Page 3 of 6

Posted: Sat Mar 08, 2008 8:35 pm
by kumar
Err you can use AutoSizer to keep your MJ window from poppin up.
Peace
Kumar

Posted: Mon Mar 10, 2008 8:05 am
by twdy
Doubt they will go BYOD since they can sell ad-space on the softphone. The $20 a year charge can't cover the included DID and unlimited phone usage.

Update on the subject

Posted: Fri Mar 14, 2008 2:31 am
by codaine
Hey ppl,

I just got my MJ and directly passed on to recovering SIP credentials.

Good news is, It is possible to recover the password without any brute forcing. I have just recovered my SIP password by reverse engineering. It took almost about an hour.

Bad news is, my password was 20 characters long, both uppercase characters and digits. So brute forcing is not a good way to go by :)

I have started working on a little utility to retrieve the password. I will release as soon as it is done.

Have fun

Re: Update on the subject

Posted: Fri Mar 14, 2008 9:36 am
by tvland
I'd like to get my password as well. I'd like to know how you did that. PM me if you don't want it public.

pm'ing

Posted: Fri Mar 14, 2008 2:38 pm
by codaine
Hi,

I am not really a big fan of the PMing. I will post the information, if not the tool, publicly.
I don't see a reason to pick who to PM to. And this forum is where this information is supposed to be shared.

The reason behind my post is to stop anyone new to this issue, trying to brute-force their SIP passwords, spending resources for weeks.

And for the "been there, done that" attitude; I did not suggest my way was the only, or the best way. But, since I leave the decryption to the original software itself, and pull information out of it, I may say this will keep working as long as there is no *serious* changes in the software itself.

So, my little utility, will not provide anyone with the way to get information for any other magicjacks, since it pulls information right out of the software.

I'll be updating the forum about this.

Posted: Sat Mar 15, 2008 12:00 am
by msiam
DaaYYYemmmm!!!

Re: pm'ing

Posted: Sat Mar 15, 2008 8:53 am
by gooney
codaine wrote:Hi,

I am not really a big fan of the PMing. I will post the information, if not the tool, publicly.
I don't see a reason to pick who to PM to. And this forum is where this information is supposed to be shared.

The reason behind my post is to stop anyone new to this issue, trying to brute-force their SIP passwords, spending resources for weeks.

And for the "been there, done that" attitude; I did not suggest my way was the only, or the best way. But, since I leave the decryption to the original software itself, and pull information out of it, I may say this will keep working as long as there is no *serious* changes in the software itself.

So, my little utility, will not provide anyone with the way to get information for any other magicjacks, since it pulls information right out of the software.

I'll be updating the forum about this.
Stop teasing already... just post it, what is taking you so long? I'm sure dan wants to know about this little tool of yours... maybe he might consider the BYOD option sooner hahahha

Posted: Sat Mar 15, 2008 10:03 am
by jeffnyc
Just remember that we are MJ's guinea pigs. When we find a hole, and publish it here, MJ will then close it.

Posted: Sat Mar 15, 2008 11:22 am
by gooney
jeffnyc wrote:Just remember that we are MJ's guinea pigs. When we find a hole, and publish it here, MJ will then close it.
Thats good...MJ can learn from this... right?

Posted: Sun Mar 16, 2008 10:07 am
by kingfisher1111
Don't post anything here..Please don't show us that you are techie guys..Enough..
Thanks

Posted: Mon Mar 17, 2008 5:57 pm
by newwonder01
Let him say, we have been trying very hard to get a method.

Posted: Fri Apr 11, 2008 4:17 pm
by tvland
A few drawbacks with X-Lite that I found are (also with SJphone or other softphones):

You have to dial via the softphone
Telephone connected to MagicJack does not ring on incoming calls
You must press send to accept incoming calls
Hanging up on phone does not switch to other incoming or established call (this must be done on the softphone)
No option for copy and paste dialing
Only 1 proxy server can be in settings

These features seem exclusive to the MJ softphone software.

