if you use fiddler2 to look for your sip login credentials

magicJack Tips and Tricks

Moderators: Bill Smith, Pilot

aone999
MagicJack User
Posts: 42
Joined: Mon Nov 12, 2007 11:50 pm

Post by aone999 »

if somebody can write a detailed tutorial on this, I'll be highly obliged
chris
MagicJack Newbie
Posts: 6
Joined: Thu Nov 15, 2007 10:05 am

Post by chris »

Could someone please explain how one theoretically would pull the sip information from the provision header GET /softphone/provision/?version= using fiddler. Just curious for information's sake. I would never violate my oath and terms of contract with magicjack

What codes would magicjack support, it seems gsm might be the best of breed in quality versus bandwidth.

Keep the internet FREE from Government and Corporate control vote Ron Paul for President in 2008 !
Last edited by chris on Thu Dec 06, 2007 5:58 pm, edited 1 time in total.
chris
MagicJack Newbie
Posts: 6
Joined: Thu Nov 15, 2007 10:05 am

Post by chris »

It was so easy I feel stupid now! just remember you have to set the web browser to use fiddler as a proxy, it is basically like a "man in the middle" attack. Make sure fiddler is set to "decrypt HTTPS traffic" and click on the https header, check the "session inspector". This is why gurus get mad, because people don't want to take the time to read and figure out something so simple. THIS ROCKS!

Has anyone tried different codecs?ULAW\G.711 is not the best option for bandwidth. I wonder if one could use GSM or another low bandwidth codecs?

Keep the internet FREE from Government and Corporate control vote Ron Paul for President in 2008 !
Last edited by chris on Thu Dec 06, 2007 5:58 pm, edited 1 time in total.
chris
MagicJack Newbie
Posts: 6
Joined: Thu Nov 15, 2007 10:05 am

Post by chris »

can't get it to register with IDEFISK, in the username do you have to put the E before the number and the back to digits? fake info example

[Sip 2.0]
ProxyUserName=E713555121201
ProxyUserPassword=1234
SIPCallerID=E713555121201
RegisterOnProxy=1
SIPVoiceMailAddress=7135551212
EnableTelephoneEvents=1
UserDomain=69.186.13.98
ProxyDomain=proxy1.cornbread.talk4free.com
ProxyPort=5070
ProxyStrictOutbound=1
[CustomFields]
CustomField17="http://69.186.13.98/upgrade/2007-01-07/ ... kAddin.exe"
CustomField10="http://www.free611.com"
CustomField11="7135551212"

mmm don't understand, does the E and last two numbers need to be added on the NPA-NXX-XXXX? Maybe I should try sjphone first. I want to port it to a ppc cellphone with a broadband 3 connection and see if it works.
Last edited by chris on Fri Nov 16, 2007 10:41 am, edited 2 times in total.
chris
MagicJack Newbie
Posts: 6
Joined: Thu Nov 15, 2007 10:05 am

Post by chris »

OK, need the E in E713555121201 , but what about the last two numbers added on the end E 7135551212 01 <--

maybe the ISP is blocking SIP? I didn't think of that. I will try it on another internet connection.
Stewart
Dan Should Pay Me
Posts: 663
Joined: Tue Nov 13, 2007 2:58 pm

Post by Stewart »

Are you getting an error response to your REGISTER requests? If so, what is the status code? If not (i.e. no response at all), verify that your request is going to UDP port 5070. IMO it's very unlikely that your ISP is blocking it. Your router or software firewall could cause the trouble, though.
User avatar
laserjobs
Dan Should Pay Me
Posts: 670
Joined: Mon Nov 12, 2007 4:11 pm

Post by laserjobs »

proxy1.cornbread.talk4free.com:5070

They do not use the default port 5060
aone999
MagicJack User
Posts: 42
Joined: Mon Nov 12, 2007 11:50 pm

Post by aone999 »

Thanks for posting the SIP details
chris
MagicJack Newbie
Posts: 6
Joined: Thu Nov 15, 2007 10:05 am

Post by chris »

I will be trying it on sjphone and using a different ISP. The port is 5070 and not the standard sip port of 5060. I can put a packet sniffer on it and report the progress of the SIP registration. I was using a air card through a cellular account so it is a real possibility that they are blocking the SIP protocol and that is why maybe MJ changed the default port so they would have less problems with ISP that are blocking it and by the way some are.


