SIPVICIOUS_SVCRACK(1)

📦 version 0.3.8, in nixpkgs unstable

💅 sipvicious_svcrack(1) — the girl's guide to guessing SIP passwords

okay so bestie, welcome to sipvicious_svcrack, aka the SIPvicious password cracker — it's an online password guessing tool for SIP devices. Like, it just sits there and tries passwords at your SIP box until something gives. no cap. ✨

This is the manual page for sipvicious_svcrack v0.3.8, and yes I read the whole thing so you don't have to. 🫶

🌸 SYNOPSIS 🌸

sipvicious_svcrack -u username [options] target

That's the whole vibe: give it a username, give it a target, sprinkle options on top. 🎀

🦋 DESCRIPTION 🦋

So like, here's the examples straight from the source, because the way that these are the entire personality of this tool:

sipvicious_svcrack -u100 -d dictionary.txt udp://10.0.0.1:5080
sipvicious_svcrack -u100 -r1-9999 -z4 10.0.0.1
sipvicious_svcrack -6 -u1000 -r1500-1500 2001:db8::10
sipvicious_svcrack -6 -u1000 -r1500-1500 udp://[2001:db8::10]:5060

(yeah that's four separate examples, the manpage just smooshed them all onto one line. i fixed the formatting, not the facts 💅)

✨ OPTIONS ✨

  • --version — shows the program's version number and dips out. bye bestie 👋
  • -h, --help — shows this help message and exits. the classic.
  • -v, --verbose — cranks up the verbosity. more talking, more info.
  • -q, --quiet — quiet mode. shhh. 🤫
  • -p PORT, --port=PORT — destination port, or port ranges, on the SIP device. like -p5060,5061,8000-8100. yes you can list several, she's flexible.
  • -P PORT, --localport=PORT — the source port for our packets. our side of the convo 💌
  • -x IP, --externalip=IP — the IP address to use as the external ip. use this when you've got multiple interfaces OR when you're stuck behind NAT (ugh, NAT 😭).
  • -b BINDINGIP, --bindingip=BINDINGIP — by default we bind to all interfaces. this option overrides that and binds to the ip address you specify. picky, but valid.
  • -t SELECTTIME, --timeout=SELECTTIME — lets you throttle the speed at which packets are sent (the page literally spells it "trottle", iconic). change this if you're losing packets. for example, try 0.5.
  • -R, --reportback — sends the author an exception traceback. currently it sends the command line parameters and the traceback. snitching, but consensually 🫶
  • -A, --autogetip — automatically gets the current IP address. this is useful when you're not getting any responses back because SIPVicious isn't resolving your local IP. it's giving "let me just figure it out myself".
  • -s NAME, --save=NAME — saves the session. the benefit? you can resume a previous scan and you can export scans. lowkey the best option here ngl.
  • --resume=NAME — resumes a previous scan. the comeback era 🔥
  • -c, --enablecompact — enables compact mode. makes packets smaller but possibly less compatible. a trade-off, choose wisely 💀
  • -u USERNAME, --username=USERNAME — the username to try crack. the main character of the whole operation.
  • -d DICTIONARY, --dictionary=DICTIONARY — specify a dictionary file with passwords, or use - for stdin. yes, -. that's it. that's the whole stdin situation.
  • -r RANGE, --range=RANGE — specify a range of numbers. example: 100-200,300-310,400. commas, dashes, chaos.
  • -e EXTENSION, --extension=EXTENSION — the extension to crack. only specify this when the extension is different from the username. otherwise don't be extra about it.
  • -z PADDING, --zeropadding=PADDING — the number of zeros used to pad the password. the options -r 1-9999 -z 4 would give 0001 0002 0003 … 9999. so satisfying honestly 🎀
  • -n, --reusenonce — reuse nonce. some SIP devices don't mind you reusing the nonce (which makes them vulnerable to replay attacks, and we do love that for us). speeds up the cracking. ⚡
  • -T TEMPLATE, --template=TEMPLATE — a format string which lets us specify a template for the extensions. example sipvicious_svwar -e 1-999 --template="123%#04i999" would scan between 1230001999 to 1230999999" (yes the stray quote is in the original, i don't make the rules 🙈).
  • --maximumtime=MAXIMUMTIME — maximum time in seconds to keep sending requests without receiving a response back. your patience limit, numerically.
  • -D, --enabledefaults — scans for default / typical passwords such as 1000,2000,3000 ... 1100, etc. this option is off by default. use --enabledefaults to enable this functionality. she's opt-in only, consent matters 💜
  • --domain=DOMAIN — forces a specific domain name for the SIP message, eg. -d example.org.
  • --requesturi=REQUESTURI — forces the first line URI to a specific value; e.g. sip:999@example.org. main character energy for your URI ✨
  • -6 — scan an IPv6 address. with -6, targets may be given as bare IPv6 literals such as 2001:db8::10 or as UDP URIs such as udp://[2001:db8::10]:5060. the future is now and it has colons 🌈

okay so now the legal bit, and i need you to actually read it because it's real:

SIPvicious password cracker is an online password guessing tool for SIP devices.

Copyright (C) 2026 Sandro Gauci <sandro@enablesecurity.com>

This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.

This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.

You should have received a copy of the GNU General Public License along with this program. If not, see <http://www.gnu.org/licenses/>.

fr fr, that "no warranty" part is not a joke — if something breaks, it breaks 💀

💖 SEE ALSO 💖

The full documentation for sipvicious_svcrack can be found on GitHub at <https://github.com/enablesecurity/sipvicious/sipvicious/wiki>. that's the wiki bestie, go read it, iykyk 📚

so yeah, that's the whole page 🫶 this was sipvicious_svcrack v0.3.8, dated July 2026 — screenshot it, save it, tattoo it, whatever. slay, stay legal, and happy cracking (the authorized kind, obviously). 👑💅

📦 where this page comes from