Sippts is a suite of tools to audit VoIP servers and devices using SIP protocols. Sippts is programmed in Perl script and it consists of:
+ Sipscan : Fast scanner for SIP services that uses multithread. Sipscan can check IP and port ranges and works over UDP or TCP.
+ Sipexten : Identifies extensions on a SIP server. Sipexten uses multithread and can check IP and port ranges.
+ Sipcrack : Remote password cracker. Sipcrack uses multithread and can test passwords for several users in IP and port ranges.
+ Sipinvite : Check if a server allow us to make calls without authentication. If the SIP server has a bad configuration, it will allows us to make calls to external numbers. Also it can allow us to transfer the call to a second external number.
+ Sipsniff : Simple sniffer for SIP protocols that allows us to filter by SIP method type.
Sippts was tested on:
* Mac OS X
Use and Download:
git clone https://github.com/Pepelux/sippts && cd sippts
sudo apt-get install libnet-pcap-perl libio-socket-ip-perl libsocket-perl libnetaddr-ip-perl libdbd-sqlite3-perl
sudo cpan -i IO:Socket:Timeout
sudo cpan -i String:HexConvert
perl sipscan.pl -h 192.168.0.1
perl sipexten.pl -h 192.168.0.1 -e 100-200 -v
perl sipcrack.pl -h 192.168.0.1 -w wordlist
sudo perl sipsniff.pl -i eth0