Traceback (most recent call last):
  File "svmap.py", line 37, in <module>
    from .libs.pptable import to_string
ImportError: attempted relative import with no known parent package

Looks like someone just used SIPvicious to access (or attempt to) my PBX. It 
even left me a ZERO second voice mail (with the CID of SIPvicious).

This sucks! Yet another awesome tool being used by the BAD guys.

On the bright side, it led me to finding an IAX entry that the system didn't 
remove properly (which they conveniently attached to).

No damage done and ACCESS DENIED to the fool(s). VISP says no calls made since 
attach. PBX says no attached IAX devices.

Now that the bad guys are using this tool, how does the average Joe protect 
him/her self???

We need a guide to help people check things out and protect themselves! 
Anything out there in existence?

Suggestions?

Comments?

What steps will reproduce the problem?

Vicious?  Crack?   Bruteforce?

What is the expected output? 

The only possible use for this software is to attempt to hack other
networks.  What is worse it will usually be launched from someone else's
system.  Nobody will run it from their own computer.

It is a hacker tool.

Please remove it as it is being used to launch denial of service attacks on
our network.

Thanks

What steps will reproduce the problem?
1. ./svmap on putty on my server . 
2. last update from the tool . 
3.

What is the expected output? What do you see instead?
i made an text after the scan " svm.. > 1.txt " so iam confused from this lets 
see wt's goin on and how i get this .
./svmap 10.0.0.0-10.05.0.254 > 1.txt .
to understand wts goin on i'll give u an example.  from like this range 
10.0.0.0-10.0.0.1 how come to see an  ip  that is not the range like  . 
62.30.x.x for example 

What version of the product are you using? On what operating system?
last version 

Please provide any additional information below.

Command line parameters:
['/usr/local/bin/sipvicious_svmap', '-6', '2a10:1::/29', '-v', '-R']
version: 0.3.1
msg: 
python version: 
3.8.3rc1 (default, Apr 30 2020, 07:33:30) 
[GCC 9.3.0]
osname: posix
uname: posix.uname_result(sysname='Linux', nodename='Black', release='5.6.0-kali1-amd64', version='#1 SMP Debian 5.6.7-1kali1 (2020-05-12)', machine='x86_64')


Trace:
Traceback (most recent call last):
  File "/usr/local/lib/python3.8/dist-packages/sipvicious-0.3.1-py3.8.egg/sipvicious/svmap.py", line 502, in main
    sipvicious.start()
  File "/usr/local/lib/python3.8/dist-packages/sipvicious-0.3.1-py3.8.egg/sipvicious/svmap.py", line 246, in start
    localtag = createTag('%s%s' % (''.join(map(lambda x:
  File "/usr/local/lib/python3.8/dist-packages/sipvicious-0.3.1-py3.8.egg/sipvicious/svmap.py", line 247, in <lambda>
    '%02x' % int(x), dsthost[0].split('.'))),'%04x' % dsthost[1]))
ValueError: invalid literal for int() with base 10: '2a10:1::/29'

why didn't you add this ?
i mean instand of using svwar.py xx.xx.xx.xx 
why not a list 
and output it in a specified file


What version of the product are you using? On what operating system?
the latest

Please provide any additional information below.

What steps will reproduce the problem?

Vicious?  Crack?   Bruteforce?

What is the expected output? 

The only possible use for this software is to attempt to hack other
networks.  What is worse it will usually be launched from someone else's
system.  Nobody will run it from their own computer.

It is a hacker tool.

Please remove it as it is being used to launch denial of service attacks on
our network.

Thanks

"svwar -e100-200 127.0.0.1 -p 5060-5062,10000 -m INVITE"

Traceback (most recent call last):
  File "/usr/bin/svwar", line 11, in <module>
    load_entry_point('sipvicious==0.3.0', 'console_scripts', 'sipvicious_svwar')()
  File "/usr/share/sipvicious/sipvicious/svwar.py", line 601, in main
    sipvicious = TakeASip(
  File "/usr/share/sipvicious/sipvicious/svwar.py", line 86, in __init__
    self.dsthost, self.dstport = host, int(port)
ValueError: invalid literal for int() with base 10: '5060-5062,10000'
Traceback (most recent call last):

What steps will reproduce the problem?
1. I can't open svmap or any files by pythonwin
2.
3.

