Walk-through to configure a different softphone
Moderators: Bill Smith, Pilot
Update on the subject
Hey ppl,
I just got my MJ and directly passed on to recovering SIP credentials.
Good news is, It is possible to recover the password without any brute forcing. I have just recovered my SIP password by reverse engineering. It took almost about an hour.
Bad news is, my password was 20 characters long, both uppercase characters and digits. So brute forcing is not a good way to go by
I have started working on a little utility to retrieve the password. I will release as soon as it is done.
Have fun
I just got my MJ and directly passed on to recovering SIP credentials.
Good news is, It is possible to recover the password without any brute forcing. I have just recovered my SIP password by reverse engineering. It took almost about an hour.
Bad news is, my password was 20 characters long, both uppercase characters and digits. So brute forcing is not a good way to go by
I have started working on a little utility to retrieve the password. I will release as soon as it is done.
Have fun
Re: Update on the subject
I'd like to get my password as well. I'd like to know how you did that. PM me if you don't want it public.
pm'ing
Hi,
I am not really a big fan of the PMing. I will post the information, if not the tool, publicly.
I don't see a reason to pick who to PM to. And this forum is where this information is supposed to be shared.
The reason behind my post is to stop anyone new to this issue, trying to brute-force their SIP passwords, spending resources for weeks.
And for the "been there, done that" attitude; I did not suggest my way was the only, or the best way. But, since I leave the decryption to the original software itself, and pull information out of it, I may say this will keep working as long as there is no *serious* changes in the software itself.
So, my little utility, will not provide anyone with the way to get information for any other magicjacks, since it pulls information right out of the software.
I'll be updating the forum about this.
I am not really a big fan of the PMing. I will post the information, if not the tool, publicly.
I don't see a reason to pick who to PM to. And this forum is where this information is supposed to be shared.
The reason behind my post is to stop anyone new to this issue, trying to brute-force their SIP passwords, spending resources for weeks.
And for the "been there, done that" attitude; I did not suggest my way was the only, or the best way. But, since I leave the decryption to the original software itself, and pull information out of it, I may say this will keep working as long as there is no *serious* changes in the software itself.
So, my little utility, will not provide anyone with the way to get information for any other magicjacks, since it pulls information right out of the software.
I'll be updating the forum about this.
-
gooney
- Dan isn't smart enough to hire me
- Posts: 382
- Joined: Sat Feb 09, 2008 5:38 pm
- Location: Salt Lake City, Utah
Re: pm'ing
Stop teasing already... just post it, what is taking you so long? I'm sure dan wants to know about this little tool of yours... maybe he might consider the BYOD option sooner hahahhacodaine wrote:Hi,
I am not really a big fan of the PMing. I will post the information, if not the tool, publicly.
I don't see a reason to pick who to PM to. And this forum is where this information is supposed to be shared.
The reason behind my post is to stop anyone new to this issue, trying to brute-force their SIP passwords, spending resources for weeks.
And for the "been there, done that" attitude; I did not suggest my way was the only, or the best way. But, since I leave the decryption to the original software itself, and pull information out of it, I may say this will keep working as long as there is no *serious* changes in the software itself.
So, my little utility, will not provide anyone with the way to get information for any other magicjacks, since it pulls information right out of the software.
I'll be updating the forum about this.
-
kingfisher1111
- MagicJack Expert
- Posts: 76
- Joined: Tue Nov 27, 2007 6:17 pm
-
newwonder01
- magicJack Apprentice
- Posts: 21
- Joined: Sat Feb 02, 2008 10:14 pm
A few drawbacks with X-Lite that I found are (also with SJphone or other softphones):
You have to dial via the softphone
Telephone connected to MagicJack does not ring on incoming calls
You must press send to accept incoming calls
Hanging up on phone does not switch to other incoming or established call (this must be done on the softphone)
No option for copy and paste dialing
Only 1 proxy server can be in settings
These features seem exclusive to the MJ softphone software.
You have to dial via the softphone
Telephone connected to MagicJack does not ring on incoming calls
You must press send to accept incoming calls
Hanging up on phone does not switch to other incoming or established call (this must be done on the softphone)
No option for copy and paste dialing
Only 1 proxy server can be in settings
These features seem exclusive to the MJ softphone software.
OH BUGGER! With all the talk of people using ATAs getting their accounts revoked and now you mean to tell me that using another softphone will hobble my service!? Now I wish I hadn't wasted all that time getting my SIP creds!tvland wrote:These features seem exclusive to the MJ softphone software.
Lost
I am soo... lost..>Can someone help me find my sip info. I brought a wrtp54g and am trying to set it up. I found my serial number and know my number. Where do i go from here? Do i configure my own custom server or something. I did try searching the forums in vain, lots of the techno mumble got me more confused...
Any help appreciated.
