SIPPTS

SIPPTS is programmed in Python and provides multiple utilities for auditing VoIP servers and devices that use the SIP protocol. It enables security testing of PBX systems, extensions, and related components by simulating various attacks and scans.

Use cases include fast scanning for SIP services, searching for extensions on a PBX, remote password cracking, message sending, enumeration, and flooding attacks. The toolset supports both command-line and GUI interfaces for interactive pentesting.

It is designed for pentesters to identify vulnerabilities in VoIP infrastructure, such as weak authentication, information leaks, and protocol weaknesses.

SIPPTS operates by leveraging the SIP protocol to interact with VoIP servers and devices. It uses Python libraries like python3-scapy for packet manipulation, python3-pyshark for sniffing, and others for network interactions. Subcommands implement techniques like scanning, enumeration, cracking, flooding, and RTP/RTCP bleeding attacks over SIP and WebSocket connections.