P.S. The Sip info I provided was fake, that does not correspond to a real SIP account. It was just a copy of mine altered, so don't waste your time.
tom
MagicJack Newbie
Posts: 1
Joined: Fri Nov 16, 2007 7:17 pm
Location: SF Bay Area

Post by tom »

laserjobs ... thanks to your tip about adding :5070 to the end of the proxy address, i was able to get my pap2 up and running. much appreciation to you and those individuals who set up the blog and this forum.
anant
Dan isn't smart enough to hire me
Posts: 114
Joined: Mon Nov 12, 2007 7:44 pm

Post by anant »

Hi Chris:

I am new to fiddler. I am in learning mode. u said earlier

you have to set the web browser to use fiddler as a proxy.

I use IE as my browser. Where do I set Fiddler as a proxy. My objective is to pull SIP data. How do I get that information

anant
aone999
MagicJack User
Posts: 42
Joined: Mon Nov 12, 2007 11:50 pm

Post by aone999 »

With the help of this forum and many members, I was able to get the SIP details from MJ successfully. Though I didn't use an ATA (and have no intentions to use one), I was able to successfully use ExpressTalk softphone and make a call.

For some reason, Fiddler didn't work for me. I had to use a tool called "Cain" (http://www.oxid.it/). However, it was smooth.

I thank all people who helped me in this adventure. I am thankful to this forum.
jeffnyc
Dan isn't smart enough to hire me
Posts: 336
Joined: Sat Nov 17, 2007 10:28 am

Post by jeffnyc »

I tried to access the register screen and got this

Code: Select all

The remote server has presented a certificate that did not validate.

[email protected], CN=prov1.talk4free.com, O=Ymax Communcations, L=Palm Beach, S=FL, C=US
RemoteCertificateChainErrors

(This warning can be disabled by clicking Tools | Fiddler Options.)
Does that mean this guy, Greg Wood is getting an email every time I try to login.

Anyway, after I login the window closes and I get nothing... guess I'll have to wait til 12/1 or whatever date they end up pushing it to
jeffnyc
Dan isn't smart enough to hire me
Posts: 336
Joined: Sat Nov 17, 2007 10:28 am

Post by jeffnyc »

imo, this thread should be kept to private messages -
jeffnyc
Dan isn't smart enough to hire me
Posts: 336
Joined: Sat Nov 17, 2007 10:28 am

Post by jeffnyc »

But this forum is not a secret... it is public on the web. I found it from a link in the dslr forum.
kumar
Dan Should Pay Me
Posts: 806
Joined: Thu Nov 15, 2007 4:29 pm
Contact:

Post by kumar »

aone999 wrote:Thanks for posting the SIP details
Yup!! now 500 people can share one line and i can return my jack:-p
Will not be on forum until after June 15th.
aone999
MagicJack User
Posts: 42
Joined: Mon Nov 12, 2007 11:50 pm

Post by aone999 »

jeffnyc wrote:imo, this thread should be kept to private messages -
I agree with this. Same thing happened with Vonage and SR before. When they saw that people are hacking their SIP details, they encrypted the details.
jeffnyc
Dan isn't smart enough to hire me
Posts: 336
Joined: Sat Nov 17, 2007 10:28 am

Post by jeffnyc »

Softphones would not work with Sunrocket after they encrypted. For example, you use to have to hack the User-Agent with a hex editor in order to use Xlite.
DocRobster
MagicJack Newbie
Posts: 1
Joined: Sun Nov 18, 2007 6:31 pm

Sucess with Asterisk or Trixbox?

Post by DocRobster »

Has anyone set up a SIP trunk in Asterisk and get the MagicJack to work? I am still trying to determine what info I need to get from Fiddler to make X-Lite work. Any hints?

Thanks!

Doc
kumar
Dan Should Pay Me
Posts: 806
Joined: Thu Nov 15, 2007 4:29 pm
Contact:

Re: Sucess with Asterisk or Trixbox?

Post by kumar »

DocRobster wrote:Has anyone set up a SIP trunk in Asterisk and get the MagicJack to work? I am still trying to determine what info I need to get from Fiddler to make X-Lite work. Any hints?

Thanks!

