if you use fiddler2 to look for your sip login credentials

aone999 · Post by **aone999** » Tue Nov 13, 2007 12:17 am

if somebody can write a detailed tutorial on this, I'll be highly obliged

chris · Post by **chris** » Thu Nov 15, 2007 10:08 am

Could someone please explain how one theoretically would pull the sip information from the provision header GET /softphone/provision/?version= using fiddler. Just curious for information's sake. I would never violate my oath and terms of contract with magicjack

What codes would magicjack support, it seems gsm might be the best of breed in quality versus bandwidth.

Keep the internet FREE from Government and Corporate control vote Ron Paul for President in 2008 !

chris · Post by **chris** » Thu Nov 15, 2007 12:32 pm

It was so easy I feel stupid now! just remember you have to set the web browser to use fiddler as a proxy, it is basically like a "man in the middle" attack. Make sure fiddler is set to "decrypt HTTPS traffic" and click on the https header, check the "session inspector". This is why gurus get mad, because people don't want to take the time to read and figure out something so simple. THIS ROCKS!

Has anyone tried different codecs?ULAW\G.711 is not the best option for bandwidth. I wonder if one could use GSM or another low bandwidth codecs?

Keep the internet FREE from Government and Corporate control vote Ron Paul for President in 2008 !

chris · Post by **chris** » Thu Nov 15, 2007 1:34 pm

can't get it to register with IDEFISK, in the username do you have to put the E before the number and the back to digits? fake info example

[Sip 2.0]
ProxyUserName=E713555121201
ProxyUserPassword=1234
SIPCallerID=E713555121201
RegisterOnProxy=1
SIPVoiceMailAddress=7135551212
EnableTelephoneEvents=1
UserDomain=69.186.13.98
ProxyDomain=proxy1.cornbread.talk4free.com
ProxyPort=5070
ProxyStrictOutbound=1
[CustomFields]
CustomField17="http://69.186.13.98/upgrade/2007-01-07/ ... kAddin.exe"
CustomField10="http://www.free611.com"
CustomField11="7135551212"

mmm don't understand, does the E and last two numbers need to be added on the NPA-NXX-XXXX? Maybe I should try sjphone first. I want to port it to a ppc cellphone with a broadband 3 connection and see if it works.

chris · Post by **chris** » Thu Nov 15, 2007 2:15 pm

OK, need the E in E713555121201 , but what about the last two numbers added on the end E 7135551212 01 <--

maybe the ISP is blocking SIP? I didn't think of that. I will try it on another internet connection.

Stewart · Post by **Stewart** » Thu Nov 15, 2007 2:36 pm

Are you getting an error response to your REGISTER requests? If so, what is the status code? If not (i.e. no response at all), verify that your request is going to UDP port 5070. IMO it's very unlikely that your ISP is blocking it. Your router or software firewall could cause the trouble, though.

Post by **laserjobs** » Thu Nov 15, 2007 3:25 pm

proxy1.cornbread.talk4free.com:5070

They do not use the default port 5060

aone999 · Post by **aone999** » Thu Nov 15, 2007 6:23 pm

Thanks for posting the SIP details

chris · Post by **chris** » Fri Nov 16, 2007 10:15 am

I will be trying it on sjphone and using a different ISP. The port is 5070 and not the standard sip port of 5060. I can put a packet sniffer on it and report the progress of the SIP registration. I was using a air card through a cellular account so it is a real possibility that they are blocking the SIP protocol and that is why maybe MJ changed the default port so they would have less problems with ISP that are blocking it and by the way some are.

P.S. The Sip info I provided was fake, that does not correspond to a real SIP account. It was just a copy of mine altered, so don't waste your time.

tom · Post by **tom** » Fri Nov 16, 2007 7:25 pm

laserjobs ... thanks to your tip about adding :5070 to the end of the proxy address, i was able to get my pap2 up and running. much appreciation to you and those individuals who set up the blog and this forum.

anant · Post by **anant** » Fri Nov 16, 2007 8:30 pm

Hi Chris:

I am new to fiddler. I am in learning mode. u said earlier

you have to set the web browser to use fiddler as a proxy.

I use IE as my browser. Where do I set Fiddler as a proxy. My objective is to pull SIP data. How do I get that information

anant

aone999 · Post by **aone999** » Sat Nov 17, 2007 3:48 am

With the help of this forum and many members, I was able to get the SIP details from MJ successfully. Though I didn't use an ATA (and have no intentions to use one), I was able to successfully use ExpressTalk softphone and make a call.

For some reason, Fiddler didn't work for me. I had to use a tool called "Cain" (http://www.oxid.it/). However, it was smooth.

