voip | Penetration Testing Tools

enumIAX

February 18, 2014portsInformation Gatheringenumeration, infogathering, recon, voip

enumIAX is an Inter Asterisk Exchange protocol username brute-force enumerator. enumIAX may operate in two distinct modes; Sequential Username Guessing or Dictionary Attack.

iaxflood

February 18, 2014portsSniffing/Spoofing, Stress Testingstresstesting, voip

A UDP Inter-Asterisk_eXchange (i.e. IAX) packet was captured from an IAX channel between two Asterisk IP PBX’s. The content of that packet is the source of the payload for the attack embodied by this tool.

inviteflood

February 18, 2014portsSniffing/Spoofing, Stress Testingspoofing, stresstesting, voip

A tool to perform SIP/SDP INVITE message flooding over UDP/IP.

ohrwurm

February 18, 2014portsSniffing/Spoofing, Vulnerability Analysisfuzzing, rtp, sniffing, spoofing, voip, vulnanalysis

ohrwurm is a small and simple RTP fuzzer that has been successfully tested on a small number of SIP phones.

protos-sip

February 18, 2014portsSniffing/Spoofingsniffing, spoofing, voip

The purpose of this test-suite is to evaluate implementation level security and robustness of Session Initiation Protocol (SIP) implementations.

rtpbreak

February 18, 2014portsSniffing/Spoofingspoofing, voip

With rtpbreak you can detect, reconstruct and analyze any RTP session. It doesn’t require the presence of RTCP packets and works independently form the used signaling protocol (SIP, H.323, SCCP, …).

rtpflood

February 18, 2014portsStress Testingstresstesting, voip

A command line tool used to flood any device that is processing RTP.

rtpinsertsound

February 18, 2014portsSniffing/Spoofingspoofing, voip

A tool to insert audio into a specified audio (i.e. RTP) stream was created in the August – September 2006 timeframe. The tool is named rtpinsertsound.