awesome-rtc-hacking

from Black Hat USA 2006

from SRLabs at Blackhat EU 2019

(language: german)

SIPVicious OSS

A set of tools to audit SIP based systems

SIPPTS

Another set of tools to audit VoIP servers and devices using SIP protocol

bluebox-ng

Pentesting framework using Node.js powers, focused in VoIP. (public archive)

SigPloit

Tool which covers all used SS7, GTP (3G), Diameter (4G) or even SIP protocols for IMS and VoLTE infrastructures

vsaudit

VoIP security assessment framework

rtpnatscan

Tool which tests for vulnerability

VIPROY

VoIP pentest framework which can be used with the metasploit-framework

A VoIP security testing tool

: SIP based test tool / traffic generator

Mr.SIP

SIP based audit and attack tool

VoIPShark

Open Source VoIP Analysis Platform

Turner

PoC for tunnelling HTTP over a permissive/open TURN server

sipsak

SIP swiss army knife, has some features that can be used for security testing (e.g. flood more or random mode)

turnproxy

Tool to abuse open TURN relays

SeeYouCM Thief

download and parse configuration files from Cisco phone systems searching for SSH credentials

stunner

a tool to test and exploit STUN, TURN and TURN over TCP servers

VoIP Hopper

a tool to exploit insecure VLANs that are often found in IP Telephony infrastructure

( )

( )

A blog about VoIP, WebRTC and real-time communications security by Enable Security

(Spanish)

Often covers SIP honeypot activity and related security topics

includes commentary on VoIP security topics

(published December 20, 2013)

(published March 21, 2008)

(published April 27, 2009)

Live environment for testing RTC attacks

CTF challenge featuring WebRTC (2020)