[VOIPSEC] SIPVicious - Tools for auditing SIP devices

[sandro gauci]

Dear all,

I just released version 0.2 of SIPVicious tool suite at:
http://sipvicious.googlecode.com/files/sipvicious-0.2.tar.gz
or http://tinyurl.com/3xu5z9

Put up a screencast of the tools in action at:
http://tinyurl.com/3yq8k7

What is SIPVicious tool suite?
Consists of 4 tools:

     * svmap: an active scanner to identify SIP devices on the network
     * svwar: scans SIP PBX servers for existing extensions
     * svcrack: an online password cracker against SIP PBX servers
     * svreport: manages sessions by the other tools + exports 
       to pdf, xml (html), csv and plain text


Notable new features include:

     * Session support which allows you to resume previous scans as well as store the results in database format
     * Exporting of previous results to various formats: pdf, xml (html), csv and plain text
     * Easy updating by making use of subversion (svn update)
     * Better UI, more intuitive help, clean output and more debug info when needed
     * And my favorite feature: random scanning techniques

Cheers,

-- 
Sandro Gauci
MaltaInfosec - http://maltainfosec.org/
SIPVicious - http://sipvicious.org/