Voip Phreak

Cool sh!t about Asterisk, VOIP, XMPP 'n stuff

Hack MagicJack to work with your Asterisk PBX Installation, 20$ Calls for a year!

| 12 Comments

Recently there’s been a bit of a conversation about hacking the MagicJack VOIP boxes to enable it to work with Asterisk. Like some of the other list users, we weren’t aware of this, but this was posted as a followup. Probably old for most of you, but some may find it useful for your Magic Jack.

As of 5-31-08 to obtain your sip credentials you will need to dump your memory while magicjack.exe is running in order to view the decrypted password.
All other information can be had with any packet capture program.

Original, and All credit goes here: http://revolution.hackthisbox.com/magicjack/readme

Replace EXXXXXXXXXX01 with your MJ number. Include E and 01.
Replace the proxy proxy1.Atlanta.talk4free.com:5070 with the proxy your MJ registers to and change host=67.90.138.70 to host=YourProxyIPHere.
Replace XXXXXpasswordXXXXX with your password. Currently a 20 character string consisting of numbers and letters. Mine is all uppercase.

~~~~~sip.conf~~~~~

register => EXXXXXXXXXX01:XXXpasswordXXXX@proxy1.Atlanta.talk4free.com:5070

[magicjack]
context=incoming
username=EXXXXXXXXXX01
type=friend
secret=XXXXXpasswordXXXXX
port=5070
nat=yes
insecure=very
host=67.90.138.70
fromuser=EXXXXXXXXXX01
dtmfmode=inband
qualify=2000

~~~~~sip.conf~~~~~

~~~~~extensions.conf~~~~~

[incoming]
exten => YourMJNumber,1,Answer
exten => YourMJNumber,2,Dial(sip/sipura,30,r) ;dial someone…such as an ATA

[MagicJackOutgoing]
exten => _1NXXNXXXXXX,1,Dial(SIP/${EXTEN}@magicjack,30,r)
exten => _1NXXNXXXXXX,2,congestion()
exten => _1NXXNXXXXXX,102,busy()
exten => i,1,Hangup
exten => t,1,Hangup
exten => h,1,Hangup

[sip]
include => MagicJackOutgoing

~~~~~extensions.conf~~~~~

Author: Voip Phreak

Matt is VOIP phreak!. Matt took an early adoption to telephony as a young BBS user, using pbx's and other fun toys that he could get his hands on to progress eventually into a love of internet telephony. These are his thoughts, views, and little articles about mostly nothing, but something.

12 Comments

  1. Pingback: Magic Jack Hacked For Use As An Asterisk Trunk « Clearing My Head

  2. Pingback: Graves On SOHO VoIP » Blog Archive » Magic Jack Hacked For Use As An Asterisk Trunk

  3. Pingback: Graves On SOHO VoIP » Magic Jack Hacked For Use As An Asterisk Trunk

  4. I want to know how get the password,.. i dump the file but i try with find and i cant get the passwords, please any help…..

  5. Nice copy/paste. You’ve pretty much covered everything besides the most important part… recovering the password.

    Since the passwords are salted and hashed before registering with talk4free servers, you’ll need to use something like “sipcrack” or “cain & abel” if you wish to brute force the password. I haven’t yet verified if it is actually a 20 character password, if it is.. you’d better wait a long while. The only other option is to do a memory dump analysis from the pmdump output (this won’t be simple if you’ve never done this before).

  6. Ah, good point Bob. I didn’t even think of that when pasting the article. Unfortunately I don’t have a MagicJack to perform testing with myself. If you have the time to brute the password or do a pmdump, we’d love to hear about it.

  7. I’m new to Asterisk, but I have MJ for awhile and about to install Asterisk on my Ubuntu.

    Is this hack means I can configure Asterisk to communicate with proxy1.Atlanta.talk4free.com:5070 using MJ’s credentials?
    So in that case, I don’t even need FXO card nor the MJ USB device to dial or receive calls?

