[Bluebox-ng] UC/VoIP Security Tool
Bluebox-ng is a next generation UC/VoIP security tool. It has been written in CoffeeScript using Node.js powers. This project is "our 2 cents" to help to improve information security practices in VoIP/UC environments.- GitHub repo: https://github.com/jesusprubio/bluebox-ng
- IRC(Freenode): #breakingVoIP
Install
GNU/Linux and Mac OS X
- Install Node.js:
- cd bluebox-ng
- chmod +x setup.sh (just in case)
- ./setup.sh
- ./bluebox.sh
Windows
- Install Node.js: http://nodejs.org/download/
- Install Gow (the lightweight alternative to Cygwin): https://github.com/bmatzelle/gow/wiki
- cd bluebox-ng
- chmod +x setup.sh (just in case)
- setup.sh
- bluebox.sh
Features
- RFC compliant
- TLS and IPv6 support
- SIP over websockets (and WSS) support (draft-ietf-sipcore-sip-websocket-08)
- SHODAN, exploitsearch.net and Google Dorks
- SIP common security tools (scan, extension/password bruteforce, etc.)
- REGISTER, OPTIONS, INVITE, MESSAGE, SUBSCRIBE, PUBLISH, OK, ACK, CANCEL, BYE and Ringing requests support
- Authentication through different types of requests
- SIP denial of service (DoS) testing
- SRV and NAPTR discovery
- Dumb fuzzing
- Common VoIP servers web management panels discovery
- Automatic exploit searching (Exploit DB, PacketStorm, Metasploit)
- Automatic vulnerability searching (CVE, OSVDB, NVD)
- Geolocation
- Colored output
- Command completion
- It runs in GNU/Linux, Mac OS X and Windows
[Bluebox-ng] UC/VoIP Security Tool
![[Bluebox-ng] UC/VoIP Security Tool](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhqWqnz5BOArJ5TzNyFQBg3Y4Yz_LuAULxBHzTgkOK9_wx2NJxjcPsIn7Qqexcj3iMfsNy10jP1LO9cVbixvwn_6D3PEarY4SOEEqIJTIUPYPjM4Wb6sPc3t-m8uNDuGpOAXIEcITnA3zk/s72-c/teclado.png)
Reviewed by 0x000216
on
Sunday, September 08, 2013
Rating: 5
Reviewed by 0x000216
on
Sunday, September 08, 2013
Rating: 5