SentryPeer

Protect your SIP Servers from bad actors Special thanks to Deutsche Telekom Security GmbH for sponsoring us! Very kind! Why not give us a star and follow us onTwitter! Table of Contents Introduction Overview Features Talks Adoption Design Docker Environment Variables Installation Homebrew macOS o...

CVE-2023-42860

CVE-2023-42860 Exploit for CVE-2023-42860 for research purposes only. This exploit works for versions of macOS earlier to 13.3, even though Apple´s changelog says it was fixed in version 14.1. Steps 1. Download the InstallAssistant.pkg 2. Modify the variable TARGETFILE on the exploit.sh file to a...

decrypted

decrypted FairPlay decryptor dump iPA for iOS Application that running on macOS with SIP-enabled, using CVE-2025-24204. Support macOS 15.0-15.2 STILL UNDER DEVELOPMENT Credits CVE-2025-24204 Decryptor...

Mr.SIP

Marco de seguridad, ataque y auditoría SIP Mr.SIP...

fusionpbx_rce_vulnerability

Prelude This simple code tries to complete the implementation of the chained vulnerability introduced by Dustin Cobb at RCE Using Caller ID – Multiple Vulnerabilities In FusionPBX. RCE Reproduction Steps 1. View the vulnerable operator screen in a web browser, located in this example at...

viproy-voipkit

Descontinuado Viproy era una herramienta PoC de evaluación de seguridad VoIP que tenía varios módulos y exploits que mantener. Sin embargo, fue desarrollada como un conjunto de módulos para Metasploit Framework. Dado que Metasploit Framework ha tenido actualizaciones significativas, los módulos...

astDoS

astDoS Tool to exploit CVE-2018-7284 and CVE-2018-19278 Usage This tool is used as a command. astDoS.py -h -a 1,2 -sA SERVERIP -sP SERVERPORT -u USER -p PASSWD -sub SUBUSER -dA DNSIP -dP DNSPORT -v VERSION DoS attack against Astersisk, CVE-2018-7284 and CVE-2018-19278 optional arguments: -h, --he...

CVE-2026-21010-VoIP-SIP-Digest-Authentication-Replay

CVE-2026-21010 – VoIP SIP Digest Authentication Replay Program Code Python SIP sim sipserversim.py - SIP server that accepts replayed authenticated requests from flask import Flask, request app = Flaskname Simulated nonce storage: doesn't track used nonces usednonces = set @app.route'/call',...

isip

isip Kit interactivo de SIP para manipulación de paquetes, sniffing, ataques man-in-the-middle, fuzzing, simulación de ataques DoS. Video https://asciinema.org/a/11128 Configuración git clone https://github.com/halitalptekin/isip.git cd isip pip install -r requirements.txt Uso Las herramientas de...

isip

isip Interactive sip toolkit for packet manipulations, sniffing, man in the middle attacks, fuzzing, simulating of dos attacks. Video https://asciinema.org/a/11128 Setup git clone https://github.com/halitalptekin/isip.git cd isip pip install -r requirements.txt Usage Packet manipulation tools are...

Wireshark 1.10.x < 1.10.3 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.10.3. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.10.3 advisory. - epan/dissectors/packet-tcp.c in the TCP dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before...

BC-WHY-NOT-LEARN-NEW-STUFF-

BC-WHY-NOT-LEARN-NEW-STUFF- HACKING SIP/PJSIP crash remote asterisk instances : https://github.com/asterisk/asterisk/security/advisories/GHSA-v428-g3cw-7hv9...

CVE-2026-65400

CVE-2026-65400 Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments...

CVE-2023-28810

CVE-2023-28810 Exploit code for CVE-2023-28810. udp-config-changer.py Change the running configuration of a target hikvision intercom without needing any authentication. udp-password-brute.py Attempt to recover the admin password for the device via brute force guessing wordlist not supplied...

Wireshark 1.8.x < 1.8.11 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.8.11. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.8.11 advisory. - epan/dissectors/packet-tcp.c in the TCP dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before...

Fedora 43 : janus (2026-2a6ce5b288)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-2a6ce5b288 advisory. Update to upstream v1.4.2 security release. - Fix AudioBridge recordings bypassing protected folders PR 3676 - Fix missing protocol allowlist when using...

Cisco ASA Improper Resource Shutdown or Release (CVE-2020-3555)

A vulnerability in the SIP inspection process of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a crash and reload of an affected device, resulting in a denial of service DoS condition. The...

Cisco ASA Integer Underflow (CVE-2019-12678)

A vulnerability in the Session Initiation Protocol SIP inspection module of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The...

Cisco ASA Improper Input Validation (CVE-2018-15454)

A vulnerability in the Session Initiation Protocol SIP inspection engine of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload or trigger high CPU, resulting in a deni...

Fedora 45 : janus (2026-d58d30885a)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d58d30885a advisory. Update to upstream v1.4.2 security release. - Fix AudioBridge recordings bypassing protected folders PR 3676 - Fix missing protocol allowlist when using...