WireBug: set of tools for Voice-over-IP pentest

WireBug is a set of tools for Voice-over-IP penetration testing. It is designed like a guide which makes it easy to use.

Τα εργαλεία έχουν δημιουργηθεί για μεμονωμένη χρήση, οπότε κάθε tool είναι ένα μεμονωμένο πρόγραμμα python ή bash.

Installation

Install dependencies in requirements.txt and python dependencies in requirements_python.txt. If you have problems installing netfilterqueue, you can download it from the source:

pip install -U git + https: //github.com/kti/python-netfilterqueue.git

Use configure.sh to download and create it Cisco Systems SRTP library.

Tools

• FullBridge: This is a simple bash script for creating a layer2 bridge with two defined interfaces.
• BridgeTrap: This script is useful in conjunction with the FullBridge tool. It will reflect the traffic of the bridge on a specified interface e.g. a raspberry pi with two interfaces for bridge and one as monitoring.
• DoubleEncapsulation: This python program will create a duplicate ICMP packet and send it to the destination - possibly VLAN Hopping.
• TimeShift: A man-in-the-middle NTP request response tool (also with FullBridge) timed past or future. You can easily check if the client (VoIP phone) is checking the validity of the server certificate (SIPS, H.323s, HTTPS, LDAPS, etc.), or just use it as a DOS tool.
• VlanEnum: This bash script creates virtual 802.1Q interfaces with VLAN tags and awaits possible DHCP responses. If an IP address could be retrieved, the interface will remain alive, otherwise it will be deleted.
• SaCLaC: Includes two python programs. One to spoof LLDP-MED packets to get into the VoIP VLAN or to trigger a DoS by instructing the client to set a VLAN tag and one to parse the CDP information of a archiveu PCAP.
• DecodeSRTP: This script makes it easy to use SRTP library of Cisco systems to decrypt an SRTP-SDES stream if the AES key was extracted from the signal compartment.
• SIPCraft: This tool comes with some basic SIP messages (REGISTER, OPTIONS, CALL, BYE), but it is also for creating your own SIP message using the "- person" option. With this option you can save the SIP content to a plain text file and then forge it with the sip craft tool. The script supports TCP and UDP.
• CrackTheSIP: A simple brute force tool to break SIP digest authentication using a word list.
• ZRTPDowngrade: A tool for removing packages started with ZRTP in a man-in-the-middle position.
• EvilSTUN: A simple tool for fake STUN answers.
• SIPFuzz: A tool for SIP fuzzing.
• SIPEnum: This tool lists SIP extensions from a given file.
• SIPBrute: A tool for online brute force attacks against SIP proxies.
• RTPFuzz: A tool for removing random RTP packets (noise) in current streams.

Use

python3 wirebug.py

You can download the program from here.