23 September 2008 | 8,113 views

ohrwurm – RTP Fuzzing Tool (SIP Phones)

Check Your Web Security with Acunetix

ohrwurm is a small and simple RTP fuzzer, it has been tested it on a small number of SIP phones, none of them withstood the fuzzing.

Features:

  • reads SIP messages to get information of the RTP port numbers
  • reading SIP can be omitted by providing the RTP port numbers, so that any RTP traffic can be fuzzed
  • RTCP traffic can be suppressed to avoid that codecs learn about the “noisy line”
  • special care is taken to break RTP handling itself
  • the RTP payload is fuzzed with a constant BER
  • the BER is configurable
  • requires arpspoof from dsniff to do the MITM attack
  • requires both phones to be in a switched LAN (GW operation only works partially)

You can download ohrwurm 0.1 here:

ohrwurm-0.1.tar.bz2

Or read more here.



Recent in Hacking Tools:
- drozer – The Leading Security Testing Framework For Android
- tinfoleak – Get Detailed Info About Any Twitter User
- BurpSentintel – Vulnerability Scanning Plugin For Burp Proxy

Related Posts:
- Browser Fuzzer 3 (bf3) – Comprehensive Web Browser Fuzzing Tool
- Keep on Fuzzing! Advice
- Fuzzled – PERL Fuzzing Framework

Most Read in Hacking Tools:
- Top 15 Security/Hacking Tools & Utilities - 1,865,699 views
- Brutus Password Cracker – Download brutus-aet2.zip AET2 - 1,054,663 views
- wwwhack 1.9 – Download wwwhack19.zip Web Hacking Tool - 623,146 views

Advertise on Darknet

Comments are closed.