Posted: Thu Jun 12, 2008 9:51 pm
by semicharm
tvland wrote:These features seem exclusive to the MJ softphone software.
OH BUGGER! With all the talk of people using ATAs getting their accounts revoked and now you mean to tell me that using another softphone will hobble my service!? Now I wish I hadn't wasted all that time getting my SIP creds! :x :evil: :twisted: I DID actually get them BTW, but I guess that's sort of a moot point now... :cry: Oh well, replacing the skin at least gets rid of the ads.

Lost

Posted: Fri Jun 27, 2008 1:29 pm
by vgjhav
I am soo... lost..>Can someone help me find my sip info. I brought a wrtp54g and am trying to set it up. I found my serial number and know my number. Where do i go from here? Do i configure my own custom server or something. I did try searching the forums in vain, lots of the techno mumble got me more confused...

Any help appreciated.

Posted: Fri Jun 27, 2008 7:36 pm
by Taken83oveR
I love when you take the time to help someone, and can't even get a simple thank you. Anywho, I hope you did get it working, but I guess I am doomed to never know sense you, never got back to me (via pm). It's just plan rude. Take note, a simple thank you goes along way.

Posted: Tue Jul 01, 2008 8:14 pm
by Trebuin
Calling home from Japan only works so well setting the proxy to LA.

Getting SIP and Password?

Posted: Sat Jul 19, 2008 12:44 pm
by ramjet555
I tried F idler, got a great long line of code, which I do not know how to decode.
I'd like to be able to use my Linksys WP330 internet phone.
Has anyone been able to pull out their magic jack user and password
and get their Linksys phone working?

Thanks

Getting SIP and Password?

Posted: Sat Jul 19, 2008 2:09 pm
by ramjet555
I tried Fidler, got a great long line of code, which I do not know how to decode.
I'd like to be able to use my Linksys WP330 internet phone.
Has anyone been able to pull out their magic jack user and password
and get their Linksys phone working?

Thanks

Posted: Wed Aug 06, 2008 4:54 am
by Cybernaut
Can someone be so kind as to PM me with a method of obtaining the MJ SIP info so I can use it with my Linksys SPA2102-R ATA. Pleeeeeeze. A big THANK YOU in advance. :D

SIP Password Method Assistance

Posted: Wed Aug 06, 2008 4:09 pm
by tnnm
Likewise, would someone please be so kind as to PM me with instructions on how to obtain this?

I can verify that I'm not an MJ employee but will not share how until someone PMs me as it involves calling my actual employer by dialing a number on their website and asking for me. I just don't want to publicly disclose who I work for, so anyone who PMs me can request this verification method first.

Re: SIP Password Method Assistance

Posted: Wed Aug 06, 2008 7:43 pm
by meister_sd
tnnm wrote:Likewise, would someone please be so kind as to PM me with instructions on how to obtain this?
This thread, Page 1, 6th poster

Posted: Thu Aug 07, 2008 2:22 pm
by thechad
Hey meister_sd ! Good tip, my friend!

Posted: Mon Aug 11, 2008 2:49 am
by daisuke
I am also looking for the credentials.. Can somebody please pm me the method? Thanks in advance.

Posted: Wed Aug 13, 2008 12:56 am
by hype8912
Could someone PM me the instructions for getting my SIP credentials for setting up Gizmo5. I tried using fiddler but that was after they fixed the glitch. Anyway thanks in advance.

Posted: Thu Aug 14, 2008 8:40 pm
by TexGuy
I'm stuck on the sip password still........... :evil:

Posted: Fri Aug 15, 2008 9:59 pm
by BooDaddy
ME to.. my friend. I have my ATA unlocked... but I have searched until my eyes are bleeding and I cant seem to figure out how to get my sip creds.

Posted: Sat Aug 16, 2008 12:01 am
by TexGuy
I need unlimited LD on my eyebeam by Monday for my work so it's a must have this weekend.

Finally after 2 weeks of pulling my hair out

Posted: Sat Aug 16, 2008 3:03 am
by angel-78
I have read this forum from top to bottom (one problem is that it is so slow) and finally today I gave up on all the sniffers and brute force cracker and tried a different approach and found it. Anybody with hope that someone here will help them is mistaken. First because everyone that has it working wants it to stay working and second because the PM system is really slow. All I will say is that I found the info that pointed to the things i tried today on another website. Google is your friend.

