Phreaking 2.0: Abusing Microsoft Teams Direct Routing
Moritz Abrell demonstrates modern VoIP phreaking against Microsoft Teams Direct Routing, exploiting SIP and Session Border Controller (SBC) misconfigurations.
Summary
The Integration of PSTN and Enterprise Cloud Communications
Microsoft Teams Direct Routing allows organizations to connect their on-premises telephony infrastructure and Session Border Controllers (SBCs) to Teams cloud.
Auditing Session Initiation Protocol (SIP) Handshakes
Moritz Abrell analyzes the SIP signaling and TLS mutual authentication used between enterprise SBCs and Microsoft cloud servers.
Exploiting Routing Misconfigurations for Toll Fraud and Interception
Abrell demonstrates spoofing caller IDs, bypassing trunk authorization rules, making unmetered international calls, and intercepting enterprise voice channels.
Hardening Enterprise SIP and Teams Telephony
The author provides VoIP administrators with SBC hardening checklists, strict TLS certificate validation rules, and SIP firewall configurations.
Related talks
Main Stage·37 min
Ismail Melih Tas · Kubilay Ahmet Kucuk
Ismail Melih Tas and Kubilay Ahmet Kucuk introduce Mr. SIP, an advanced offensive VoIP auditing framework demonstrating novel SIP reflection and retransmission attacks.
Main Stage·28 min
Ismail Melih Tas · Kubilay Ahmet Kucuk
Ismail Melih Tas and Kubilay Ahmet Kucuk answer questions regarding Mr. SIP tool capabilities, VoIP network penetration testing, and SIP hardening.
Main Stage·44 min
Enzo Damato
Demystifies the Public Switched Telephone Network (PSTN), explaining how to establish a licensed telecommunications carrier to explore telecom routing and SS7.