 and VM (classic `chan_sip`/Trixbox) labs, generalizing to other Asterisk-based PBXs
* **Usage Guide** — Full command reference, what each `--mt` message type actually does, `--if`/`--pps`/`--mtu` in depth, `ngrep`, debug mode, architecture/data-flow diagram
* **Mr.SIP Pro comparison** — Full public-vs-Pro breakdown, module-by-module
* **CHANGELOG.md** — Full version history and technical rationale for each change
**SIP-NES** (Network Scanner)| Detects SIP components on a network, along with manufacturer/product/version information.
**SIP-ENUM** (Enumerator)| Identifies valid SIP users and their authentication requirements.
**SIP-DAS** (DoS Attack Simulator)| Performs TDoS-based attacks, with a powerful IP-spoofing engine.
Competitive features across all three: high-performance multithreading, IP spoofing, and smart SIP message generation.
This is the public, 3-module version — see what **Mr.SIP Pro** adds below.
Mr.SIP Pro is the most comprehensive attack-oriented VoIP product available — 10 modules across 3 categories (Information Gathering, Vulnerability Scanning, Offensive), plus IP spoofing/message-generation helper components and a GUI, versus this repo's 3 console-only modules.
→ **Full Public vs. Pro comparison** · **mrsip.pro** · **Pricing** · **Request a demo**
python3 mr.sip.py --nes --tn= --mt=options --from= --to=
python3 mr.sip.py --enum --from= [--tn= ]
python3 mr.sip.py --das --mt=invite -c --tn= [-r|-s|-m --il= ]
See the Installation Guide for OS-specific setup and the Usage Guide for the full command/flag reference.
, Singapore – Mr.SIP: Audit and Attack Tool
* Securi-Tay 2023 (Opening Keynote), Scotland – Practical VoIP/UC Hacking Using Mr.SIP
* Black Hat MEA 2022 (Briefing & Arsenal), Riyadh – VoIP Hacking Demos & Network Attacks
* Black Hat EU 2022 (Arsenal), London – VoIP Hacking Demo Using Mr.SIP Pro
* Black Hat EU 2020 (Arsenal), London – Mr.SIP: SIP-Based Audit & Attack Tool
* DEF CON 28 (Main Stage), Las Vegas – Practical VoIP Penetration Testing Using Mr.SIP Pro
* Black Hat USA 2019 (Arsenal), Las Vegas – Mr.SIP: SIP-Based Audit & Attack Tool
* Black Hat EU 2019 (Arsenal), London – Mr.SIP: SIP-Based Audit & Attack Tool
* OffZone 2019, Moscow – SIP-Based Attacks & Defense Approaches
* Black Hat Asia 2019 (Arsenal), Singapore – Mr.SIP: SIP-Based Audit & Attack Tool
See presentation links and video demos on the Demo Page.
Mr.SIP's methodologies have been cited in leading SCI-indexed journals and international conference proceedings (4 papers listed below, each individually verified against its publisher). The Cisco Press reference and graduate-thesis citations below are the author's own reported claims — searched independently while writing this section, but no specific book title, thesis, institution, or date could be found publicly to cite alongside them, including on Mr.SIP Pro's own site; noted here rather than silently dropped, since the absence of a public citation isn't evidence the claim is false, just that it can't be independently confirmed from outside sources.
* Blockchain-Based Caller-ID Authentication (BBCA): A Novel Solution to Prevent Spoofing Attacks in VoIP/SIP Networks — IEEE Access (2024)
* A Novel Approach for Efficient Mitigation Against the SIP Based DRDoS Attack — MDPI Applied Sciences (2023)
* A Novel SIP Based Distributed Reflection Denial-of-Service Attack and an Effective Defense Mechanism — IEEE Access (2020)
* Novel SIP-Based DDoS Attacks with Effective Defense Strategies — Elsevier Computers & Security (2016)
Mr.SIP's academic contributions include the following attack/defense concepts across the papers above:
* SIP-based DRDoS attacks and mitigation strategies
* Blockchain-based caller-ID authentication (BBCA)
* SIP response/request reflection attacks
* SIP registration erasure attacks on call centers
Also used in Caller-ID spoofing tests as part of a Turkish Standards Institute (TSE) collaboration on national VoIP security strategy (2015), and shared on various popular forums and news sources including Black Hat's own homepage (verified: a real Black Hat Asia Arsenal feature article describing Mr.SIP directly).
Featured by Black Hat Arsenal Highlights and showcased at numerous global conferences — including Black Hat Arsenal and DEF CON main stage.
Mr.SIP Pro has earned recognition through innovation-driven challenges and national competitions — including awards for ideas, early prototypes, or research projects that contributed directly to its foundation and evolution.
* 🥇 1st Place (Gold) – 2nd Cybersecurity Capstone Projects Competition (55 applications, 17 finalists, 2020) — corrected from a "130+ projects" claim that didn't match the primary source; verified directly against the organizer's own results post, which names Ismail Melih Tas as the gold-medal winner
* 🥈 2nd Place – Netaş Innovation Challenge (2012)
* 🥇 1st Place – Netaş Innovation Challenge (2011)
(These two Netaş placements were searched for independently but couldn't be matched to a public primary source, unlike the 2020 competition above — an old, likely-internal corporate competition from 2011-2012 not being indexed publicly isn't unusual, so this is noted rather than treated as confirmed or removed.)
### Published References (full citations)
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