Doc
X-lite simple to config....here this may help

Display Name: <enter whatever you want>
User Name: EXXXYYYZZZZ01 (set to what you got from the prov server)
Password: <4 digit password>
Authorization username: EXXXYYYZZZZ01
Domain: 67.106.133.198

Check Box "Register with domain and receive incoming calls"
Select "Proxy", Address: 67.106.133.198:5070

we have it set up in india to save on shipping the actual thing. It works very well. Enjoy
Will not be on forum until after June 15th.
diplexer
magicJack Apprentice
Posts: 11
Joined: Tue Nov 20, 2007 4:36 pm

newbie

Post by diplexer »

Can someone walk me through using and setting up fiddler? I tried and cannot get any https from MJ?
kumar
Dan Should Pay Me
Posts: 806
Joined: Thu Nov 15, 2007 4:29 pm
Contact:

Post by kumar »

You have to go to go to tools and options and select anything that does with https i think...Don't remeber clearly but im pretty sure. If i was on Windows I would tell you exaclty with screen shots...Mabey tonight.
Will not be on forum until after June 15th.
diplexer
magicJack Apprentice
Posts: 11
Joined: Tue Nov 20, 2007 4:36 pm

Post by diplexer »

Thanks Kumar. I got it working.
aone999
MagicJack User
Posts: 42
Joined: Mon Nov 12, 2007 11:50 pm

Post by aone999 »

MJ softphone is sending User Agent info (MagicJack / SJPhone etc) along with registration request.

If we use a softphone like X-Lite (and if they log the SIP registration details), can't they find out what we are doing?

Anybody figured out ways to change the UserAgent string in softphones like X-Lite, SJPhone, Express Talk etc ?
kumar
Dan Should Pay Me
Posts: 806
Joined: Thu Nov 15, 2007 4:29 pm
Contact:

Post by kumar »

diplexer wrote:Thanks Kumar. I got it working.
No problemo :wink:
Will not be on forum until after June 15th.
JUDGE
MagicJack Newbie
Posts: 5
Joined: Wed Nov 21, 2007 8:47 am

Post by JUDGE »

can someone post a walkthrough of the set-up of mj on a unlocked ac-211-sr,,i ran fiddler and have the sip info ,,thank for any help. :roll:
kumar
Dan Should Pay Me
Posts: 806
Joined: Thu Nov 15, 2007 4:29 pm
Contact:

Post by kumar »

JUDGE wrote:can someone post a walkthrough of the set-up of mj on a unlocked ac-211-sr,,i ran fiddler and have the sip info ,,thank for any help. :roll:
Hehe those were easy to unlock and i was a retard and reflashed it. Of course the flash failed and made it a brick. I could have done it with out reflashing. Oh well....Its relaxing in the closet. But anyway as far using it you can just SIP then if theres line 1 or what ever, Then you just enter in all the info that you got from fiddler. Proxy is 67.106.133.198:5070 if fiddler doesn't tell u that. Hope it helps a little.


BTW anyone know hoe to set up 911 with SIP? Is it possible or does it already work? Thanks
Last edited by kumar on Wed Nov 21, 2007 12:16 pm, edited 1 time in total.
Will not be on forum until after June 15th.
kumar
Dan Should Pay Me
Posts: 806
Joined: Thu Nov 15, 2007 4:29 pm
Contact:

Post by kumar »

smcinaz wrote:Kumar, could you please try to use at least a tiny bit of spell check and grammar? Reading your posts hurts my eyes/brain/sensibilities.
Sorry that time, my fingers were asleep. I'll edit it
Will not be on forum until after June 15th.
jeffnyc
Dan isn't smart enough to hire me
Posts: 336
Joined: Sat Nov 17, 2007 10:28 am

Post by jeffnyc »

does 911 address hold when using ata?
seattlecard
MagicJack Newbie
Posts: 5
Joined: Fri Nov 30, 2007 3:37 am

Post by seattlecard »

Rookie question, what does knowing your SIP information enable you to do?
MagicHack
Dan isn't smart enough to hire me
Posts: 241
Joined: Mon Nov 12, 2007 4:11 pm
Contact:

Post by MagicHack »

seattlecard wrote:Rookie question, what does knowing your SIP information enable you to do?
The SIP info contains everything you need to be able to configure a different softphone and/or use an old ATA. For example, if you had sunrocket, you can unlock your sunrocket gizmo, and reprogram the gizmo to work with the magicJack SIP info.
MagicHack
Dan isn't smart enough to hire me
Posts: 241
Joined: Mon Nov 12, 2007 4:11 pm
Contact:

Post by MagicHack »

smcinaz wrote:
MagicHack wrote:
seattlecard wrote:Rookie question, what does knowing your SIP information enable you to do?
The SIP info contains everything you need to be able to configure a different softphone and/or use an old ATA. For example, if you had sunrocket, you can unlock your sunrocket gizmo, and reprogram the gizmo to work with the magicJack SIP info.
But, oh my, MagicHack, wouldn't that be violating the MagicJack TOS and be considered theft of service?
Haha. Like you care about the TOS, smc.

