SVCRACK(1)

📦
version 0.3.3 · 2 versions
  • 0.3.3 · debian bookworm, debian trixie, ubuntu jammy, ubuntu noble, ubuntu resolute, ubuntu stonking (latest)
  • 0.3.7 · nixos 26.05
, in debian bookworm, debian trixie, ubuntu jammy, ubuntu noble, ubuntu resolute, ubuntu stonking

SVCRACK(1) — like, the manual page for svcrack.py 💖

okay bestie, gather round, because we're talking about svcrack.py, an online password guessing tool for SIP devices, and honestly? it's giving main character energy in the most chaotic way possible. this is the SVCRACK(1) page from the User Commands section, and I'm gonna walk you through every single flag like we're texting at 2am. no cap, nothing skipped. 🫶

✨ NAME ✨

svcrack.py — online password guessing tool for SIP devices 🌸

🎀 SYNOPSIS 🎀

svcrack.py -u username [options] target

literally that's the whole vibe. one username, some options, one target. periodt. 💅

🦋 DESCRIPTION 🦋

here's how it looks in the wild, bestie — two whole examples, copied exactly, don't come for me:

svcrack.py -u100 -d dictionary.txt udp://10.0.0.1:5080
svcrack.py -u100 -r1-9999 -z4 10.0.0.1

see? dictionary attack on the left, brute-force range on the right. iconic. 🔥

💜 OPTIONS 💜

every. single. one. let's go. 🧚

  • --version — shows the program's version number and dips out. bye 👋
  • -h, --help — shows this help message and exits. the classic "help me" button 🙈
  • -v, --verbose — turns the verbosity up. more chatter, more info 🗣️
  • -q, --quiet — quiet mode. shhh, we're being stealthy 🤫
  • -p PORT, --port=PORT — destination port (or port ranges!) of the SIP device. like -p5060,5061,8000-8100 — yes you can throw a whole range in there 💫
  • -P PORT, --localport=PORT — source port for our packets. this is our side of the convo 📮
  • -x IP, --externalip=IP — the IP address to use as the external ip. specify this if you've got multiple interfaces or if you're behind NAT. very "which one of me do you want" energy 🪞
  • -b BINDINGIP, --bindingip=BINDINGIP — by default we bind to all interfaces. this option overrides that and binds to the specified ip address instead. picky, and valid 💅
  • -t SELECTTIME, --timeout=SELECTTIME — lets you throttle the speed at which packets are sent. change this if you're losing packets. for example, try 0.5. slow down, gorgeous 🐌✨
  • -R, --reportback — sends the author an exception traceback. currently it sends the command line parameters and the traceback. tattling, but make it helpful 📨
  • -A, --autogetip — automatically get the current IP address. super useful when you're getting no responses back because SIPVicious isn't resolving your local IP. it finds you, bestie 🔍
  • -s NAME, --save=NAME — save the session. perks: you can resume a previous scan and you can export scans. save your progress like a good little gamer 🎮
  • --resume=NAME — resume a previous scan. welcome back, queen 👑
  • -c, --enablecompact — enable compact mode. makes packets smaller but possibly less compatible. smaller = cuter, but at what cost 😭
  • -u USERNAME, --username=USERNAME — username to try crack. this is the whole point, fr fr 🎯
  • -d DICTIONARY, --dictionary=DICTIONARY — specify a dictionary file with passwords, or - for stdin. yes, a literal dash for stdin, we love a pipe moment 🍓
  • -r RANGE, --range=RANGE — specify a range of numbers. example: 100-200,300-310,400 🔢
  • -e EXTENSION, --extension=EXTENSION — extension to crack. only specify this when the extension is different from the username. otherwise don't bother, diva 🌸
  • -z PADDING, --zeropadding=PADDING — the number of zeros used to padd the password. the options "-r 1-9999 -z 4" would give 0001 0002 0003 ... 9999. zero-padded and gorgeous ✨
  • -n, --reusenonce — reuse nonce. some SIP devices don't mind you reusing the nonce (making them vulnerable to replay attacks). speeds up the cracking. highkey unhinged of them 🚨
  • -T TEMPLATE, --template=TEMPLATE — a format string which allows us to specify a template for the extensions. example: svwar.py -e 1-999 --template="123%#04i999" would scan between 1230001999 to 1230999999. format strings go brrr 🌀
  • --maximumtime=MAXIMUMTIME — maximum time in seconds to keep sending requests without receiving a response back. after that, we're out ✌️
  • -D, --enabledefaults — scan for default / typical passwords such as 1000,2000,3000 ... 1100, etc. this option is off by default. use --enabledefaults to enable this functionality. off by default, so don't be surprised when nothing happens, bestie 😌
  • --domain=DOMAIN — force a specific domain name for the SIP message, eg. -d example.org 📧
  • --requesturi=REQUESTURI — force the first line URI to a specific value; e.g. sip:999@example.org 🪄
  • -6 — scan an IPv6 address. v6 girlies, this one's for you 🌈

SIPvicious password cracker is an online password guessing tool for SIP devices.

Copyright (C) 2021 Sandro Gauci <sandro@enablesecurity.com>

This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.

This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.

You should have received a copy of the GNU General Public License along with this program. If not, see <http://www.gnu.org/licenses/>.

⚠️ okay the legal bit matters, no skipping: that's the whole license paragraph, keep it as-is when you pass it along 💖

👀 SEE ALSO 👀

The full documentation for svcrack.py can be found on GitHub at <https://github.com/enablesecurity/sipvicious/wiki>. go read it, it's lowkey required reading 💜

that's the whole page, bestie 💖 this was svcrack.py v0.3.3, dated June 2020 — mwah, slay, go crack responsibly (or don't, I'm a manual page, not your mom) 💅✨🎀

📦 where this page comes from