Skip to content
View sandrogauci's full-sized avatar
🎯
Focusing
🎯
Focusing
400 followers · 83 following

Achievements

Achievement: QuickdrawAchievement: Pair ExtraordinaireAchievement: Pull Sharkx2Achievement: Starstruckx4Achievement: Arctic Code Vault Contributor

Achievements

Achievement: QuickdrawAchievement: Pair ExtraordinaireAchievement: Pull Sharkx2Achievement: Starstruckx4Achievement: Arctic Code Vault Contributor

Highlights

Organizations

@EnableSecurity

Block or report sandrogauci

Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
sandrogauci/README.md

Hi, I'm Sandro Gauci

I run Enable Security, where we focus on security for real-time communications (VoIP and WebRTC). We do penetration testing, fuzzing, code review, and DDoS resilience testing for RTC systems.

Projects

  • SIPVicious - VoIP/SIP security testing toolset (1k+ stars)
  • Awesome RTC Hacking - curated list of VoIP, WebRTC, and VoLTE security resources
  • WAFW00F - Web Application Firewall fingerprinting tool (6k+ stars)
  • DVRTC - intentionally vulnerable VoIP/WebRTC lab for security training and research

Writing and research

I publish the RTCSec Newsletter - a monthly newsletter covering real-time communications security news, vulnerabilities, and research.

We also publish on the Enable Security blog.

Our security advisories and published pentest reports are at https://www.enablesecurity.com/advisories/ and enablesecurity/reports.

Get in touch

Pinned Loading

  1. EnableSecurity/DVRTC EnableSecurity/DVRTC Public

    DVRTC (Damn Vulnerable Real-Time Communications) is an intentionally vulnerable VoIP/WebRTC platform for security training and research, with isolated lab scenarios covering SIP enumeration, digest…

    JavaScript 26 3

  2. EnableSecurity/sipvicious EnableSecurity/sipvicious Public

    SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks…

    Python 1.1k 181

  3. EnableSecurity/awesome-rtc-hacking EnableSecurity/awesome-rtc-hacking Public

    a list of awesome resources related to security and hacking of VoIP, WebRTC and VoLTE

    536 51

  4. EnableSecurity/advisories EnableSecurity/advisories Public

    Security advisories published by Enable Security

    Python 44 16

  5. EnableSecurity/reports EnableSecurity/reports Public

    Reports issued by Enable Security

    11

  6. EnableSecurity/wafw00f EnableSecurity/wafw00f Public

    WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.

    Python 6.3k 1k