sorted by: recent | see :
popular
Content Tagged with VoIP + Security
Engadget - How to reveal blocked caller ID info: a video guide to risky behavior
<sep/>phreaker types have come up with a way to do this using an enterprise-spec asterisk box and a SIP trunk provider. In a demonstration video, a hacker tweaks said asterisk box with some new configurations<sep/>
Massive DNS security problem endangers the internet
US-CERT and other security experts have warned of a critical design problem affecting all DNS implementations. The Domain Name Service is responsible for converting readable names like www.heise-online.co.uk into the IP addresses that computers can handle, such as 193.99.144.85. DNS is thus the internet equivalent to a phonebook and without it, nothing works. Anyone who takes control of it can control the internet.
VOIPSA : Resources : VoIP Security Tools
VoIP Security Tool List
Zfone Project Home Page
Zfone is a new secure VoIP phone software product which lets you make encrypted phone calls over the Internet. Its principal designer is Phil Zimmermann. Zfone uses a new protocol called ZRTP, which has a better architecture than the other approaches to s
Hacking VoIP - companion website
Hacking Exposed VoIP: Voice over IP Security Secrets and Solutions by David Endler and Mark Collier
Let the SPIT (Spam over Internet Telephony) Wars Begin
If SPAM arrives in your inbox at 4am, the chances are your antispam software will catch it. But even if it doesn’t, you won’t lose much sleep over its arrival. But it’ll be a different story with SPIT (spam over internet telephony). Junk phone calls at 4am are going to drive you mad because the chances are that antispit software won’t be able to intercept the call.
introduction to svmap
Svmap is a network scanner for SIP. Similar to nmap - it will scan for devices on ports specified by passing the right command line options. Once svmap finds a device that supports SIP, it will extract information from the response and identify the type of device. Anyone running this tool will typically end up with a list of IP addresses of SIP devices and the names for those devices.
A penetration tester or security auditor will probably find this tool particularly useful especially during reconnaissance. With the IP address, device name and possibly version at hand, he or she can then target security weaknesses specific to that device. A security administrator or security analyst can also make use of svmap to list different active SIP user-agents on the network. Based on this information, the security administrator then has the ability to identify rogue and vulnerable devices which can cause a security concern.
Svmap is able to scan for SIP devices much faster than generic UDP port scanners. Typical port scanners such as nmap, scan UDP ports by sending a packet to each port and expecting an ICMP packet which indicates that the port is closed. If no ICMP error is received within a reasonable time, the port scanner assumes that the port is either open or else filtered. While this method has worked for years, it can never be considered efficient or neat, (at least) because of two reasons:
- The majority of UDP ports are closed - therefore having to wait for each ICMP error to confirm that the port is closed is not a good idea
- Nowadays a lot of devices are behind firewalls or NAT and will never reply with an ICMP error
For examples on how to use svmap check out the wiki.
Download the whole SIPVicious tool suite from the project page.
its the end of the world as we know it
Here are some apocalyptic scenarios related to VoIP and SIP:
But IMHO, one thing's for sure - with big vendors like Microsoft, entering the market .. VoIP is here to stay.
- SIP's Insecurity Blanket
- Report Finds VOIP Services Susceptible to Major Attacks Through SIP
- VoIP security industry -- guilty as charged
But IMHO, one thing's for sure - with big vendors like Microsoft, entering the market .. VoIP is here to stay.
Storming SIP Security - now available just a click away
Time to release the hakin9 article to the public. This article was first released in the February edition of the English hakin9 magazine.
Download now (takes you to EnableSecurity).
Added: The listings can be found here.
Thanks for Chris Gates for noticing that I forgot to include the listings.
Download now (takes you to EnableSecurity).
Added: The listings can be found here.
Thanks for Chris Gates for noticing that I forgot to include the listings.
Security
voip
article
sip
sipvicious
storming
enablesecurity
introduction to svmap
Svmap is a network scanner for SIP. Similar to nmap - it will scan for devices on ports specified by passing the right command line options. Once svmap finds a device that supports SIP, it will extract information from the response and identify the type of device. Anyone running this tool will typically end up with a list of IP addresses of SIP devices and the names for those devices.
A penetration tester or security auditor will probably find this tool particularly useful especially during reconnaissance. With the IP address, device name and possibly version at hand, he or she can then target security weaknesses specific to that device. A security administrator or security analyst can also make use of svmap to list different active SIP user-agents on the network. Based on this information, the security administrator then has the ability to identify rogue and vulnerable devices which can cause a security concern.
Svmap is able to scan for SIP devices much faster than generic UDP port scanners. Typical port scanners such as nmap, scan UDP ports by sending a packet to each port and expecting an ICMP packet which indicates that the port is closed. If no ICMP error is received within a reasonable time, the port scanner assumes that the port is either open or else filtered. While this method has worked for years, it can never be considered efficient or neat, (at least) because of two reasons:
- The majority of UDP ports are closed - therefore having to wait for each ICMP error to confirm that the port is closed is not a good idea
- Nowadays a lot of devices are behind firewalls or NAT and will never reply with an ICMP error
For examples on how to use svmap check out the wiki.
Download the whole SIPVicious tool suite from the project page.
its the end of the world as we know it
Here are some apocalyptic scenarios related to VoIP and SIP:
But IMHO, one thing's for sure - with big vendors like Microsoft, entering the market .. VoIP is here to stay.
- SIP's Insecurity Blanket
- Report Finds VOIP Services Susceptible to Major Attacks Through SIP
- VoIP security industry -- guilty as charged
But IMHO, one thing's for sure - with big vendors like Microsoft, entering the market .. VoIP is here to stay.
Storming SIP Security - now available just a click away
Time to release the hakin9 article to the public. This article was first released in the February edition of the English hakin9 magazine.
Download now (takes you to EnableSecurity).
Added: The listings can be found here.
Thanks for Chris Gates for noticing that I forgot to include the listings.
Download now (takes you to EnableSecurity).
Added: The listings can be found here.
Thanks for Chris Gates for noticing that I forgot to include the listings.
Security
voip
article
sip
sipvicious
storming
enablesecurity
Storming SIP Security - now available just a click away
Time to release the hakin9 article to the public. This article was first released in the February edition of the English hakin9 magazine.
Download now (takes you to EnableSecurity).
Added: The listings can be found here.
Thanks for Chris Gates for noticing that I forgot to include the listings.
Download now (takes you to EnableSecurity).
Added: The listings can be found here.
Thanks for Chris Gates for noticing that I forgot to include the listings.
Security
voip
article
sip
sipvicious
storming
enablesecurity
Page 1 | Next >>