Posted: Sat Aug 16, 2008 11:22 am
by BooDaddy
would you care to drop a hint as to what you used to search for on google?

not asking for a handout, just some direction as to where I should do my searching

Posted: Sat Aug 16, 2008 12:21 pm
by BooDaddy
WEll I need some help..

I been logging some things... and I found two lines that are interesting. Take a look... let me know by PM if I am on the right track or not please:

I have posted this from my log dump. I have replaced some of the numbers with a "#" sign.

First thing of interest:
From: "unknown"<sip:E4##9#7#[email protected]#6.1##.198>;tag=4c9c##c35#0

Second thing of intrerest (I am thinking this is it.... cause of the MD5)
Authorization: Digest username="E4##2##70#01",realm="stratus.com",nonce="671#699a_0##37",uri="sip:423##1##[email protected]##.198",response="33###363f2###6d0a939###45bb33473",algorithm=MD5

Again, I have changed some info that would be private with "#" signs. If someone can cofirm I am on the right track, I will delete this message so as not to give anything away.

------EDIT-----

This is not what I used to find my creds. I used a different method... I didnt get anything of use with the above info. This is to help those in their search for their creds.

Posted: Sun Aug 17, 2008 12:06 pm
by thechad
That's the info you'd need if you were going to brute force your credentials. And there's already a post on this thread that points to something much quicker. This thread, Page 1, 6th poster.

Posted: Sun Aug 17, 2008 1:44 pm
by BooDaddy
WOW.. I think I actually found it this time!! I completely overlook a very important part of that thread, TheChad!! I used what MagicHack mentioned, (hint, notepad++ is your friend) searched, and there it was...

Now, I am off to plug all that info into my PAP-2 and see what happens. I will report back later if I find it.

Posted: Sun Aug 17, 2008 2:50 pm
by BooDaddy
SUCCESS! I have my ata working now. All the info I needed was right here in this FORUM. The only thing I recommend is getting notepad++ to view certain files that you end up with in the process. IT makes searching through the huge files easy.

Im just a little leary about MagicJack terminating me for using an ATA. I have the 5 year plan :) that would suck to loose it.

If someone is willing to buy me another MagicJack, I will give help on setting up a PAP-2 ATA!!!! HEHEHE... :)

Posted: Mon Aug 18, 2008 11:54 am
by thechad
BooDaddy wrote:SUCCESS! I have my ata working now. All the info I needed was right here in this thread. The only thing I recommend is getting notepad++ to view certain files that you end up with in the process. IT makes searching through the huge files easy.

Im just a little leary about MagicJack terminating me for using an ATA. I have the 5 year plan :) that would suck to loose it.

If someone is willing to buy me another MagicJack, I will give help on setting up a PAP-2 ATA!!!! HEHEHE... :)
Spoofing the User Agent may help keep you under the radar too. Depending on the ATA configuration and abilities, you may be able to do it within the ATA. If not, you'll need some sort of ALG or Asterisk-like SIP trunk that can replace the User Agent before sending it to MJ.

Posted: Mon Aug 18, 2008 12:56 pm
by BooDaddy
I have a Linksys PAP2 from fonage (version 1). I will double check it tonight when I get home and see if there is an option to spoof the useragent.
Would I find the useragent info that I would need to use in the same place i found my SIP credentials??

Posted: Mon Aug 18, 2008 3:24 pm
by thechad
BooDaddy wrote:I have a Linksys PAP2 from fonage (version 1). I will double check it tonight when I get home and see if there is an option to spoof the useragent.
Would I find the useragent info that I would need to use in the same place i found my SIP credentials??
Maybe, but best way is to sniff the SIP traffic.
Should be something like: User-Agent: MagicJack/1.80.441a (SJ Labs)
...and will likely changed based on the version installed/updated.

Posted: Mon Aug 18, 2008 4:49 pm
by TexGuy
If magicjack just had a softphone download without the dingee, some of us would not be seeking other means to use magicjack.

