Tools to test your SIP systems
My favorite place to have a look at now and then to check for new tools.
Personally I’ve used Cain&Abel a lot, it is easy for demonstration, both when doing password hacking (MD5 digest brute force attack) or listening in on voice calls. It’s easy way of doing it, combined with the possibility of doing Man in the Middle attack with ARP poisoning.
SIPvicious is more cumbersome to use, but fun against bad configured Asterisk servers. You list all the phone lines and which has no passwords.. (ooh.. did you forget to add a password on that test line… )
And now to the commercials….
