SVWAR(1)

📦
version 0.3.3 · 2 versions
  • 0.3.3 · debian bookworm, debian trixie, ubuntu jammy, ubuntu noble, ubuntu resolute, ubuntu stonking (latest)
  • 0.3.7 · nixos 26.05
, in debian bookworm, debian trixie, ubuntu jammy, ubuntu noble, ubuntu resolute, ubuntu stonking

🎀 SVWAR(1) — the user-commands corner of the manual, but make it a group chat 🎀

okay so hi bestie 💖 welcome to SVWAR(1), filed under User Commands because that's where she belongs. Her government name is svwar.py and she is, no cap, that girl. Let's get into it 🦋

✨ NAME ✨

svwar.py — extension line scanner. That's the whole résumé, and honestly? Iconic. She scans for extension lines. 👑

✨ SYNOPSIS ✨

svwar.py [options] target

give her some options, give her a target, and she's off 🌸

✨ DESCRIPTION ✨

examples, straight from the source, no notes:

svwar.py -e100-999 udp://10.0.0.1:5080
svwar.py -d dictionary.txt 10.0.0.2

that's the vibe. that's the whole vibe. 💅

✨ OPTIONS ✨

every single flag, accounted for, not one skipped, because we don't do that here 🫶

  • --version — shows you the program's version number and then dips out, exit stage left.
  • -h, --help — prints this help message and then exits. the "help me help you" flag 💖
  • -v, --verbose — turn the verbosity up. more talking, more info.
  • -q, --quiet — quiet mode. shhh. 🤫
  • -p PORT, --port=PORT — the destination port, or a whole range of ports, on the SIP device. like, eg -p5060,5061,8000-8100.
  • -P PORT, --localport=PORT — the source port for our packets.
  • -x IP, --externalip=IP — the IP address to use as the external ip. specify this if you've got multiple interfaces, or if you're sitting behind NAT 🫠
  • -b BINDINGIP, --bindingip=BINDINGIP — by default we bind to all interfaces. this option overrides that and binds to the ip address you specify instead.
  • -t SELECTTIME, --timeout=SELECTTIME — this one lets you trottle the speed at which packets get sent. change it if you're losing packets. for example, try 0.5.
  • -R, --reportback — sends the author an exception traceback. currently it sends the command line parameters and the traceback. very "not me sending a bug report at 3am" energy 🙈
  • -A, --autogetip — automatically grabs the current IP address. this is useful when you're getting zero responses back because SIPVicious isn't resolving your local IP. lowkey a lifesaver.
  • -s NAME, --save=NAME — saves the session. the benefit is that you can resume a previous scan, and it also lets you export scans. ✨
  • --resume=NAME — resumes a previous scan. pick up right where you left off, bestie.
  • -c, --enablecompact — enables compact mode. makes the packets smaller, but possibly less compatible. tradeoffs, we love them 💀
  • -d DICTIONARY, --dictionary=DICTIONARY — specify a dictionary file full of possible extension names, or use - for stdin.
  • -m OPTIONS, --method=OPTIONS — specify a request method. the default is REGISTER. other possible methods are OPTIONS and INVITE.
  • -e RANGE, --extensions=RANGE — specify an extension or an extension range. example: -e 100-999,1000-1500,9999
  • -z PADDING, --zeropadding=PADDING — the number of zeros used to padd the username. the options -e 1-9999 -z 4 would give you 0001 0002 0003 ... 9999 🎀
  • --force — force the scan, ignoring the initial sanity checks. main character energy, but also, be careful.
  • -T TEMPLATE, --template=TEMPLATE — a format string that lets us specify a template for the extensions. example: svwar.py -e 1-999 --template="123%#04i999" would scan between 1230001999 to 1230999999
  • -D, --enabledefaults — scans for default / typical extensions such as 1000, 2000, 3000 ... 1100, etc. this option is off by default. use --enabledefaults to enable this functionality.
  • --maximumtime=MAXIMUMTIME — the maximum time in seconds to keep sending requests without receiving a response back. after that, we're done waiting ⏳
  • --domain=DOMAIN — forces a specific domain name for the SIP message, eg. -d example.org
  • --debug — prints the SIP messages received. for when you simply must see everything 👀
  • -6 — scan an IPv6 address.

Sipvicious extension line scanner scans SIP PaBXs for valid extension lines.

Copyright (C) 2021 Sandro Gauci <sandro@enablesecurity.com>

This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.

This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.

You should have received a copy of the GNU General Public License along with this program. If not, see http://www.gnu.org/licenses/.

✨ SEE ALSO ✨

the full documentation for svwar.py can be found on GitHub at https://github.com/enablesecurity/sipvicious/wiki — go read it, bestie, it's giving very thorough 💅

and that's the page, bestie 🫶 you just read svwar.py v0.3.3, dated June 2020, which is the cutest little sign-off I could possibly give you. go scan responsibly, ily, bye 🌈✨

📦 where this page comes from