12 March 2009 | 29,627 views

WarVOX – Wardialing Tool Suite (Explore, Classify & Audit Telephone Systems)

Prevent Network Security Leaks with Acunetix

WarVOX is a suite of tools for exploring, classifying, and auditing telephone systems. Unlike normal wardialing tools, WarVOX works with the actual audio from each call and does not use a modem directly. This model allows WarVOX to find and classify a wide range of interesting lines, including modems, faxes, voice mail boxes, PBXs, loops, dial tones, IVRs, and forwarders.

WarVOX provides the unique ability to classify all telephone lines in a given range, not just those connected to modems, allowing for a comprehensive audit of a telephone system.

WarVOX requires no telephony hardware and is massively scalable by leveraging Internet-based VoIP providers. A single instance of WarVOX on a residential broadband connection, with a typical VoIP account, can scan over 1,000 numbers per hour. The speed of WarVOX is limited only by downstream bandwidth and the limitations of the VoIP service. Using two providers with over 40 concurrent lines we have been able to scan entire 10,000 number prefixes within 3 hours.

The resulting call audio can be used to extract a list of modems that can be fed into a standard modem-based wardialing application for fingerprinting and banner collection. One of the great things about the WarVOX model is that once the data has been gathered, it is archived and available for re-analysis as new signatures, plugins, and tools are developed.

The current release of WarVOX (1.0.0) is able to automatically detect modems, faxes, silence, voice mail boxes, dial tones, and voices.

You can download WarVOX 1.0.0. here:

warvox-1.0.0.tar.gz

The latest development version of WarVOX can be accessed from Subversion with the following command:

Or read more here, PDF presentation here.



Recent in Hacking Tools:
- dirs3arch – HTTP File & Directory Brute Forcing Tool
- ODAT (Oracle Database Attacking Tool) – Test Oracle Database Security
- SHODAN – Expose Online Devices (Wind Turbines, Power Plants & More!)

Related Posts:
- WarVOX 1.0.1 Released – Telephony Analysis & War Dialing Suite
- VIPER Lab’s VAST Live Distro – VoIP Security Testing LiveCD
- PAW/PAWS – Python Advanced Wardialing System

Most Read in Hacking Tools:
- Top 15 Security/Hacking Tools & Utilities - 1,857,740 views
- Brutus Password Cracker – Download brutus-aet2.zip AET2 - 1,043,401 views
- wwwhack 1.9 – Download wwwhack19.zip Web Hacking Tool - 619,184 views

Low-cost VPS Hosting

One Response to “WarVOX – Wardialing Tool Suite (Explore, Classify & Audit Telephone Systems)”

  1. Morgan Storey 14 March 2009 at 12:46 pm Permalink

    There was a good interview with H.D Moore on the risky business podcast, he was talking about how cheap it is to do a 1000 number block.
    http://itradio.com.au/security/