Yes, technically using a different device to access the magicJack service would violate the magicJack TOS. However, I don't think using a service that you paid for to be "theft of service." If you decided to register random magicJack serial numbers, and provision them, that would be theft of service.

I did not tell them to do it, I simply said this would be possible.

All of my posts are for informational, and educational use only.
ramuk
MagicJack Newbie
Posts: 3
Joined: Tue Nov 27, 2007 12:38 am

help

Post by ramuk »

I am stuck ....I dont know what to do. I downloaded fiddler and then went to options to check `decrypt https. Clicked session inspector. I see Proxy Connection: Keep-Alive,................I see something called E-tag...I dont know which info do I need to enter in the PAP2 settings as I unlocked it.

I am a noob - yes. I could get the Host: 67.106.133.212 info as per fiddler and I dont see the Exxxyyzzzz01 thing in the fiddler nor do I see anything which tells me that this is proxy....Any guidance is very much appreciated. Thanks
Last edited by ramuk on Fri Nov 30, 2007 2:53 pm, edited 1 time in total.
Poo619
MagicJack Expert
Posts: 96
Joined: Tue Nov 20, 2007 9:27 am

Post by Poo619 »

reread the posts on the first page there is a little more info as you get deeper in the posts. its easy once you click around :)
gomike78
MagicJack Newbie
Posts: 5
Joined: Tue Dec 04, 2007 12:44 pm

Post by gomike78 »

chris wrote:It was so easy I feel stupid now! just remember you have to set the web browser to use fiddler as a proxy, it is basically like a "man in the middle" attack. Make sure fiddler is set to "decrypt HTTPS traffic" and click on the https header, check the "session inspector". ?
I am not sure what I am doing wrong as I have enabled the "decrypt HTTPS traffic"

It seems like I have checked everywhere and I can not find where the username and password are.

If someone can offer some advice it would be appreciated.
jeffnyc
Dan isn't smart enough to hire me
Posts: 336
Joined: Sat Nov 17, 2007 10:28 am

Post by jeffnyc »

Its in there. You just have to click the right tab. I'm not sure exactly which but check out the thread re: setting up a different softphone. Much easier way to get sip info.

http://www.phoneservicesupport.com/walk ... e-t96.html

update: i believe this no longer works -
Last edited by jeffnyc on Wed Dec 12, 2007 12:37 am, edited 2 times in total.
chris
MagicJack Newbie
Posts: 6
Joined: Thu Nov 15, 2007 10:05 am

Post by chris »

Has anyone tried this on an ATA? If it works.......... I wonder how long you could away with running it on a little Grandstream handytone?
Wonder if they could find out and shut you off??

Hey laserjobs - I am an organizer in a Ron Paul 2008 Meetup group! I seen some of your posts and know that you are a RP supporter too. way to go, all the tech I know as well as haxxxors support RP.


Keep the internet FREE from Government and Corporate control vote Ron Paul for President in 2008 !
drjekyl
MagicJack Contributor
Posts: 69
Joined: Wed Dec 12, 2007 6:31 pm

Help With Old SR AC-211-SR

Post by drjekyl »

I have read this thread and have gotten the needed credentials via Fiddler2. The problem is that I can't seem to figure out what to put where on my left over AC-211-SR from Sun Rocket in order to make it work.

The fields that need to be filled in for the SIP area of the AC-211 (the ones I can't figure out) are:

SIP Server Settings


IP Address:

Port:

Domain Name:

Then

User/Phone Number:

CallerID Name:

Port:

Authentication User Name:

Password:

Now, I know the User/Phone Number is E then area code and phone number +01 and caller ID name doesn't matter (?) and the Port is 5070...but the rest is kinda fuzzy and I have tried different things but none have worked.

Can someone who has actually or is actually using an AC-211 please post exactly what you put in these various fields in order to make it work? I would really appreciate it.
User avatar
laserjobs
Dan Should Pay Me
Posts: 670
Joined: Mon Nov 12, 2007 4:11 pm

Post by laserjobs »

IP Address: proxy1.newark.talk4free.com:5070
Port: 5060
drjekyl
MagicJack Contributor
Posts: 69
Joined: Wed Dec 12, 2007 6:31 pm

Post by drjekyl »

laserjobs wrote:IP Address: proxy1.newark.talk4free.com:5070
Port: 5060
No go.
drjekyl
MagicJack Contributor
Posts: 69
Joined: Wed Dec 12, 2007 6:31 pm

Post by drjekyl »

I got it to go, finally.

