Whats brewing on the SIPVicious front
Been quite for a while, but that does not mean that I’ve been resting. Instead I’ve been looking into fingerprinting SIP devices and not relying on the User-agent header to identify the a SIP network element’s name.
This means that SIPVicious tools will soon be able to guess the name of the device. What’s important is that the tools will be able to maintain do this without sacrificing speed and efficiency. Expect more news on this.
Other than that, I’m looking at how to integrate the dns stuff with svmap - things like the SRV records and ENUM.
And.. last but not least.. I’ve been working on an article for Hakin9 magazine which explains a lot of behind the scenes when it comes to how SIPVicious tool suite works.