Any help appreciated.
-
Taken83oveR
- Dan isn't smart enough to hire me
- Posts: 119
- Joined: Wed Jun 11, 2008 2:07 pm
Getting SIP and Password?
I tried F idler, got a great long line of code, which I do not know how to decode.
I'd like to be able to use my Linksys WP330 internet phone.
Has anyone been able to pull out their magic jack user and password
and get their Linksys phone working?
Thanks
I'd like to be able to use my Linksys WP330 internet phone.
Has anyone been able to pull out their magic jack user and password
and get their Linksys phone working?
Thanks
Getting SIP and Password?
I tried Fidler, got a great long line of code, which I do not know how to decode.
I'd like to be able to use my Linksys WP330 internet phone.
Has anyone been able to pull out their magic jack user and password
and get their Linksys phone working?
Thanks
I'd like to be able to use my Linksys WP330 internet phone.
Has anyone been able to pull out their magic jack user and password
and get their Linksys phone working?
Thanks
SIP Password Method Assistance
Likewise, would someone please be so kind as to PM me with instructions on how to obtain this?
I can verify that I'm not an MJ employee but will not share how until someone PMs me as it involves calling my actual employer by dialing a number on their website and asking for me. I just don't want to publicly disclose who I work for, so anyone who PMs me can request this verification method first.
I can verify that I'm not an MJ employee but will not share how until someone PMs me as it involves calling my actual employer by dialing a number on their website and asking for me. I just don't want to publicly disclose who I work for, so anyone who PMs me can request this verification method first.
-
meister_sd
- MagicJack Newbie
- Posts: 1
- Joined: Sat Feb 23, 2008 10:22 pm
Re: SIP Password Method Assistance
This thread, Page 1, 6th postertnnm wrote:Likewise, would someone please be so kind as to PM me with instructions on how to obtain this?
Finally after 2 weeks of pulling my hair out
I have read this forum from top to bottom (one problem is that it is so slow) and finally today I gave up on all the sniffers and brute force cracker and tried a different approach and found it. Anybody with hope that someone here will help them is mistaken. First because everyone that has it working wants it to stay working and second because the PM system is really slow. All I will say is that I found the info that pointed to the things i tried today on another website. Google is your friend.
WEll I need some help..
I been logging some things... and I found two lines that are interesting. Take a look... let me know by PM if I am on the right track or not please:
I have posted this from my log dump. I have replaced some of the numbers with a "#" sign.
First thing of interest:
From: "unknown"<sip:E4##9#7#[email protected]#6.1##.198>;tag=4c9c##c35#0
Second thing of intrerest (I am thinking this is it.... cause of the MD5)
Authorization: Digest username="E4##2##70#01",realm="stratus.com",nonce="671#699a_0##37",uri="sip:423##1##[email protected]##.198",response="33###363f2###6d0a939###45bb33473",algorithm=MD5
Again, I have changed some info that would be private with "#" signs. If someone can cofirm I am on the right track, I will delete this message so as not to give anything away.
------EDIT-----
This is not what I used to find my creds. I used a different method... I didnt get anything of use with the above info. This is to help those in their search for their creds.
I been logging some things... and I found two lines that are interesting. Take a look... let me know by PM if I am on the right track or not please:
I have posted this from my log dump. I have replaced some of the numbers with a "#" sign.
First thing of interest:
From: "unknown"<sip:E4##9#7#[email protected]#6.1##.198>;tag=4c9c##c35#0
Second thing of intrerest (I am thinking this is it.... cause of the MD5)
Authorization: Digest username="E4##2##70#01",realm="stratus.com",nonce="671#699a_0##37",uri="sip:423##1##[email protected]##.198",response="33###363f2###6d0a939###45bb33473",algorithm=MD5
Again, I have changed some info that would be private with "#" signs. If someone can cofirm I am on the right track, I will delete this message so as not to give anything away.
------EDIT-----
This is not what I used to find my creds. I used a different method... I didnt get anything of use with the above info. This is to help those in their search for their creds.
Last edited by BooDaddy on Tue Aug 19, 2008 1:19 pm, edited 1 time in total.
WOW.. I think I actually found it this time!! I completely overlook a very important part of that thread, TheChad!! I used what MagicHack mentioned, (hint, notepad++ is your friend) searched, and there it was...
Now, I am off to plug all that info into my PAP-2 and see what happens. I will report back later if I find it.
Now, I am off to plug all that info into my PAP-2 and see what happens. I will report back later if I find it.
Last edited by BooDaddy on Tue Aug 19, 2008 1:15 pm, edited 1 time in total.
SUCCESS! I have my ata working now. All the info I needed was right here in this FORUM. The only thing I recommend is getting notepad++ to view certain files that you end up with in the process. IT makes searching through the huge files easy.