What is the expected output? What do you see instead?

example: "failed to import - syntax error - invalid syntax (fphelper.py, line 
57)

What version of the product are you using? On what operating system?

the last
Please provide any additional information below.

i tried with python 3.2 but it's the same

i use windows 7

What steps will reproduce the problem?

Vicious?  Crack?   Bruteforce?

What is the expected output? 

The only possible use for this software is to attempt to hack other
networks.  What is worse it will usually be launched from someone else's
system.  Nobody will run it from their own computer.

It is a hacker tool.

Please remove it as it is being used to launch denial of service attacks on
our network.

Thanks

What steps will reproduce the problem?
1. svmap.py 10.0.0.0/24

What is the expected output? What do you see instead?

Was hoping it would be able to pick up the polycom phones on the network. 
It does pick up the Asterisk server and an Aastra phone.

svmap does complain that
"WARNING:DrinkOrSip:could not bind to 0.0.0.0:5060 - some process might
already be listening on this port. Listening on port 5061 instead"

If I run svmap on another computer that isn't running Asterisk, the Polycom
phones are indeed detected.

I'm thinking it has something to do with the fact that svmap isn't able to
listen on port 5060?  Is there a way to have the detection work while
running on 5061, or is the issue that the polycoms aren't playing nice and
responding on the specified port?

What version of the product are you using? On what operating system?

svmap 0.2.4, OS is CentOS 5

and 
svmap 0.2.4, MacOS 10.5

Please provide any additional information below.

What steps will reproduce the problem?
1. the svmap runs correctly and identifies the asterisk server (v.1.4.38) on 
the server
2. when running svwar.py with extension range covering the extensions supported 
by asterisk and the IP address of the server, the process stops and shows the 
following message: 
error:TakeASip:Socket error:Timed out
Warning: root: found nothing

What version of the product are you using? On what operating system?
version: 0.2.6

Additional information:
At the asterisk server displays the message when launching the command svwar.py 
at the client side : registration from **** <sip:****@****> failed for ******- 
No matching peer found

What steps will reproduce the problem?
1. Connect a phone (Thomson ST2030)
2. User svmap to detect it
3. It doesn't work

What is the expected output? What do you see instead?
I expect to see the IP address of the phone, but ....


What version of the product are you using? On what operating system?
The latest at the moment of the SVN.

Please provide any additional information below.
root@aud-012:~# unicornscan -mT -p5060-5061 172.1X.1.159
TCP open                     sip[ 5060]         from 172.1X.1.159  ttl 64 
root@aud-012:~# unicornscan -mU -p5060-5061 172.18.1.0/24

So I think, svmap needs TCP and UDP support.

Hello ,
please can you send me the (svmap and svwar) codes with comments next to every 
line of these codes, it's very urgent please.

I need ur help please

What steps will reproduce the problem?
1. i open sipvicious
2. i write the command ./svmap.py

What is the expected output? What do you see instead?

i should start scanning the IP range , when i hit enter i get this error " 
bash: ./svmap.py: Permission denied

What version of the product are you using? On what operating system?

sipvicious-0.2.6.zip running it on Backtrack 4

Please provide any additional information below.

whenever i try the command i get the permission error it was working fine back 
then but there was another issue when i write the command i can't get any 
results .

I work for a VoIP service provider. Recently we have been seeing a massive 
number of attacks against our servers from people using SIP Vicious to look for 
insecure authentication credentials. We utilize 12-character, randomly 
generated passwords with upper and lower case letters, numbers, and symbols. In 
addition, we have recently altered our firewall configuration to return ICMP 
Administratively Prohibited when REGISTER requests come in faster than a 
specific allowed rate. However, the attackers do not seem to get the message 
that it would take them several hundred thousand years to crack one of our 
passwords using brute-force given the security measures we have in place. 
Please modify SIP Vicious to detect the ICMP Admin Prohibited messages, figure 
out the allowed rate of REGISTER requests, and then report back to the user 
that given the rate of allowed attacks, it would take hundreds of thousands of 
years to find a valid combination. This would at least make them check 
elsewhere instead of causing increased overhead on our systems.  