I thank all people who helped me in this adventure. I am thankful to this forum.

jeffnyc · Post by **jeffnyc** » Sat Nov 17, 2007 1:44 pm

I tried to access the register screen and got this

Code: Select all

The remote server has presented a certificate that did not validate.

[email protected], CN=prov1.talk4free.com, O=Ymax Communcations, L=Palm Beach, S=FL, C=US
RemoteCertificateChainErrors

(This warning can be disabled by clicking Tools | Fiddler Options.)

Does that mean this guy, Greg Wood is getting an email every time I try to login.

Anyway, after I login the window closes and I get nothing... guess I'll have to wait til 12/1 or whatever date they end up pushing it to

jeffnyc · Post by **jeffnyc** » Sun Nov 18, 2007 11:54 am

imo, this thread should be kept to private messages -

jeffnyc · Post by **jeffnyc** » Sun Nov 18, 2007 12:24 pm

But this forum is not a secret... it is public on the web. I found it from a link in the dslr forum.

kumar · Post by **kumar** » Sun Nov 18, 2007 1:32 pm

aone999 wrote:Thanks for posting the SIP details

Yup!! now 500 people can share one line and i can return my jack:-p

aone999 · Post by **aone999** » Sun Nov 18, 2007 2:48 pm

jeffnyc wrote:imo, this thread should be kept to private messages -

I agree with this. Same thing happened with Vonage and SR before. When they saw that people are hacking their SIP details, they encrypted the details.

jeffnyc · Post by **jeffnyc** » Sun Nov 18, 2007 3:13 pm

Softphones would not work with Sunrocket after they encrypted. For example, you use to have to hack the User-Agent with a hex editor in order to use Xlite.

DocRobster · Post by **DocRobster** » Sun Nov 18, 2007 6:42 pm

Has anyone set up a SIP trunk in Asterisk and get the MagicJack to work? I am still trying to determine what info I need to get from Fiddler to make X-Lite work. Any hints?

Thanks!

Doc

kumar · Post by **kumar** » Mon Nov 19, 2007 9:36 pm

DocRobster wrote:Has anyone set up a SIP trunk in Asterisk and get the MagicJack to work? I am still trying to determine what info I need to get from Fiddler to make X-Lite work. Any hints?

Thanks!

Doc

X-lite simple to config....here this may help

Display Name: <enter whatever you want>
User Name: EXXXYYYZZZZ01 (set to what you got from the prov server)
Password: <4 digit password>
Authorization username: EXXXYYYZZZZ01
Domain: 67.106.133.198

Check Box "Register with domain and receive incoming calls"
Select "Proxy", Address: 67.106.133.198:5070

we have it set up in india to save on shipping the actual thing. It works very well. Enjoy

diplexer · Post by **diplexer** » Tue Nov 20, 2007 4:43 pm

Can someone walk me through using and setting up fiddler? I tried and cannot get any https from MJ?

kumar · Post by **kumar** » Tue Nov 20, 2007 4:55 pm

You have to go to go to tools and options and select anything that does with https i think...Don't remeber clearly but im pretty sure. If i was on Windows I would tell you exaclty with screen shots...Mabey tonight.

diplexer · Post by **diplexer** » Tue Nov 20, 2007 5:09 pm

Thanks Kumar. I got it working.

aone999 · Post by **aone999** » Tue Nov 20, 2007 8:51 pm

MJ softphone is sending User Agent info (MagicJack / SJPhone etc) along with registration request.

If we use a softphone like X-Lite (and if they log the SIP registration details), can't they find out what we are doing?

Anybody figured out ways to change the UserAgent string in softphones like X-Lite, SJPhone, Express Talk etc ?

kumar · Post by **kumar** » Wed Nov 21, 2007 12:00 am

diplexer wrote:Thanks Kumar. I got it working.

No problemo

JUDGE · Post by **JUDGE** » Wed Nov 21, 2007 9:20 am

can someone post a walkthrough of the set-up of mj on a unlocked ac-211-sr,,i ran fiddler and have the sip info ,,thank for any help.

kumar · Post by **kumar** » Wed Nov 21, 2007 11:26 am

JUDGE wrote:can someone post a walkthrough of the set-up of mj on a unlocked ac-211-sr,,i ran fiddler and have the sip info ,,thank for any help.

Hehe those were easy to unlock and i was a retard and reflashed it. Of course the flash failed and made it a brick. I could have done it with out reflashing. Oh well....Its relaxing in the closet. But anyway as far using it you can just SIP then if theres line 1 or what ever, Then you just enter in all the info that you got from fiddler. Proxy is 67.106.133.198:5070 if fiddler doesn't tell u that. Hope it helps a little.