I just used the server name X 2 instead of the IP's and it resolved correctly.

It was having a problem because the IP for the servername was not resolving to the same as the one that Fiddler2 found.

I think the MJ people might be trying to crossup the people who are using ATA'sto bypass the MJ device.
blackcat
MagicJack Newbie
Posts: 4
Joined: Thu Dec 13, 2007 2:46 am

Post by blackcat »

Fiddler is showing my password as 12 digits instead of 4, anyone else have this happen? I'm trying to set up on an AC-211 but not having any luck.
jeffnyc
Dan isn't smart enough to hire me
Posts: 336
Joined: Sat Nov 17, 2007 10:28 am

Post by jeffnyc »

yes they changed the password length.... i had no prob though on my pap2t
candlebox1369
MagicJack User
Posts: 43
Joined: Fri Dec 21, 2007 2:28 am

Post by candlebox1369 »

i posted something similar in the Walk-through to configure a different softphone...

i managed to get it working with fiddler... but the data i need isn't there... or maybe it is but it's encrypted. Is there something else I can use to get my sip info?

need help. muchas gracias.
anant
Dan isn't smart enough to hire me
Posts: 114
Joined: Mon Nov 12, 2007 7:44 pm

Post by anant »

Hi:

Please read the first post by Gregg under Walk Thru to configure a different softphone ( page 1) and follow the steps to obtain the serial # of ur MJ. Plug that information in the following Link U can find the following link in the page 2 by stewart/MagicHack.

http://prov1.talk4free.com/softphone/pr ... xxxxxxxxxx .

Once u plug in the serial # information u will get all the necessary SIP credentials. It is piece of cake.I was not successful with Fiddler 2. I got confirmation of the userproxyname using Cain.

Please try the above.

anant
candlebox1369
MagicJack User
Posts: 43
Joined: Fri Dec 21, 2007 2:28 am

Post by candlebox1369 »

Thanks for the help. I've tried a lot of things, but it looks like magicJack has changed it... Here is the output

��2�F�z���{lm��M;D��(�6�`����J�K�q��Y��P����MQ�ȝ��(�K��bWs �����̹�%ʐ��A�:���3��%X���;C̚H�KM�3L�mC��q%}���9��U��¾�8�e�CRך����,&#134;��fJ�7(J�`��fλ���3pey.2(�(ab������ܥIRi%����� `'����S8E�uI&���|ߩpQ��y�V���=c\D@lE�TS���BrB,Cvm��Ox�!�ⱻ�#�J#O�cJ�H� �t�l����:ͦt8!���W�sҖ�sϫ��Rm�J���,����R��.�z]J�L���`���]���>�?L���ҕ/��

I have since been able to get the user name by using Cain & Abel, but not the password. Can anyone tell me what the 12 character password consists of (numbers only, or also letters, and if so is it upper or lower or both)? Maybe I can brute force it if I narrow it down. Thanks.
drjekyl
MagicJack Contributor
Posts: 69
Joined: Wed Dec 12, 2007 6:31 pm

Post by drjekyl »

I don't believe that method works anymore.
jeffnyc
Dan isn't smart enough to hire me
Posts: 336
Joined: Sat Nov 17, 2007 10:28 am

Post by jeffnyc »

The above gave me all zeros. I was able to get it from fiddler though.
anant
Dan isn't smart enough to hire me
Posts: 114
Joined: Mon Nov 12, 2007 7:44 pm

Post by anant »

Hi

I checked just now That link in my earlier that worked for me earlier does not work any more. I got userproxyname from Cain but not password. The password for my MJ is a 4-digit #. Fiddler 2 never worked for me. could be because I was dealing with replacement unit. I was getting CONNECT in the host firld and proxy1.----------- in the URL field andanother linewith CONNECT under host and proxy2.xxxxxxxxxx. I never got proxy1.xxxxxx under host. something must have been changed. This SIP credentials are crucian toadapt MJ to either soft phones or ATA. MJ folks could be changing.

anant
drjekyl
MagicJack Contributor
Posts: 69
Joined: Wed Dec 12, 2007 6:31 pm

Post by drjekyl »

As I posted a few days back, I believe they are attempting to make it harder to get the info and use it in ATA's. Harder but not impossible.
Post Reply