Trace:
Traceback (most recent call last):
  File "svcrack.py", line 534, in main
    sipvicious.start()
  File "svcrack.py", line 283, in start
    self.getResponse()
  File "svcrack.py", line 186, in getResponse
    nonce = getNonce(authheader)
  File "/root/sipvicious/sipvicious/libs/svhelper.py", line 190, in getNonce
    _tmp = re.findall(nonceRE, pkt)
  File "/usr/lib/python2.7/re.py", line 181, in findall
    return _compile(pattern, flags).findall(string)
TypeError: expected string or buffer

[deleted issue]

how can we use rainbow table with ./svcrack.py ?

What steps will reproduce the problem?
1. I can't open svmap or any files by pythonwin
2.
3.

What is the expected output? What do you see instead?

example: "failed to import - syntax error - invalid syntax (fphelper.py, line 
57)

What version of the product are you using? On what operating system?

the last
Please provide any additional information below.

i tried with python 3.2 but it's the same

i use windows 7

Added a new little feature that lets you specify a domain name for the user 
request instead of putting only the IP. Allows to user@domain, in addition to 
user@IP.

Modified to helper.py and svwar.py


contact info: dani [-at-] iniqua.com

What steps will reproduce the problem?
1.
2.
3.

What is the expected output? What do you see instead?


What version of the product are you using? On what operating system?


Please provide any additional information below.

Can you please provide me a good compiled brute force dictionary or tell me a 
good way of brute forcing through sipvicious, thanks in anticipation 

What steps will reproduce the problem?

$ ./svwar.py -d accounts.txt -P 5062 localhost
WARNING:TakeASip:could not bind to :5060 - some process might already be 
listening on this port. Listening on port 5061 instead
ERROR:TakeASip:socket error: timed out


The fix is easy.  The OptionParser is properly reading in the -P option, but 
it's not passed in to the TakeASIP() object.  "localport=options.localport" 
needs to be added as an argument when constructing TakeASIP().

What steps will reproduce the problem?
1. I can't open svmap or any files by pythonwin
2.
3.

What is the expected output? What do you see instead?

example: "failed to import - syntax error - invalid syntax (fphelper.py, line 
57)

What version of the product are you using? On what operating system?

the last
Please provide any additional information below.

i tried with python 3.2 but it's the same

i use windows 7

What steps will reproduce the problem?
1.
2.
3.

What is the expected output? What do you see instead?
i see nothing

What version of the product are you using? On what operating system?
latest version of sipvicious on windowsxp sp3

Please provide any additional information below.

i'm trying to scan using svmap.py --randomscan , a file appears in the folder 
but command line shows nothing, sorry i'm a noob so help would be much 
apprecaited, also if you can let me know if this tool still works?

What steps will reproduce the problem?

Vicious?  Crack?   Bruteforce?

What is the expected output? 

The only possible use for this software is to attempt to hack other
networks.  What is worse it will usually be launched from someone else's
system.  Nobody will run it from their own computer.

It is a hacker tool.

Please remove it as it is being used to launch denial of service attacks on
our network.

Thanks

What steps will reproduce the problem?
1. install scapy (stable & lastest revision
2. python svcrash.py --auto
3. get crash from the tool



What is the expected output? What do you see instead?


Traceback (most recent call last):
  File "svcrash.py", line 41, in ?
    from scapy.all import *
  File "/usr/lib/python2.4/site-packages/scapy/all.py", line 10, in ?
    from base_classes import *
  File "/usr/lib/python2.4/site-packages/scapy/base_classes.py", line 15, in ?
    import config
  File "/usr/lib/python2.4/site-packages/scapy/config.py", line 47
    self.args = args if args is not None else []
                      ^
SyntaxError: invalid syntax


What version of the product are you using? On what operating system?

sipvicious-0.2.6
debian 2.6.18-5-686 
debian 4.0


Please provide any additional information below.

The tool creates ".sipvicious" folder in a current folder for some reason.

I'm no export in python, here is the quick patch
http://code.google.com/p/pentoo/source/browse/portage/trunk/net-analyzer/sipvici
ous/files/sipvicious-0.2.8-path.patch

What steps will reproduce the problem?
1.
2.
3.

What is the expected output? What do you see instead?
When i run Svwar.py with host it gives following erorr :
line 765 in emit self.stream.write(fs msg.encode( utf-8 ))unicode decode error.

it shows signs instead of extensions... please i really need help here 



What version of the product are you using? On what operating system?

the last version on windows xp

Please provide any additional information below.

