WarVOX is a suite of tools for exploring, classifying, and auditing telephone systems. Unlike normal wardialing tools, it works with the actual audio from each call and does not use a modem directly.
This model allows the tool to find and classify a wide range of interesting lines, including modems, faxes, voice mail boxes, PBXs, loops, dial tones, IVRs, and forwarders. It provides the unique ability to classify all telephone lines in a given range, not just those connected to modems, allowing for a comprehensive audit of a telephone system.
What does WarVOX War Dialing Tool Software Do?
WarVOX requires no telephony hardware and is massively scalable by leveraging Internet-based VoIP providers. A single instance on a residential broadband connection, with a typical VoIP account, can scan over 1,000 numbers per hour. The speed is limited only by downstream bandwidth and the limitations of the VoIP service. Using two providers with over 40 concurrent lines we have been able to scan entire 10,000 number prefixes within 3 hours.
WarVOX War Dialing Tools Features
- License changed to BSD, no restrictions on commercial use
- Support number exclusion lists / black lists (regex based)
- Support for phone number ranges in addition to masks
- Support for multiple ranges and masks per job
- Numerous bug fixes and stability improvements
- Command line script for exporting dial results (bin/export_list.rb)
The resulting call audio can be used to extract a list of modems that can be fed into a standard modem-based wardialing application for fingerprinting and banner collection. One of the great things about the WarVOX model is that once the data has been gathered, it is archived and available for re-analysis as new signatures, plugins, and tools are developed. The current release of WarVOX (1.0.0) is able to automatically detect modems, faxes, silence, voice mail boxes, dial tones, and voices.
It is written in Ruby and designed to be run on any modern Linux distribution.
It was actually merged into the Metasploit Project in August 2011.
WarVOX download here:
Or read more here.