[Full-disclosure] SIPVicious v0.2 - tools for auditing sip devices / PBXs

[Obscure <lists@xxxxxxxxxx>]

Dear all,

I just released version 0.2 of SIPVicious tool suite at:
http://sipvicious.googlecode.com/files/sipvicious-0.2.tar.gz
or http://tinyurl.com/3xu5z9

Put up a screencast of the tools in action at:
http://tinyurl.com/3yq8k7

What is SIPVicious tool suite?
Consists of 4 tools:

      * svmap: an active scanner to identify SIP devices on the network
      * svwar: scans SIP PBX servers for existing extensions
      * svcrack: an online password cracker against SIP PBX servers
      * svreport: manages sessions by the other tools + exports
        to pdf, xml (html), csv and plain text


Notable new features include:

      * Session support which allows you to resume previous scans as well as 
store the results in database format
      * Exporting of previous results to various formats: pdf, xml (html), csv 
and plain text
      * Easy updating by making use of subversion (svn update)
      * Better UI, more intuitive help, clean output and more debug info when 
needed
      * And my favorite feature: random scanning techniques

Project page:
http://code.google.com/p/sipvicious/

Hope you guys find it useful,

-- 
Sandro Gauci
MaltaInfosec - http://maltainfosec.org/
SIPVicious - http://sipvicious.org/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/