Practical VoIP/UC Hacking Using Mr. SIP
Ismail Melih Tas and Kubilay Ahmet Kucuk introduce Mr. SIP, an advanced offensive VoIP auditing framework demonstrating novel SIP reflection and retransmission attacks.
Summary
The Attack Surface of Enterprise VoIP and SIP Infrastructure
Session Initiation Protocol (SIP) underpins modern Voice over IP (VoIP) and Unified Communications (UC) deployments across enterprises and telecom service providers.
Introducing the Mr. SIP Offensive Security Toolkit
Ismail Melih Tas and Kubilay Ahmet Kucuk release Mr. SIP, a modular security framework for automated SIP network scanning, fuzzing, and penetration testing.
Novel SIP Retransmission and Reflection Attacks
The authors demonstrate novel attack primitives exploiting SIP message retransmission timers and transaction reflection logic to execute denial of service and user spoofing.
Securing Enterprise Voice Infrastructure
The presentation provides VoIP network administrators with configuration hardening checklists and intrusion detection signatures for anomalous SIP signaling.
Related talks
Main Stage·28 min
Ismail Melih Tas · Kubilay Ahmet Kucuk
Ismail Melih Tas and Kubilay Ahmet Kucuk answer questions regarding Mr. SIP tool capabilities, VoIP network penetration testing, and SIP hardening.
Main Stage·21 min
Moritz Abrell
Moritz Abrell demonstrates modern VoIP phreaking against Microsoft Teams Direct Routing, exploiting SIP and Session Border Controller (SBC) misconfigurations.
Videos·29 min
Melih Tas
Melih Tas explores My Journey With Mr.SIP Pro:From Hobby Project To Leading VoIP Security Testing Framework.