January 16 2008

VoIP Hacks and Tools

Please don’t use these tools to break-in, hack, or otherwise disrupt your VoIP network. Here are some tools that may come in handy to load test, secure and verify your VoIP roll-out.

Asteroid

Asteroid is a SIP denial of service attack and can be found here http://www.infiltrated.net/asteroid/.

Callflow Sequence Diagram Generator

This collection of scripts uses your packet capture data and creates a callflow sequence diagram. http://callflow.sourceforge.net/.

PJSIP Open Source SIP Stack

PJSIP lets you create large number of calls to load test your system. http://www.pjsip.org/.

Nastysip

Nastysip generates bogus sip messages and sends them to any peer. Good tool for SIP load testing. http://phoenix.labri.fr/documentation/sip/Documentation/Material/Clients/Tools/
Test/NastySIP/SX%20Design.htm
.

Distributed SIP Analyzer

Web based web analyzer that can collect/store information from multiple subnets and show results via browser. http://ant.comm.ccu.edu.tw/sip/.

SIP Proxy

SIP Proxy allows you to eavesdrop on and manipulate traffic in real-time. http://sourceforge.net/projects/sipproxy.

SIP Scenario Generator

Creates SIP call flows or scenario diagrams in HTML format from packet capture files. http://www.iptel.org/~sipsc/.

SIPP

SIP traffic generator. http://sipp.sourceforge.net/.

SIP Swiss Army knife

Allows admins to run tests on SIP devices. http://sipsak.org/.

VoIPong

Sniffs traffic and creates .wav files based on traffic. http://www.enderunix.org/voipong/.

Web Interface for SIP Trace

WISP captures traffic from remote hosts and shows live SIP messages to allow for easy debugging. http://www.devel-it.org/index.php?modulo=projetos&id=2.