half-jiffie/organik — Issue #4: plugin_SIP_warrior.py is losing response packets!
Author: half-jiffie
Created: 2012-01-25 05:35:14+00:00
State: open
Labels: bug

Strangely, plugin_SIP_warrior.py seems to be losing response packets!

Non-deterministic bug.

For example the following are two different logs (some packets appear in B but not in A) produced by command-liner: ```./voip_plugins/plugin_SIP_warrior.py --target ekiga.net --dictionary etc/SIP/wordlists/dummy_usernames.txt ```

A)
```
-DEBUG- bound to local address:0.0.0.0: 5060
-DEBUG- using xternal ip: 127.0.0.1
-DEBUG- generating 'PING' test ..
-DEBUG- BADUSERCODE = 404
-INFO- received failure response 'SIP/2.0 404 Not Here' for username 'binladen'
-INFO- cracked username: 100 (SIP response to 'PING' request was 'SIP/2.0 480 Offline')
-INFO- cracked username: 102 (SIP response to 'PING' request was 'SIP/2.0 480 Offline')
-INFO- cracked username: jill (SIP response to 'PING' request was 'SIP/2.0 480 Offline')
-INFO- cracked username: jackjilljack (SIP response to 'PING' request was 'SIP/2.0 480 Offline')
-INFO- cracked username: jAckjilljack (SIP response to 'PING' request was 'SIP/2.0 480 Offline')
-INFO- cracked username: 1000 (SIP response to 'PING' request was 'SIP/2.0 480 Offline')
-INFO- received failure response 'SIP/2.0 404 Not Here' for username '112'
-INFO- cracked username: 103 (SIP response to 'PING' request was 'SIP/2.0 480 Offline')
-INFO- cracked username: wElcome (SIP response to 'PING' request was 'SIP/2.0 480 Offline')
-INFO- cracked username: 104 (SIP response to 'PING' request was 'SIP/2.0 480 Offline')
-INFO- cracked username: welcome (SIP response to 'PING' request was 'SIP/2.0 480 Offline')
-INFO- cracked username: 101 (SIP response to 'PING' request was 'SIP/2.0 480 Offline')
-INFO- received failure response 'SIP/2.0 404 Not Here' for username 'pingtel'
-DEBUG- making sure no pkts are lost ..
-INFO- cracked usernames: 100, 102, jill, jackjilljack, jAckjilljack, 1000, 103, wElcome, 104, welcome, 101
```

B)
```
-DEBUG- bound to local address:0.0.0.0: 5060
-DEBUG- using xternal ip: 127.0.0.1
-DEBUG- generating 'PING' test ..
-DEBUG- BADUSERCODE = 404
-INFO- cracked username: toor (SIP response to 'PING' request was 'SIP/2.0 480 Offline')
-INFO- cracked username: superman (SIP response to 'PING' request was 'SIP/2.0 480 Offline')
-INFO- cracked username: terminator (SIP response to 'PING' request was 'SIP/2.0 480 Offline')
-INFO- cracked username: ratatouille (SIP response to 'PING' request was 'SIP/2.0 480 Offline')
-INFO- cracked username: billgates (SIP response to 'PING' request was 'SIP/2.0 480 Offline')
-INFO- cracked username: root (SIP response to 'PING' request was 'SIP/2.0 480 Offline')
-INFO- cracked username: sip (SIP response to 'PING' request was 'SIP/2.0 480 Offline')
-INFO- cracked username: SIP (SIP response to 'PING' request was 'SIP/2.0 480 Offline')
-INFO- cracked username: 200 (SIP response to 'PING' request was 'SIP/2.0 480 Offline')
-INFO- cracked username: 500 (SIP response to 'PING' request was 'SIP/2.0 480 Offline')
-INFO- cracked username: jack (SIP response to 'PING' request was 'SIP/2.0 480 Offline')
-INFO- received failure response 'SIP/2.0 404 Not Here' for username 'obama'
-INFO- received failure response 'SIP/2.0 404 Not Here' for username 'binladen'
-INFO- cracked username: 100 (SIP response to 'PING' request was 'SIP/2.0 480 Offline')
-INFO- cracked username: 102 (SIP response to 'PING' request was 'SIP/2.0 480 Offline')
-INFO- cracked username: jill (SIP response to 'PING' request was 'SIP/2.0 480 Offline')
-INFO- cracked username: jackjilljack (SIP response to 'PING' request was 'SIP/2.0 480 Offline')
-INFO- cracked username: jAckjilljack (SIP response to 'PING' request was 'SIP/2.0 480 Offline')
-INFO- cracked username: 1000 (SIP response to 'PING' request was 'SIP/2.0 480 Offline')
-INFO- received failure response 'SIP/2.0 404 Not Here' for username '112'
-INFO- cracked username: 103 (SIP response to 'PING' request was 'SIP/2.0 480 Offline')
-INFO- cracked username: wElcome (SIP response to 'PING' request was 'SIP/2.0 480 Offline')
-INFO- cracked username: 104 (SIP response to 'PING' request was 'SIP/2.0 480 Offline')
-INFO- cracked username: welcome (SIP response to 'PING' request was 'SIP/2.0 480 Offline')
-INFO- cracked username: 101 (SIP response to 'PING' request was 'SIP/2.0 480 Offline')
-INFO- received failure response 'SIP/2.0 404 Not Here' for username 'pingtel'
-DEBUG- making sure no pkts are lost ..
-INFO- cracked usernames: toor, superman, terminator, ratatouille, billgates, root, sip, SIP, 200, 500, jack, 100, 102, jill, jackjilljack, jAckjilljack, 1000, 103, wElcome, 104, welcome, 101
```