BTW anyone know hoe to set up 911 with SIP? Is it possible or does it already work? Thanks

kumar · Post by **kumar** » Wed Nov 21, 2007 12:15 pm

smcinaz wrote:Kumar, could you please try to use at least a tiny bit of spell check and grammar? Reading your posts hurts my eyes/brain/sensibilities.

Sorry that time, my fingers were asleep. I'll edit it

jeffnyc · Post by **jeffnyc** » Thu Nov 29, 2007 9:12 pm

does 911 address hold when using ata?

seattlecard · Post by **seattlecard** » Fri Nov 30, 2007 3:53 am

Rookie question, what does knowing your SIP information enable you to do?

Post by **MagicHack** » Fri Nov 30, 2007 9:36 am

seattlecard wrote:Rookie question, what does knowing your SIP information enable you to do?

The SIP info contains everything you need to be able to configure a different softphone and/or use an old ATA. For example, if you had sunrocket, you can unlock your sunrocket gizmo, and reprogram the gizmo to work with the magicJack SIP info.

Post by **MagicHack** » Fri Nov 30, 2007 11:17 am

smcinaz wrote:
MagicHack wrote:
seattlecard wrote:Rookie question, what does knowing your SIP information enable you to do?
The SIP info contains everything you need to be able to configure a different softphone and/or use an old ATA. For example, if you had sunrocket, you can unlock your sunrocket gizmo, and reprogram the gizmo to work with the magicJack SIP info.
But, oh my, MagicHack, wouldn't that be violating the MagicJack TOS and be considered theft of service?

Haha. Like you care about the TOS, smc.

Yes, technically using a different device to access the magicJack service would violate the magicJack TOS. However, I don't think using a service that you paid for to be "theft of service." If you decided to register random magicJack serial numbers, and provision them, that would be theft of service.

I did not tell them to do it, I simply said this would be possible.

All of my posts are for informational, and educational use only.

ramuk · Post by **ramuk** » Fri Nov 30, 2007 2:47 pm

I am stuck ....I dont know what to do. I downloaded fiddler and then went to options to check `decrypt https. Clicked session inspector. I see Proxy Connection: Keep-Alive,................I see something called E-tag...I dont know which info do I need to enter in the PAP2 settings as I unlocked it.

I am a noob - yes. I could get the Host: 67.106.133.212 info as per fiddler and I dont see the Exxxyyzzzz01 thing in the fiddler nor do I see anything which tells me that this is proxy....Any guidance is very much appreciated. Thanks

Poo619 · Post by **Poo619** » Fri Nov 30, 2007 2:52 pm

reread the posts on the first page there is a little more info as you get deeper in the posts. its easy once you click around

gomike78 · Post by **gomike78** » Tue Dec 04, 2007 2:42 pm

chris wrote:It was so easy I feel stupid now! just remember you have to set the web browser to use fiddler as a proxy, it is basically like a "man in the middle" attack. Make sure fiddler is set to "decrypt HTTPS traffic" and click on the https header, check the "session inspector". ?

I am not sure what I am doing wrong as I have enabled the "decrypt HTTPS traffic"

It seems like I have checked everywhere and I can not find where the username and password are.

If someone can offer some advice it would be appreciated.

jeffnyc · Post by **jeffnyc** » Tue Dec 04, 2007 4:45 pm

Its in there. You just have to click the right tab. I'm not sure exactly which but check out the thread re: setting up a different softphone. Much easier way to get sip info.

http://www.phoneservicesupport.com/walk ... e-t96.html

update: i believe this no longer works -

chris · Post by **chris** » Thu Dec 06, 2007 5:39 pm

Has anyone tried this on an ATA? If it works.......... I wonder how long you could away with running it on a little Grandstream handytone?
Wonder if they could find out and shut you off??

Hey laserjobs - I am an organizer in a Ron Paul 2008 Meetup group! I seen some of your posts and know that you are a RP supporter too. way to go, all the tech I know as well as haxxxors support RP.

Keep the internet FREE from Government and Corporate control vote Ron Paul for President in 2008 !

drjekyl · Post by **drjekyl** » Wed Dec 12, 2007 6:47 pm

I have read this thread and have gotten the needed credentials via Fiddler2. The problem is that I can't seem to figure out what to put where on my left over AC-211-SR from Sun Rocket in order to make it work.

The fields that need to be filled in for the SIP area of the AC-211 (the ones I can't figure out) are:

SIP Server Settings

IP Address:

Port:

Domain Name:

Then

User/Phone Number:

CallerID Name:

Port:

Authentication User Name:

Password:

Now, I know the User/Phone Number is E then area code and phone number +01 and caller ID name doesn't matter (?) and the Port is 5070...but the rest is kinda fuzzy and I have tried different things but none have worked.

