SIPVicious Changelog

What's new in SIPVicious 0.2.8

Mar 14, 2013
  • Feature: INVITE sends a BYE and supports ACK
  • Feature: man pages can be produced with --manpage and man pages are included
  • Bug fix: removed fingerprinting completely
  • Change: moved pptable.py and svhelper to libs/
  • Change: Number of changes to adhere to Debian's guidelines (copyright/license notices etc)
  • Bug fix: fixed an svcrack unhandled exception

New in SIPVicious 0.2.7 (Mar 14, 2013)

  • Feature: svcrash.py has a new option -b which bruteforces the attacker's port
  • Feature: svcrack.py now tries the extension as password by default, automatically
  • Feature: svcrack.py and svwar.py now support setting of source port
  • Feature: new parameter --domain can be passed to all tools which specifies a custom domain in the SIP uri instead of the destination IP
  • Feature: new --debug switch which shows the messages received
  • Bug fix: Sometimes nonces could not be extracted due to an incorrect regex
  • Bug fix: Fixed an unhandled exception when decoding tags
  • Bug fix: now using hashlib when available instead of md5
  • Bug fix: removed the space after the SIP address in the From header whichled to newer version of Asterisk to ignore the SIP messages
  • Bug fix: dictionaries with new lines made svcrack.py stop without this fix
  • Change: renamed everything to start with sv*
  • Bug fix: changed the way shelved files are opened by the fingerprinting module
  • Change: fingerprinting disabled by default since it was giving too many problems and very little benefits

New in SIPVicious 0.2.6 (Jun 23, 2010)

  • Feature: svcrash.py introduced - aimed at mitigating attacks by svwar.py and svcrack.py
  • Bug fix: helper.py updated to prevent choking on malformed tags

New in SIPVicious 0.2.4 (Aug 11, 2008)

  • Feature: svwar.py can now scan for templated numbers. This allows more flexible usage of ranges of numbers, allowing for prefixes and suffixes as need be ;-)
  • Bug fix: svwar.py now sends ACK to be nice to other devices.
  • Bug fix: each tag is padded with a unique 32 bit
  • Bug fix: Contact header is always added to the request to always send well formed SIP requests
  • Bug fix: Large data is sent fragmented now (mysendto)
  • Bug fix: svwar.py now handles new SIP response codes

New in SIPVicious 0.2.3 (Jun 4, 2008)

  • Feature: Fingerprinting support for svmap. Included fphelper.py and 3 databases used for fingerprinting.
  • Feature: Added svlearnfp.py which allows one to add new signatures to db and send them to the author.
  • Feature: Added DNS SRV check to svmap. Use ./svmap.py --srv domainname.com to give it a try