
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
sdp-jingle-json
Advanced tools
A parser/serializer for SDP to JSON. Useful for converting SDP to other formats like Jingle for WebRTC signalling
Convert SDP blobs to and from JSON
Ever taken a peek at the data blobs that get sent back and forth in WebRTC signalling? Yeah, that mess of line-oriented data is SDP. But sometimes you want to have that data available in JSON, like if you want to use XMPP Jingle for signalling.
This library will convert raw SDP into JSON that mirrors the structure of XMPP Jingle content, making it simple to convert the SDP data into an XMPP stanza with any of the various JS XMPP libraries, such as stanza.io, or xmpp-ftw.
And since you're working with WebRTC, be sure to check out simplewebrtc.
npm install sdp-jingle-json
$ grunt
The bundled and minified files will be in the generated build
directory.
var sjj = require('sdp-jingle-json');
// I have SDP, but want JSON:
var json = sjj.toSessionJSON(sdpBlob, {
creators: ['initiator', 'initiator'], // Who created the media contents
role: 'inititator', // Which side of the offer/answer are we acting as
direction: 'outgoing' // Are we parsing SDP that we are sending or receiving?
});
// I have JSON (a dictionary of session and content descriptions), but want SDP:
var sdp = sjj.toSessionSDP(jsonSession, {
role: 'responder',
direction: 'incoming'
});
You can also use toMediaSDP
and toMediaJSON
to convert only a single media section.
Open the convert.html
file and enter in SDP or JSON to see how it converts back and forth.
The format for the generated JSON content is:
{
"action": "",
"initiator": "",
"responder": "",
"sid": "",
// ---- Content payload
"groups": [
{
"semantics": "",
"contents": [],
} //...
],
"contents": [
{
"name": "",
"creator": "",
"senders": "",
"description": {
// ---- RTP description
"descType": "rtp",
"media": "",
"ssrc": "",
"sourceGroups": [
{
"semantics": "",
"sources": [
"" //...
]
} //...
],
"sources": [
{
"ssrc": "",
"parameters: [
{
"key": "",
"value": ""
} //...
]
} //...
],
"bandwidth": "",
"bandwidthType": "",
"headerExtensions": [
{
"id": "",
"uri": "",
"senders": ""
} //...
],
"payloads": [
{
"id": "",
"channels": "",
"clockrate": "",
"maxptime": "",
"ptime": "",
"name": "",
"parameters": [
{
"key": "",
"value": ""
} //...
],
"feedback": [
{
"type": "",
"subtype": "",
"value": ""
} //...
]
}
],
"encryption": [
{
"cipherSuite": "",
"keyParams": "",
"sessionParams": "",
"tag": ""
} //...
]
},
"transport": {
// ---- ICE UDP transport
"transType": "iceUdp",
"ufrag": "",
"pwd": "",
"setup": "",
"candidates": [
{
"component": "",
"foundation": "",
"generation": "",
"id": "",
"ip": "",
"network": "",
"port": "",
"priority": "",
"protocol": "",
"relAddr": "",
"relPort": "",
"type": ""
} //...
],
"fingerprints": [
{
"hash": "",
"value": ""
} // ...
]
}
} //...
]
}
MIT
If you like this, follow @lancestout or @HCornflower on twitter.
SDP-Jingle-JSON is derived, in collaboration, from the work done by Philipp Hancke for strophe.jingle.
FAQs
A parser/serializer for SDP to JSON. Useful for converting SDP to other formats like Jingle for WebRTC signalling
We found that sdp-jingle-json demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.