SIPVicious Tool Suite v0.2.6 – SIP/VoIP Security Auditing Tool

SIPVicious suite is a set of tools that can be used to audit SIP based VoIP systems. Why the name? Because the tools are not exactly the nicest thing on earth next to a SIP device. And the play on the sound seems to work. As an extra bonus, it rhymes with the name of Sex Pistol’s bass player.

It’s been a while since we wrote about SIPVicious, way back when it first came out in 2008 – SIPVicious v0.2.3 – VoIP/SIP Auditing Toolkit. It’s come a fair way since v0.2.3 so I thought it’s about time for an update (although v0.2.6 has been out since 2010), you can view the full ChangeLog here.
It currently consists of five tools:

• svmap – this is a sip scanner. Lists SIP devices found on an IP range
• svwar – identifies active extensions on a PBX
• svcrack – an online password cracker for SIP PBX
• svreport – manages sessions and exports reports to various formats
• svcrash – attempts to stop unauthorized svwar and svcrack scans

Requirements
Python – SIPVicious works on any system that supports python 2.4 or greater.
There’s a good blog post covering the new stuff here too, mainly svcrash:
How to crash SIPVicious – introducing svcrash.py
You can download SIPVicious v0.2.6 here:
sipvicious-0.2.6.zip