of charge, but license agreement must be signed.
Danger!! China language