Posted: Fri Aug 22, 2008 11:09 pm
by madmox
BooDaddy wrote:I have a Linksys PAP2 from fonage (version 1). I will double check it tonight when I get home and see if there is an option to spoof the useragent.
Would I find the useragent info that I would need to use in the same place i found my SIP credentials??
I have the same unit from linsys and would love to hear how you made out.
My magicjack stopped working about a week after i got it!
Thanks

Posted: Sat Aug 23, 2008 12:12 am
by msiam
Hey Texguy here's your Soft phone without the dingee :D

Amazing!!!

Posted: Sat Aug 23, 2008 9:05 pm
by ramsudhir
Its really amazing that you guyz are finding one or the other way to find the sip credentials of the MJ. Can anybody share their techniques to find out the sip password!!!

Thanks & Regards,
Ram

Posted: Sat Aug 23, 2008 11:13 pm
by BooDaddy
EVerything you will need to know is right there in the first page of this thread :)

Posted: Sun Aug 24, 2008 1:27 am
by khairul
BooDaddy wrote:EVerything you will need to know is right there in the first page of this thread :)
I sniff my packets using wireshark..i can't seem to get the know how of getting my password.

I might be overlooking something, i looked thru and read the thread over and over again in page 1..but can't seem to find a possible solutions.

Any kind of help would be appreciated! Cheers!

Posted: Sun Aug 24, 2008 2:04 am
by hype8912
I spent about 5 hours last weekend going through logs and reading header data but I never got anywhere. reading through the logs was almost like looking for a needle in a haystack. If I saw the information I needed I wouldn't have known that it was the correct info.

Posted: Sun Aug 24, 2008 8:14 am
by Delta-9
hype8912 wrote:I spent about 5 hours last weekend going through logs and reading header data but I never got anywhere. reading through the logs was almost like looking for a needle in a haystack. If I saw the information I needed I wouldn't have known that it was the correct info.
No need to read, use the search function in your editor and search for the word "Password"

Posted: Sun Aug 24, 2008 12:13 pm
by BooDaddy
There is alot of good info on the first page, 6th poster. Just dont over look it! I can assure you, its there, and it is very easy to find. Once you look in the right place you will see it in plain view, and you will be like, "I cant believe i overlooked it!"

Posted: Sun Aug 24, 2008 2:40 pm
by TexGuy
msiam wrote:Hey Texguy here's your Soft phone without the dingee :D
Too late, I have eyebeam working........... :roll:

Hi Boodaddy

Posted: Mon Aug 25, 2008 11:48 am
by ramsudhir
You are the man!!! Its really nice that you found a way to get your sip credentials.

I struggled for 8 hours without any success. my log file doesnt have a word called "Password" at all. I searched the log file with notepad++

This is how I started my log file

C:\Documents and Settings\sudhir\Application Data\mjusbsp>magicJack.exe /lf a.log /foreground /scf _magicJackPersonalDataRoot "L:\magicJack"

Am i doing anything wrong?

please help me finding the password.

Thanks & Regards,
Ram

Posted: Mon Aug 25, 2008 11:52 am
by BooDaddy
You are close, but used the wrong program. Check back on this thread at the first page... 6th poster. Read his post in its entirety.

Posted: Mon Aug 25, 2008 7:22 pm
by Delta-9
So anyone using another softphone, X-Lite in particular. Would you mind sharing your "dialing plan"?

I would like to be able to dial local phone numbers as a 7digit number and have the area code added. I would also like to be able to successfully dial *678*00-444-4444 when I want to spoof CID.

currently I just have the default dialing plan which is: #n\a\a.T;match=1;prestrip=2;

Posted: Tue Aug 26, 2008 4:01 pm
by TexGuy
Delta-9 wrote:So anyone using another softphone, X-Lite in particular. Would you mind sharing your "dialing plan"?

I would like to be able to dial local phone numbers as a 7digit number and have the area code added. I would also like to be able to successfully dial *678*00-444-4444 when I want to spoof CID.

currently I just have the default dialing plan which is: #n\a\a.T;match=1;prestrip=2;
I would suggest you try the counterpath.com forum for that.