username: viper
password: password
VAST is a Linux-based security distribution specifically designed for pentesting VoIP and UC networks. It enables security professionals and UC owners to more rapidly perform VoIP security assessments, or enumerate vulnerabilities in IP Phones or IP PBX servers within a lab or testbed. With VAST, a security consultant has every tool necessary to carry out a successful onsite or remote penetration test or vulnerability assessment against a UC network. VAST is built on Ubuntu 9.04 and includes all of the open source VIPER Lab tools, in addition to some other network pentest tools.
VAST has been thoroughly tested in the VIPER Lab not only for operability, but for ease of use as well. In addtion, a repository system for updating VIPER Lab tools. When a new version of a VIPER tool is released, it's as easy as apt-get update.
Along with the assessment tools included in the distribution, there is also a VoIP honeyclient, for enhancing VoIP research. VAST is routinely updated in a timely manner, when new tools are developed and new exploits become available. VAST can be downloaded in .ISO format and VMWare guest image.
We are currently working on building a new version of VAST with updated UCSniff and Video libraries, based on the latest stable version of Ubuntu. We have temporarily disabled the repositories until this is done.
Version 2.77 now includes Artemisa, a VoIP Honeypot.
From Artemisa: "Artemisa is a VoIP/SIP-specific honeypot software designed to connect to a VoIP enterprise domain as a user-agent back end in order to detect malicious activity at an early stage. Moreover, the honeypot can play a role in the real-time adjustment of the security policies of the enterprise domain where it is deployed."
username:viper password:password
The newest version of VAST is available for download!
Added a few new tools such as gnu-macchanger and the newest release of SIPVicious tools (0.2.6)
The newest version of VAST is available for download!
VAST is a VIPER Lab live distribution that contains VIPER developed tools such as UCSniff, VideoJak, videosnarf and more. Along with VIPER tools and other essential VoIP security tools, it also contains tools penetration testers utilize such as Metasploit, Nmap, and Hydra.This distribution is a work in progress. If you would like to see a tool or package included please feel free to suggest them and I will do what I can to make it happen. VAST also has built into synaptic package manager a third party repository link for the VIPER tools, so when we update a tool it's as easy as "apt-get".VAST beta 2.74 has been released with UCSniff 3.0 which includes GUI interface, VoIP video realtime monitoring, TFTP MitM modification of IP phone features, Gratuitous ARP disablement bypass support, and support for several compression codecs. The new VAST also has a new look as well.
contact: Sipera VIPER lab
© Copyright 2011, Sipera Systems, Inc. 