  8. No you don’t just the information above and BAM!!!! 19.95 A YEAR TELEPHONE LINE!!!!

  9. As of 7/12/2009 I have not been able to retrieve the sip password using pmdump. I can extract everything, but it seems that their new version of software no longer stores the password as it used to in 2008. Anyone find any way around this ?

  10. I have been trying to get TRIXBOX to work. After several sleepless nights and going thru miles of blogs I still cannot get it to work. If any one can tell me what am I doing wrong. I extracted the MJ password using a free utility “Majic Jack Suit Utilities “.

    sip show registry shows following

    trixbox1*CLI> sip show registry
    Host Username Refresh State Reg.Time
    talk4free.com:5070 E94XXX84779X 120 Request Sent
    216.234.70.8:5070 E94XXX84779X 120 Auth. Sent
    2 SIP registrations.

    sip show peers shows following

    trixbox1*CLI> sip show peers
    Name/username Host Dyn Nat ACL Port Status
    magicjack/E94XXX84779X 216.234.70.8 N 5070 OK (76 ms)
    1 sip peers [Monitored: 1 online, 0 offline Unmonitored: 0 online, 0 offline]

    But for the life of me I cannot make inbound or out bound calls.

    My sip_custom.conf looks like this

    #######################################################
    register=> E94XXX84779X:7MC1CTXXXXXXXXXxCV86@talk4free.com:5070
    [magicjack]
    context=incoming
    username=E94XXX84779X
    type=friend
    secret=7MC1CTXXXXXXXXXxCV86
    port=5070
    nat=yes
    insecure=very
    host=proxy1.LosAngeles.talk4free.com
    fromuser=E94XXX84779X
    dtmfmode=rfc2833
    qualify=2000
    useragent=MagicJack/1.80.484a (SJ Labs)
    bindaddr=10.0.0.4
    bindport=60512
    contactbinding=E94XXX84779X@10.0.0.4
    SIPProxyURI=sip:proxy1.LosAngeles.talk4free.com:5070
    ###############################################

    My extensions_custom.conf

    #############################################
    ; This file contains example extensions_custom.conf entries.
    ; extensions_custom.conf should be used to include customizations
    ; to AMP’s Asterisk dialplan.

    ; All custom context should contain the string ‘custom’ in it’s name

    ; Extensions in AMP have access to the ‘from-internal’ context.
    ; The context ‘from-internal-custom’ is included in ‘from-internal’ by default

    #include extensions_hud.conf

    [from-internal-custom]

    [custom-incoming]
    [incoming]
    exten => 9496984779,1,Answer
    exten => 9496984779,2,Dial(sip/sipura,30,r) ;dial someoneÂ
    such as an ATA

    [MagicJackOutgoing]
    exten => _1NXXNXXXXXX,1,Dial(SIP/${EXTEN}@magicjack,30,r)
    exten => _1NXXNXXXXXX,2,congestion()
    exten => _1NXXNXXXXXX,102,busy()
    exten => i,1,Hangup
    exten => t,1,Hangup
    exten => h,1,Hangup

    [sip]
    include => MagicJackOutgoing
    #################################################3

  11. Hello

    As of now I have a couple of MJ only few still working with an ATA, but some not even password and sip detial propar, and I am strongly not agree with MAC or serial number many guys wrote on blog MJ aquired MAC or Serial number authentic method but wrong still many MJ working at my end.
    But somehow I got information they recently devolped new sever but limitation is not all MJ got that authentication but I am doing hard work to get work again an ATA.
    Even I have latest update exe in my MJ still working with an ATA so software is still same I have check hardware also same thing is only they moved MJ to them new sever couple of MJ still working on an old Proxy server. very soon I will have a solution and if you want to really tired with them try this new one

    http://www.tk6000.com

    They are the big competitor of MJ

    VOip Tech

  12. Can anyone help me configuring Magic Jack on my predictive dialer (Asterisk Based)

    – Jay

Leave a Reply

Required fields are marked *.