1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40
|
Using sipdump in combination with pcap packet dump files
--------------------------------------------------------
Create pcap packet dump file (using tcpdump):
$ tcpdump -s 0 -w pcap-capture.txt tcp or udp
Passing capture file to sipdump to search for sniffed logins:
$ sipdump -p pcap-capture.txt logins.dump
Using SIPcrack in combination with John the ripper
--------------------------------------------------
John the ripper: http://www.openwall.com/john/
Make a fifo file pipe:
$ mkfifo myfifofile
Start john using the desired settings. Below is an example which
generates passwords with max 8 letter length and only contains
alpha characters.
Using > redirect johns output into the fifo file you just created:
$ john --incremental=alpha --stdout=8 > myfifofile
Start sipcrack and use the fifo file pipe as the wordlist source:
$ sipcrack -w myfifofile logins.dump
John has some great permutation algorithm which also enhances your
wordlist files by permutate some letters and numbers. This allows you
to have a smaller wordlistfile.
See John's homepage at http://www.openwall.com/john/doc/EXAMPLES.shtml
for more examples. But dont forget to redirect output into the fifo
file pipe.
|