War Dialing Tools List 2025 — Complete Guide & Hands-On Usage
War Dialing Tools — Comprehensive List & Practical Usage
Meta Title: War Dialing Tools List 2025 — Complete Guide & Hands-On Usage
Meta Description: Explore top war dialing (wardialing) tools like WarVOX, iWar, ToneLoc, and others. Learn how to use them, setup VoIP dialing, classification, and best practices for modem/telephony scanning.
Primary Keywords: war dialing tools, wardialing tools list, WarVOX, iWar, ToneLoc, telephone scanning tools
Secondary Keywords: modem scanning, war dialing tutorial, VoIP wardialing, telephone audit tools
Introduction
War dialing, also known as wardialing, is a technique of automatically calling telephone numbers (in a given range) to discover modems, fax machines, PBX systems, or other devices that respond to calls. Wikipedia+2Wikipedia+2 Historically used in the 1980s and 1990s, modern versions use VoIP or SIP trunks instead of analog modems. md3v.com+2Wikipedia+2
This blog will cover:
-
What is war dialing, its history and purpose
-
Key war dialing tools (open source and legacy)
-
Practical setup using VoIP or modems
-
Step-by-step usage and examples
-
Legal/ethical issues and best practices
-
Hindi translation for bilingual publication
What Is War Dialing? (Concept & History)
War dialing involves systematically dialing a list or range of phone numbers to detect which numbers respond with modems or data lines rather than human voice. Wikipedia+2Wikipedia+2 The objective is to find exposed systems that can be exploited or studied.
-
The name “war dialing” was popularized by the movie WarGames. Wikipedia
-
In early days, tools would dial sequential numbers (or randomized) using analog modems (demon dialing) to detect carrier tones. Wikipedia+2Wikipedia+2
-
Modern tools often operate over VoIP or SIP, not analog lines. WarVOX is one such example. md3v.com+1
Why Use War Dialing?
-
To audit telephone infrastructure and detect unauthorized modems/faxes in an organization
-
To discover legacy systems connected to PSTN (public switched telephone network)
-
In security assessments of telephony networks
-
For research and forensic reasons
Key War Dialing / Wardialing Tools
Here are noteworthy tools (past and present) used for war dialing and telephony scanning:
| Tool | Description | Platform / Notes |
|---|---|---|
| WarVOX | VoIP-based war dialing and classification suite. Can classify modems, faxes, voicemail, loops, etc. Wikipedia+1 | Linux, uses VoIP trunks instead of analog modem |
| iWar | “Intelligent war dialer” tool using a modem / serial interface; supports banners, dialing strategy, logs, etc. GitHub | Unix/Linux, needs modem or serial port |
| ToneLoc | Classic DOS war dialing program that detects dial tones/human answers to speed scanning. Wikipedia | Legacy, historically used on MS-DOS systems |
| zWarDial | Tool targeting Zoom meetings by automating scanning of meeting IDs (analogous concept). Krebs on Security | Not exactly telephony, but uses war dialing concept |
| TeleSweep | Modem vulnerability scanning tool listed in forensics tool directories. forensics.wiki | Commercial / free modem scanner |
| Others / scripts | Custom or Perl scripts for dialing, stats collection (mentioned in war dialing overviews) GIAC+1 | Custom / legacy |
Setting up for Practical Use
To practically use war dialing tools, you need:
-
Access to a telephony trunk / VoIP provider
-
A SIP/VoIP account with outbound dialing capability to the telephone network
-
Sometimes a VoIP to PSTN gateway
-
-
Modem or serial device (if using analog approach)
-
RS-232 modem connected to phone line
-
Correct configuration (baud rate, parity, etc.)
-
-
Tool installation & dependencies
-
E.g., WarVOX installation on Linux
-
iWar compilation/configuration
-
-
Dial range & number list
-
Define number ranges (area code + exchange + last n digits)
-
Exclusion lists for known numbers
-
-
Logging & classification setup
-
Save logs of answered numbers
-
Audio capture (if available)
-
Banner detection (if device responds with data handshake)
-
Practical Examples / Commands
Example A: WarVOX (VoIP-based war dialing)
WarVOX does not require an analog modem; it uses VoIP to dial numbers and analyze audio responses. Wikipedia+1
Typical usage (example):
WarVOX classifies lines into types like fax, voicemail, modem, IVR, loops, etc., based on audio patterns. Wikipedia
Example B: iWar (Analog / Modem dialing)
Once iWar is installed:
Parameters:
-
--range: dialing number range -
--device: serial device (modem interface) -
--speed: baud rate -
iWar supports random/sequential dialing, banner detection, logging. GitHub
Example C: ToneLoc (Historical / DOS)
ToneLoc scanning invoked on DOS / emulator environment:
ToneLoc uses carrier detection and early hangups to speed scanning. Wikipedia
Hands-On War Dialing Exercises
Important: Only perform these exercises in a lab or environment for which you have explicit permission. Do not scan real public phone numbers without legal authorization.
-
Lab Setup with VoIP Trunk
-
Obtain a VoIP provider with outgoing PSTN dialing
-
Configure a softphone or war dialing tool (WarVOX)
-
Define a small dialing range (e.g. 5551000–5551100)
-
Run WarVOX and observe classification of modems or voicemail lines
-
-
Analog Modem Scanning with iWar
-
Connect a modem to a phone line
-
Use iWar to dial a small local exchange
-
Log numbers that respond with carrier tones
-
-
Audio Analysis
-
Record call audio and classify responses:
-
Silence / hang up
-
Voice greeting
-
Fax / modem handshake
-
PBX menus
-
-
-
Exclusion & Blacklist
-
Configure your tool to skip certain numbers (e.g. emergency lines)
-
Manage “interesting numbers” separately
-
-
Resumable Sessions & State Saving
-
Use state save/load features in iWar
-
Pause and resume dialing without re-dialing all numbers
-
Legal, Ethical & Safety Considerations
War dialing can be legally sensitive or outright illegal in many jurisdictions. Key points:
-
Always have written permission before scanning phone lines
-
Avoid dialing emergency numbers or personal lines
-
Respect privacy laws concerning audio recording and data
-
Many telecom providers consider mass dialing as harassment or abuse
-
Use low rate dialing and respect “Do Not Call” lists
-
In corporate settings, war dialing may reveal internal security gaps—handle responsibly
Pros & Cons of War Dialing
Pros:
-
Reveals hidden modems, fax machines, PBX systems
-
Useful in telephony security audits
-
Can uncover legacy systems not detected by IP scanning
Cons:
-
Requires telephony infrastructure (modems or VoIP)
-
Many numbers are human answered or dead lines → noise
-
Detection and blocking by telecom providers
-
Legal/ethical risks
-
Time-intensive to classify responses
War Dialing Tools Comparison
| Tool | Mode (VoIP / Modem) | Audio Classification | Logging / State | Ease of Use | Suitability |
|---|---|---|---|---|---|
| WarVOX | VoIP | Yes | Yes | Moderate | Modern telephony audit |
| iWar | Modem / serial | Basic banner detection | Yes | High | Traditional modems |
| ToneLoc | Modem / DOS | Limited tone detection | Basic | Legacy | Historical / archival use |
| Custom scripts | Either / hybrid | Depends on implementation | Depends | Varies | Customized scanning |