Darknet – The Darkside

ohrwurm is a small and simple RTP fuzzer, it has been tested it on a small number of SIP phones, none of them withstood the fuzzing.

Features:

• reads SIP messages to get information of the RTP port numbers
• reading SIP can be omitted by providing the RTP port numbers, so that any RTP traffic can be fuzzed
• RTCP traffic can be suppressed to avoid that codecs learn about the “noisy line”
• special care is taken to break RTP handling itself
• the RTP payload is fuzzed with a constant BER
• the BER is configurable
• requires arpspoof from dsniff to do the MITM attack
• requires both phones to be in a switched LAN (GW operation only works partially)

You can download ohrwurm 0.1 here:

ohrwurm-0.1.tar.bz2

Or read more here.