viproy-voipkit

Discontinued Viproy was a PoC VoIP security assessment tool which had several modules and exploits to maintain. However, it was developed as a modules set to Metasploit Framework. As Metasploit Framework had significant updates, Viproy's current modules won't be able to work unless you use legacy...

Mr.SIP

SIP Security, Attack and Audit Framework Mr.SIP is...

CVE-2026-121943

A flaw was found in sngrep. An out-of-bounds stack read vulnerability exists due to an off-by-one length check when parsing Session Initiation Protocol SIP payloads. A remote attacker could exploit this by sending a crafted network packet or supplying a malicious packet capture file, resulting in...

CVE-2026-121943

The Irontec sngrep tool (versions through 1.9.0 ) is vulnerable to an out-of-bounds stack read in the sip_check_packet and sip_validate_packet functions. This is caused by an off-by-one length check when processing 10240-byte SIP payloads . A remote attacker can exploit this by sending a crafted ...

EUVD-2026-116900

Irontec sngrep through 1.9.0 contains an out-of-bounds stack read vulnerability in sipcheckpacket and sipvalidatepacket caused by an off-by-one length check on 10240-byte SIP payloads. Remote attackers can send a crafted UDP or TCP SIP packet or supply a pcap file to crash sngrep or leak adjacent...

resiprocate

Overview The reSIProcate repository contains the following C++ libraries and applications: resip library: comprehensive RFC3261 SIP stack dum Dialog Usage Manager library: high level SIP library for creating SIP user agents no media stack recon library: high level SIP UA library with media stack...

WireBug

WireBug WireBug is a tool set for Voice-over-IP penetration testing. It is designed as a wizard which makes it easy to use. The tools are build for single using too, so every tool is its own python or bash program. Installation Read the Installation Guide in the wiki. Tools FullBridge: This is a...

SigPloit

List of Contributors Rosalia D'Alessandro Ilario Dal Grande SigPloit SigPloit a signaling security testing framework dedicated to Telecom Security professionals and reasearchers to pentest and exploit vulnerabilites in the signaling protocols used in mobile operators regardless of the geneartion...

beelzebub

Beelzebub Open-source deception framework. Deploy realistic decoys. Observe attacker behavior. Turn interactions into security evidence. Explore Beelzebub Platform · Documentation · Quick start Beelzebub gives security teams a configurable way to study activity directed at decoy services. Define...

SentryPeer

Protect your SIP Servers from bad actors Special thanks to Deutsche Telekom Security GmbH for sponsoring us in 2024. Why not give us a star and follow us onTwitter! Table of Contents Introduction Overview Features Talks Adoption Design Docker Environment Variables Installation Homebrew macOS or...

Digital-Signature-Hijack

Digital Signature Hijack Hijacking legitimate digital signatures is a technique that can be used during red team assessments in order to sign PowerShell code and binaries. This could assist to bypass Device Guard restrictions and maintain stealthy in an engagement. DigitalSignatureHijack is a...

PT-2026-136963

Irontec sngrep through 1.9.0 contains an out-of-bounds stack read vulnerability in sip check packet and sip validate packet caused by an off-by-one length check on 10240-byte SIP payloads. Remote attackers can send a crafted UDP or TCP SIP packet or supply a pcap file to crash sngrep or leak...

CVE-2026-57191

A flaw was found in Asterisk. An unbounded string parsing vulnerability in the respjsippubsub module allows an unauthenticated remote attacker to trigger a stack-based buffer overflow by sending a specially crafted Message Waiting Indication MWI NOTIFY packet. Successful exploitation leads to a...

CVE-2026-98077

A flaw was found in the Linux kernel's Session Initiation Protocol SIP netfilter connection tracking module. When processing incoming SIP headers, the parser fails to properly detect the end of the network packet buffer when trailing whitespace is present without a header delimiter, resulting in ...

Mitel 6000 - OS Command Injection

A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones through 6.4 SP4 R6.4.0.4006, and the 6970 Conference Unit through 6.4 SP4 R6.4.0.4006 or version V1 R0.1.0, could allow an unauthenticated attacker to conduct a command injection attack due to insufficient paramete...

CVE-2026-106804

A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the imsqosnpn module. The wrxaarregister function copies the attacker-controlled host field from the SIP Via header into a fixed 46-byte stack buffer without validating its length. An unauthenticated remote attacker can trigger...

CVE-2026-57193

A flaw was found in Asterisk's resconfigldap module. An unauthenticated remote attacker can exploit this flaw to cause information disclosure through Lightweight Directory Access Protocol LDAP filter injection. By sending specially crafted Session Initiation Protocol SIP packets with a manipulate...

CVE-2026-57187

A flaw was found in Asterisk. This vulnerability allows an authenticated remote attacker to cause a Denial of Service DoS through a heap use-after-free memory error in the PJSIP communication handling component. By sending a Session Initiation Protocol SIP INVITE request over a connection-oriente...

CVE-2026-57185

A flaw was found in Asterisk. An authenticated remote attacker can trigger a buffer over-read in the PJSIP Message Waiting Indication MWI body parser by sending a specially crafted Session Initiation Protocol SIP NOTIFY request. Successful exploitation causes Asterisk to crash, resulting in a...

PT-2026-135538

A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the ims qos npn module. The w rx aar register function copies the attacker-controlled host field from the SIP Via header into a fixed 46-byte stack buffer without validating its length. An unauthenticated remote attacker can...