What steps will reproduce the problem?
1. Using any of tools to display it's help

What is the expected output? What do you see instead?

The help option --enablecompact should display less compatible

It shows less compatable

What version of the product are you using? On what operating system?

Latest

Please provide any additional information below.

The wiki help pages have the same typo

What steps will reproduce the problem?
1. run svmap.py (IP Range)


What is the expected output? What do you see instead?

Instead of scanning IP, I see the error
File "C:\<PATH_OF_Folder>\svmap.py" line 129 self.log.debug <'buff'>
SyntaxError: Invalid syntax

What version of the product are you using? On what operating system?
sipvicious-0.2.8
sipvicious-0.2.4
Please provide any additional information below.

What steps will reproduce the problem?
1. using ./svmap.py 192.168.1.1/24 
2.
3.

What is the expected output? What do you see instead?
error :DringkOrSip:socket error while sending to 192.168.1.1:5060 -> errno 11
resource temporarily unavailble

What version of the product are you using? On what operating system?
sipvicious 0.2.6 with cygwin
Os WIN7

Please provide any additional information below.

What steps will reproduce the problem?
1. C:\Python27\sipvicious-0.2.7>svwar.py -eXXXXXXXX1000-XXXXXXXX1010 10.10.10.10
2. XXXXXXXX is the 8 digits prefix of a 12 digits number ending with 1000, 1001 
... and number are registered on PBX
3. 10.10.10.10 is the IP of the PBX
The scenario is possible when the subscribers are registered with full DN 

What is the expected output? What do you see instead?
The expected output:
| Extension    | Authentication |
---------------------------------
| XXXXXXXX1003 | noauth         |
| XXXXXXXX1002 | noauth         |
| XXXXXXXX1001 | noauth         |
| XXXXXXXX1000 | noauth         |
| XXXXXXXX1007 | noauth         |
...

I see instead:

Traceback (most recent call last):
  File "C:\Python27\sipvicious-0.2.7\svwar.py", line 517, in <module>
    extensionstotry = getRange(options.range)
  File "C:\Python27\sipvicious-0.2.7\svhelper.py", line 116, in getRange
    numericrange.append(xrange(startport,endport))
OverflowError: Python int too large to convert to C long

What version of the product are you using? On what operating system?
Windows XP, Python2.7, sipvicious 0.2.7

Please provide any additional information below.

I solved this problem by modifying line 116 in file svhelper.py. I replaced 
xrange(startport,endport)
with
itertools.islice(itertools.count(startport, 1), (endport-startport))
(also "import itertools" in the beginning)

I see the same issue in line 126 same file.

What steps will reproduce the problem?

Vicious?  Crack?   Bruteforce?

What is the expected output? 

The only possible use for this software is to attempt to hack other
networks.  What is worse it will usually be launched from someone else's
system.  Nobody will run it from their own computer.

It is a hacker tool.

Please remove it as it is being used to launch denial of service attacks on
our network.

Thanks

What steps will reproduce the problem?
1. i open the file svmap.py
2. the widow open and close   in less than 1 sec.
3.

What is the expected output? What do you see instead?
it should  open the command line .. it  close  instead of that 

What version of the product are you using? On what operating system?

0.2.6   ,, windows 2003   , bython 2.7
Please provide any additional information below.

python version: 
3.8.2 (default, Apr  1 2020, 15:52:55) 
[GCC 9.3.0]
osname: posix
uname: posix.uname_result(sysname='Linux', nodename='kali', release='5.5.0-kali1-amd64', version='#1 SMP Debian 5.5.13-2kali1 (2020-04-03)', machine='x86_64')

Trace:
Traceback (most recent call last):
  File "/usr/share/sipvicious/sipvicious/svcrack.py", line 524, in main
    sipvicious.start()
  File "/usr/share/sipvicious/sipvicious/svcrack.py", line 316, in start
    self.auth['password'] = next(self.passwdgen)
  File "/usr/share/sipvicious/sipvicious/libs/svhelper.py", line 183, in dictionaryattack
    r = dictionaryfile.readline()
  File "/usr/lib/python3.8/codecs.py", line 322, in decode
    (result, consumed) = self._buffer_decode(data, self.errors, final)
UnicodeDecodeError: 'utf-8' codec can't decode byte 0x8b in position 1: invalid start byte