Im just a little leary about MagicJack terminating me for using an ATA. I have the 5 year plan
that would suck to loose it.
If someone is willing to buy me another MagicJack, I will give help on setting up a PAP-2 ATA!!!! HEHEHE...
Im just a little leary about MagicJack terminating me for using an ATA. I have the 5 year plan
If someone is willing to buy me another MagicJack, I will give help on setting up a PAP-2 ATA!!!! HEHEHE...
Last edited by BooDaddy on Tue Aug 19, 2008 1:13 pm, edited 1 time in total.
Spoofing the User Agent may help keep you under the radar too. Depending on the ATA configuration and abilities, you may be able to do it within the ATA. If not, you'll need some sort of ALG or Asterisk-like SIP trunk that can replace the User Agent before sending it to MJ.BooDaddy wrote:SUCCESS! I have my ata working now. All the info I needed was right here in this thread. The only thing I recommend is getting notepad++ to view certain files that you end up with in the process. IT makes searching through the huge files easy.
Im just a little leary about MagicJack terminating me for using an ATA. I have the 5 year planthat would suck to loose it.
If someone is willing to buy me another MagicJack, I will give help on setting up a PAP-2 ATA!!!! HEHEHE...
Maybe, but best way is to sniff the SIP traffic.BooDaddy wrote:I have a Linksys PAP2 from fonage (version 1). I will double check it tonight when I get home and see if there is an option to spoof the useragent.
Would I find the useragent info that I would need to use in the same place i found my SIP credentials??
Should be something like: User-Agent: MagicJack/1.80.441a (SJ Labs)
...and will likely changed based on the version installed/updated.
I have the same unit from linsys and would love to hear how you made out.BooDaddy wrote:I have a Linksys PAP2 from fonage (version 1). I will double check it tonight when I get home and see if there is an option to spoof the useragent.
Would I find the useragent info that I would need to use in the same place i found my SIP credentials??
My magicjack stopped working about a week after i got it!
Thanks
Amazing!!!
Its really amazing that you guyz are finding one or the other way to find the sip credentials of the MJ. Can anybody share their techniques to find out the sip password!!!
Thanks & Regards,
Ram
Thanks & Regards,
Ram
I sniff my packets using wireshark..i can't seem to get the know how of getting my password.BooDaddy wrote:EVerything you will need to know is right there in the first page of this thread
I might be overlooking something, i looked thru and read the thread over and over again in page 1..but can't seem to find a possible solutions.
Any kind of help would be appreciated! Cheers!
No need to read, use the search function in your editor and search for the word "Password"hype8912 wrote:I spent about 5 hours last weekend going through logs and reading header data but I never got anywhere. reading through the logs was almost like looking for a needle in a haystack. If I saw the information I needed I wouldn't have known that it was the correct info.
Too late, I have eyebeam working...........msiam wrote:Hey Texguy here's your Soft phone without the dingee
Hi Boodaddy
You are the man!!! Its really nice that you found a way to get your sip credentials.
I struggled for 8 hours without any success. my log file doesnt have a word called "Password" at all. I searched the log file with notepad++
This is how I started my log file
C:\Documents and Settings\sudhir\Application Data\mjusbsp>magicJack.exe /lf a.log /foreground /scf _magicJackPersonalDataRoot "L:\magicJack"
Am i doing anything wrong?
please help me finding the password.
Thanks & Regards,
Ram
I struggled for 8 hours without any success. my log file doesnt have a word called "Password" at all. I searched the log file with notepad++
This is how I started my log file
C:\Documents and Settings\sudhir\Application Data\mjusbsp>magicJack.exe /lf a.log /foreground /scf _magicJackPersonalDataRoot "L:\magicJack"
Am i doing anything wrong?
please help me finding the password.
Thanks & Regards,
Ram
So anyone using another softphone, X-Lite in particular. Would you mind sharing your "dialing plan"?
I would like to be able to dial local phone numbers as a 7digit number and have the area code added. I would also like to be able to successfully dial *678*00-444-4444 when I want to spoof CID.
currently I just have the default dialing plan which is: #n\a\a.T;match=1;prestrip=2;
I would like to be able to dial local phone numbers as a 7digit number and have the area code added. I would also like to be able to successfully dial *678*00-444-4444 when I want to spoof CID.
currently I just have the default dialing plan which is: #n\a\a.T;match=1;prestrip=2;
I would suggest you try the counterpath.com forum for that.Delta-9 wrote:So anyone using another softphone, X-Lite in particular. Would you mind sharing your "dialing plan"?
I would like to be able to dial local phone numbers as a 7digit number and have the area code added. I would also like to be able to successfully dial *678*00-444-4444 when I want to spoof CID.
currently I just have the default dialing plan which is: #n\a\a.T;match=1;prestrip=2;


