VoIPTK - VoIP Toolkit for Username & Password Recovery

The current version of the VoIP toolkit contains two small utilities. The first tool being SIPUserGuess that exploits a vulnerability in the Asterisk SIP implementation (AST-2009-008) and allows for enumeration of valid usernames. The vulnerability has been addressed by the Asterisk team and patches exists for all supported versions.
The second tool, VoIPPwGuess, can be used to perform an online audit of password quality for SIP or IAX2 accounts. The tool takes a list of passwords that it verifies against a list of usernames.
When developing the tools some stability issues were encountered on the server-side, mostly for older implementations of the IAX2 protocols. In order to prevent systems from becoming unresponsive the application enforces a limit on the number of tries performed each second when using the IAX2 protocol. However, experienced users (that know what they’re doing) have the possibility to override this limit by setting the -maxtps to a higher value.


hash krackin rss feed Subscribe in a reader

Copyright 2011 | All software listed is freeware unless otherwise stated. All software listed is property of the publisher. The software on this website may be reported by antivirus as malicious, however this can be disregarded due to the nature of these tools. Hash Krackin can not be held responsible for any of your actions performed by the resources of this website. Please contact the webmaster of any broken links or password cracker resources you would like featured on this site.