sippts

Sipptsとは？ Sipptsは、SIPプロトコルを使用するVoIPサーバーやデバイスを監査するためのツールセットです。SipptsはPythonでプログラムされており、SIPプロトコルを使用するVoIPサーバーのセキュリティをチェックすることができます。 無料ですか？ はい。自由に使用、変更、配布することができます。変更した場合は、このサイトへの参照を含めてください。 sipptsは違法な目的で使用できますか？ このツールの目的は、自身のシステムを監査すること、または明示的な許可を得たシステムに対してペネトレーションテストを実行することです。このツールの誤用については責任を負いません...

viproy-voipkit

Discontinued Viproy was a PoC VoIP security assessment tool which had several modules and exploits to maintain. However, it was developed as a modules set to Metasploit Framework. As Metasploit Framework had significant updates, Viproy's current modules won't be able to work unless you use legacy...

viproy-voipkit

開発終了 Viproy は、複数のモジュールとエクスプロイトを保守していた PoC の VoIP セキュリティ評価ツールでした。しかし、Metasploit Framework のモジュールセットとして開発されていました。Metasploit Framework に大幅なアップデートが行われたため、Viproy の現在のモジュールは、レガシーな Kali Linux と Metasploit Framework のバージョンを使用しない限り動作しません。私は過去 5 年間 VoIP および UC プロジェクトに取り組んでいなかったため、ずっと前にプロジェクトを中止しました。...

bluebox

Bluebox 開発中 さまざまな VoIP 製品向けのエクスプロイト集です。Go Exploit Framework に感謝します。 VoIP 向けのペネトレーションテストソリューションを探してここにたどり着いた場合は、Sippts（Kali の sippts-gui）または SIPVicious をチェックしてみてください。このプロジェクトは、よりエクスプロイト段階に焦点を当てています。 インストール git clone https://github.com/jesusprubio/bluebox.git cd bluebox go mod tidy go mod vendor 使い...

[SECURITY] Fedora 45 Update: sipp-3.7.7-5.fc45

SIPp is a free Open Source test tool / traffic generator for the SIP protocol. It includes a few basic SipStone user agent scenarios UAC and UAS and establishes and releases multiple calls with the INVITE and BYE methods. It can also reads custom XML scenario files describing from very simple to...

sippts v4.2.1

What is Sippts? Sippts is a set of tools to audit VoIP servers and devices using the SIP protocol. Sippts is programmed in Python and it allows us to check the security of a VoIP server using the SIP protocol. Is it free? Yes. You can freely use, modify and distribute it. If you modify it, please...

[SECURITY] [DSA 6494-1] kamailio security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6494-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 11, 2026 https://www.debian.org/security/faq -...

CVE-2026-74569

A flaw was found in the Linux kernel's netfilter Session Initiation Protocol SIP connection tracking module nfconntracksip. A remote attacker could send specially crafted SIP messages that cause an integer overflow during Network Address Translation NAT rewrite delta calculations. This overflow...

Mr.SIP — Updated!

SIP Security, Attack and Audit Framework Mr.SIP is a simple, console-bas...

CVE-2026-28799

A flaw was found in PJSIP. A remote attacker can exploit a heap use-after-free vulnerability within the event subscription framework by sending a specially crafted message during presence unsubscription. This can lead to a denial of service, making the affected system unavailable. Mitigation...

CVE-2026-21905

A Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in the SIP application layer gateway ALG of Juniper Networks Junos OS on SRX Series and MX Series with MX-SPC3 or MS-MPC allows an unauthenticated network-based attacker sending specific SIP messages over TCP to crash the flow...

CVE-2025-52960

A Buffer Copy without Checking Size of Input vulnerability in the Session Initialization Protocol SIP ALG of Juniper Networks Junos OS on MX Series and SRX Series allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. When memory utilization is high, and specific...

EUVD-2007-2186

Malware in sbrugna...

EUVD-2023-31820

Malicious code in bioql PyPI...

EUVD-2021-8685

Malicious code in bioql PyPI...

CVE-2003-0761

Buffer overflow in the getmsgtext of chansip.c in the Session Initiation Protocol SIP protocol implementation for Asterisk releases before August 15, 2003, allows remote attackers to execute arbitrary code via certain 1 MESSAGE or 2 INFO requests...

Cisco IP Phones 7800 Series and 8800 Series and Cisco Wireless IP Phone 8821 Denial of Service (CVE-2018-0325)

A vulnerability in the Session Initiation Protocol SIP call-handling functionality of Cisco IP Phone 7800 Series phones and Cisco IP Phone 8800 Series phones could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected phone. The vulnerability is due t...

CVE-2023-44198

An Improper Check for Unusual or Exceptional Conditions vulnerability in the SIP ALG of Juniper Networks Junos OS on SRX Series and MX Series allows an unauthenticated network-based attacker to cause an integrity impact in connected networks. If the SIP ALG is configured and a device receives a...

CVE-2023-22408

An Improper Validation of Array Index vulnerability in the SIP ALG of Juniper Networks Junos OS on SRX 5000 Series allows a network-based, unauthenticated attacker to cause a Denial of Service DoS. When an attacker sends an SIP packets with a malformed SDP field then the SIP ALG can not process i...

CVE-2022-22198

An Access of Uninitialized Pointer vulnerability in the SIP ALG of Juniper Networks Junos OS allows an unauthenticated network-based attacker to cause a Denial of Service DoS. Continued receipt of these specific packets will cause a sustained Denial of Service condition. On all MX and SRX...