WireBug is a set of tools for Voice-over-IP penetration testing. It is designed as a guide which makes it easy to use.
The tools are designed for individual use, so each tool is a single python or bash program.
Contents
hide
Installation
Install dependencies in requirements.txt and python dependencies in requirements_python.txt. If you have problems installing netfilterqueue, you can download it from the source:
pip install -U git + https: //github.com/kti/python-netfilterqueue.git
Use configure.sh to download and create it Cisco Systems SRTP library.
Tools
- FullBridge: This is a simple bash script to create a layer2 bridge with two defined interfaces.
- BridgeTrap: This script is useful in conjunction with the FullBridge tool. It will reflect her movement της γέφυρας (bridge) σε μια καθορισμένη διεπαφή π.χ. ένα raspberry pi με δύο διεπαφές για γέφυρα και μία ως παρακολούθηση.
- DoubleEncapsulation: This python program will create a duplicate ICMP packet and send it to the destination - possibly VLAN Hopping.
- TimeShift: A man-in-the-middle NTP request response tool (also with FullBridge) timed past or future. You can easily check if the client (VoIP phone) is checking the validity of the server certificate (SIPS, H.323s, HTTPS, LDAPS, etc.), or just use it as a DOS tool.
- VlanEnum: This bash script creates virtual 802.1Q interfaces with VLAN tags and awaits possible DHCP responses. If an IP address could be retrieved, the interface will remain alive, otherwise it will be deleted.
- SaCLaC: Includes two programs python. Ένα για πλαστογράφηση πλαστών πακέτων LLDP-MED για να μπείτε στο VoIP VLAN ή για να ενεργοποιήσετε ένα DoS, δίνοντας εντολή στον πελάτη να ορίσει μια ετικέτα VLAN και ένα για να αναλύσει τις information CDP of a PCAP file.
- DecodeSRTP: This script makes it easy to use SRTP library of Cisco systems to decrypt an SRTP-SDES stream if the AES key was extracted from the signal compartment.
- SIPCraft: This tool comes with some basic SIP messages (REGISTER, OPTIONS, CALL, BYE), but it is also for creating your own SIP message using the "- person" option. With this option you can save the SIP content to a plain text file and then forge it with the sip craft tool. The script supports TCP and UDP.
- CrackTheSIP: A simple brute force tool to break SIP digest authentication using a word list.
- ZRTPDowngrade: A tool for removing packages started with ZRTP in a man-in-the-middle position.
- EvilSTUN: A simple tool for fake STUN answers.
- SIPFuzz: A tool for SIP fuzzing.
- SIPEnum: This tool lists SIP extensions from a given file.
- SIPBrute: A tool for online brute force attacks against SIP proxies.
- RTPFuzz: A tool for removing random RTP packets (noise) in current streams.
Use
python3 wirebug.py
You can download the program from here.
