VOIP honeypot using asterisk.
Switch branches/tags
Nothing to show
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Failed to load latest commit information.
README
crontab
extensions.conf
project-voip.rb
sip.conf
voip.sql

README


http://projectvoip.jayscott.co.uk


Project VOIP
=============


Project VOIP was meant to be a VOIP honeypot but I havent had much time to
develop it so I am uploading everything I have so far here :-) 

Project VOIP is based on phorensix v.1 by J. Oquendo / sil @ infiltrated dot net.

Phorensix was scripted in bash and logged all information to a series of files. 
Project VOIP is coded in Ruby has been updated to work with the latest version of
asterisk and also logs all information to a MySQL database. 

Jay Scott <jay@jayscott.co.uk>


What it does
------------

-> Logs the following information to a mysql database: 
 -> IP Address information
   -> Peer(s) AS Number
   -> Netblock AS Number
   -> Netblock Prefix
   -> AS Name
   -> AS Country
   -> AS Domain name
   -> ISP Name
 -> Number called
 -> SIP Agent
 -> SIP Channel used.
 -> Traceroute of the IP Address
 -> Packet capture of the session (.cap file)
 -> Recording of the call  (.wav)

Installing
----------

Install Tshark and ruby gems if not installed already

 - apt-get install tshark rubygems mysql-client libmysqlclient-dev

Install the ruby gem files for mysql

  gem install mysql

Use the configs below as a template, changing the values as appropriate