viproy-voipkit

Discontinued Viproy was a PoC VoIP security assessment tool which had several modules and exploits to maintain. However, it was developed as a modules set to Metasploit Framework. As Metasploit Framework had significant updates, Viproy's current modules won't be able to work unless you use legacy...

resiprocate

Overview The reSIProcate repository contains the following C++ libraries and applications: resip library: comprehensive RFC3261 SIP stack dum Dialog Usage Manager library: high level SIP library for creating SIP user agents no media stack recon library: high level SIP UA library with media stack...

SigPloit

List of Contributors Rosalia D'Alessandro Ilario Dal Grande SigPloit SigPloit a signaling security testing framework dedicated to Telecom Security professionals and reasearchers to pentest and exploit vulnerabilites in the signaling protocols used in mobile operators regardless of the geneartion...

WireBug

WireBug WireBug is a tool set for Voice-over-IP penetration testing. It is designed as a wizard which makes it easy to use. The tools are build for single using too, so every tool is its own python or bash program. Installation Read the Installation Guide in the wiki. Tools FullBridge: This is a...

SentryPeer

Protect your SIP Servers from bad actors Special thanks to Deutsche Telekom Security GmbH for sponsoring us! Very kind! Why not give us a star and follow us onTwitter! Table of Contents Introduction Overview Features Talks Adoption Design Docker Environment Variables Installation Homebrew macOS o...

Mitel 6000 - OS Command Injection

A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones through 6.4 SP4 R6.4.0.4006, and the 6970 Conference Unit through 6.4 SP4 R6.4.0.4006 or version V1 R0.1.0, could allow an unauthenticated attacker to conduct a command injection attack due to insufficient paramete...

mach_race

Mach Race OS X Local Privilege Escalation Exploit c fG! 2015, 2016, [email protected] - https://reverse.put.as A SUID, SIP, and binary entitlements universal OS X exploit CVE-2016-1757. Usage against a SUID binary: ./machraceserver /bin/ps compatmode for i in seq 0 1000000; do...

bluebox

Bluebox work in progress A collection of exploits for different VoIP products. Thanks to the Go Exploit Framework. If you ended up here looking for a VoIP pentesting solution, check out Sippts sippts-gui in Kali or SIPVicious. This project is more focused on the exploitation phase. Install...

CVE-2023-42860

CVE-2023-42860 Exploit for CVE-2023-42860 for research purposes only. This exploit works for versions of macOS earlier to 13.3, even though Apple´s changelog says it was fixed in version 14.1. Steps 1. Download the InstallAssistant.pkg 2. Modify the variable TARGETFILE on the exploit.sh file to a...

[SECURITY] Fedora 44 Update: libre-4.11.0-1.fc44

Libre is a generic library for real-time communications with async I/O support. Features are a SIP stack RFC 3261, SDP, RTP and RTCP, SRTP and SRTCP Secure RTP, DNS client, STUN/TURN/ICE stack, BFCP, HTTP stack with client/server, Websockets, Jitter buffer, async I/O poll, epoll, select, kqueue,...

[SECURITY] Fedora 44 Update: baresip-4.11.0-1.fc44

A modular SIP user-agent with support for audio and video, and many IETF standards such as SIP, SDP, RTP/RTCP and STUN/TURN/ICE for both, IPv4 and IPv6. Additional modules provide support for audio codecs like Codec2, G.711, G.722, GSM, L16 and Opus, audio drivers like ALSA, GStreamer, JACK Audio...

[SECURITY] Fedora 43 Update: baresip-4.11.0-1.fc43

A modular SIP user-agent with support for audio and video, and many IETF standards such as SIP, SDP, RTP/RTCP and STUN/TURN/ICE for both, IPv4 and IPv6. Additional modules provide support for audio codecs like Codec2, G.711, G.722, GSM, L16 and Opus, audio drivers like ALSA, GStreamer, JACK Audio...

[SECURITY] Fedora 43 Update: libre-4.11.0-1.fc43

Libre is a generic library for real-time communications with async I/O support. Features are a SIP stack RFC 3261, SDP, RTP and RTCP, SRTP and SRTCP Secure RTP, DNS client, STUN/TURN/ICE stack, BFCP, HTTP stack with client/server, Websockets, Jitter buffer, async I/O poll, epoll, select, kqueue,...

Digital-Signature-Hijack

Digital Signature Hijack Hijacking legitimate digital signatures is a technique that can be used during red team assessments in order to sign PowerShell code and binaries. This could assist to bypass Device Guard restrictions and maintain stealthy in an engagement. DigitalSignatureHijack is a...

CVE-2024-31964

CVE-2024-31964 CVE-2024-31964 PoC: Mitel 6900w Series SIP Phone - Temporary Authentication Bypass Vulnerability details Summary It consists of a temporary authentication bypass vulnerability in the HTTP administrative website panel of several Mitel Products. Impact Allows an attacker to modify th...

sippts

Sippts 是什么？ Sippts 是一套使用 SIP 协议审计 VoIP 服务器和设备的工具。Sippts 使用 Python 编写，它允许我们检查 VoIP 服务器基于 SIP 协议的安全性。 它是免费的吗？ 是的。你可以自由使用、修改和分发。如果进行了修改，请附上对本网站的引用。 可以将 sippts 用于非法目的吗？ 此工具的目的是审计你自己的系统，或对已获得明确授权的系统执行渗透测试。对于滥用此工具的行为，我不承担任何责任。 用法 显示帮助： root@kitploit: sippts -h usage: sippts -h -up...

cve-2022-27255

CVE-2022-27255 - Realtek eCos SDK SIP ALG buffer overflow This repository contains the materials for the talk "Exploring the hidden attack surface of OEM IoT devices: pwning thousands of routers with a vulnerability in Realtek’s SDK for eCos OS.", which was presented at DEFCON30. The contents of...

viproy-voipkit

已停止维护 Viproy 是一个 PoC 级 VoIP 安全评估工具，曾包含多个模块和漏洞利用代码需要维护。然而，它是作为 Metasploit 框架的模块集开发的。随着 Metasploit 框架的重大更新，除非您使用旧版 Kali Linux 和 Metasploit 框架，否则 Viproy 的现有模块将无法正常工作。我很久以前就停止了该项目，因为过去 5 年我停止从事 VoIP 和 UC 项目的工作。 如果您仍然需要这些模块，"infosecconsultant" 在 Issues...

decrypted

decrypted FairPlay decryptor dump iPA for iOS Application that running on macOS with SIP-enabled, using CVE-2025-24204. Support macOS 15.0-15.2 STILL UNDER DEVELOPMENT Credits CVE-2025-24204 Decryptor...

asterisk

AsteriskR 开源 PBX root@kitploit: By Mark Spencer and the Asterisk.org developer community. Copyright C 2001-2025 Sangoma Technologies Corporation and other copyright holders. 安全 在尝试配置和运行 Asterisk 服务器之前，您必须阅读并充分理解安全信息文档的全部内容。 有关更多信息，请参阅重要安全注意事项。 什么是 Asterisk？ Asterisk 是一个开源 PBX...