SIPVicious

Core Network & SignalingReady to RunLocation: System-wide python

Command Line Execution

Run this command in the TelcoChisel terminal to launch or execute the tool:

SIPVicious Command
svmap --help

Detailed Technical Overview

SIPVicious is a security auditing suite for Session Initiation Protocol (SIP) VoIP telephony networks. It discovers active SIP servers, sweeps for PBX extensions, and audits authentication configurations via dictionary attacks.

Configuration & Usage Guide

To initialize and configure SIPVicious for telecom security audits, follow these steps:

  1. 1Scan a subnet for active SIP endpoints: svmap 192.168.1.0/24
  2. 2Brute-force extensions on an active target: svwar 192.168.1.100 --range 100-200
  3. 3Perform password auditing on an extension: svcrack 192.168.1.100 -u 101 -d wordlists/telecom/protocols/sip/sip-passwords.txt

Troubleshooting & Security Audits

SIPVicious Audit Warning
Ensure you scan only authorized networks, as SIPvicious generates significant traffic that can trigger SIP server rate-limiting or firewall bans.
SIGNALING CORE LAB

Master SIPVicious with Interactive Telecom Labs

Practice deploying SIPVicious against live cellular networks, radio interfaces, and mobile cores in TelcoSec Academy's browser-accessible cloud sandboxes.

Interactive Cloud Labs No Hardware Required CTSP Certification
Launch Interactive Labapp.telcosec.net · Instant access

Frequently Asked Questions

Does SIPVicious support encrypted SIP (TLS)?

Yes, newer versions can target TLS and SRTP endpoints.

What is the default port scanned?

It defaults to standard SIP port 5060 over UDP.

Back to Tools Directory