Can someone who has actually or is actually using an AC-211 please post exactly what you put in these various fields in order to make it work? I would really appreciate it.

Post by **laserjobs** » Wed Dec 12, 2007 7:24 pm

IP Address: proxy1.newark.talk4free.com:5070
Port: 5060

drjekyl · Post by **drjekyl** » Wed Dec 12, 2007 7:31 pm

laserjobs wrote:IP Address: proxy1.newark.talk4free.com:5070
Port: 5060

No go.

drjekyl · Post by **drjekyl** » Wed Dec 12, 2007 7:58 pm

I got it to go, finally.

I just used the server name X 2 instead of the IP's and it resolved correctly.

It was having a problem because the IP for the servername was not resolving to the same as the one that Fiddler2 found.

I think the MJ people might be trying to crossup the people who are using ATA'sto bypass the MJ device.

blackcat · Post by **blackcat** » Thu Dec 13, 2007 6:59 pm

Fiddler is showing my password as 12 digits instead of 4, anyone else have this happen? I'm trying to set up on an AC-211 but not having any luck.

jeffnyc · Post by **jeffnyc** » Thu Dec 13, 2007 7:06 pm

yes they changed the password length.... i had no prob though on my pap2t

candlebox1369 · Post by **candlebox1369** » Fri Dec 21, 2007 7:52 am

i posted something similar in the Walk-through to configure a different softphone...

i managed to get it working with fiddler... but the data i need isn't there... or maybe it is but it's encrypted. Is there something else I can use to get my sip info?

need help. muchas gracias.

anant · Post by **anant** » Fri Dec 21, 2007 11:17 am

Hi:

Please read the first post by Gregg under Walk Thru to configure a different softphone ( page 1) and follow the steps to obtain the serial # of ur MJ. Plug that information in the following Link U can find the following link in the page 2 by stewart/MagicHack.

http://prov1.talk4free.com/softphone/pr ... xxxxxxxxxx .

Once u plug in the serial # information u will get all the necessary SIP credentials. It is piece of cake.I was not successful with Fiddler 2. I got confirmation of the userproxyname using Cain.

Please try the above.

anant

candlebox1369 · Post by **candlebox1369** » Fri Dec 21, 2007 11:24 am

Thanks for the help. I've tried a lot of things, but it looks like magicJack has changed it... Here is the output

��2�F�z��{lm��M;D��(�6�`��J�K�q��Y��P��MQ�ȝ��(�K��bWs ��̹�%ʐ��A�:��3��%X��;C̚H�KM�3L�mC��q%}��9��U��¾�8�e�CRך��,��fJ�7(J�`��fλ��3pey.2(�(ab��ܥIRi%�� `'��S8E�uI&��|ߩpQ��y�V��=c\D@lE�TS��BrB,Cvm��Ox�!�ⱻ�#�J#O�cJ�H� �t�l��:ͦt8!��W�sҖ�sϫ��Rm�J��,��R��.�z]J�L��`��]��>�?L��ҕ/��

I have since been able to get the user name by using Cain & Abel, but not the password. Can anyone tell me what the 12 character password consists of (numbers only, or also letters, and if so is it upper or lower or both)? Maybe I can brute force it if I narrow it down. Thanks.

drjekyl · Post by **drjekyl** » Fri Dec 21, 2007 11:35 am

I don't believe that method works anymore.

jeffnyc · Post by **jeffnyc** » Fri Dec 21, 2007 12:12 pm

The above gave me all zeros. I was able to get it from fiddler though.

anant · Post by **anant** » Fri Dec 21, 2007 1:53 pm

Hi

I checked just now That link in my earlier that worked for me earlier does not work any more. I got userproxyname from Cain but not password. The password for my MJ is a 4-digit #. Fiddler 2 never worked for me. could be because I was dealing with replacement unit. I was getting CONNECT in the host firld and proxy1.----------- in the URL field andanother linewith CONNECT under host and proxy2.xxxxxxxxxx. I never got proxy1.xxxxxx under host. something must have been changed. This SIP credentials are crucian toadapt MJ to either soft phones or ATA. MJ folks could be changing.

anant

drjekyl · Post by **drjekyl** » Fri Dec 21, 2007 1:59 pm

As I posted a few days back, I believe they are attempting to make it harder to get the info and use it in ATA's. Harder but not impossible.

magicJack and magicJack Plus Support, Reviews, FAQs and Tricks

if you use fiddler2 to look for your sip login credentials

Sucess with Asterisk or Trixbox?

Re: Sucess with Asterisk or Trixbox?

newbie

help

Help With Old SR AC-211-SR