VoIP Wars: Attack of the Cisco Phones
Presenters detail vulnerability discovery and exploitation in VoIP Wars: Attack of the Cisco Phones.
Summary
Overview: The presentation covers Skinny and SIP signalling attacks, 0day bypass technique for call spoofing and billing bypass, LAN attacks against supportive services for IP Phones, practical 0day attacks against IP Phone management and tenant services. Attacking Cisco VoIP services requires limited knowledge today with the Viproy Penetration Testing Kit (written by the presenter). It has a dozen modules to test trust hacking issues, signalling attacks against SIP services and Skinny services, gaining u
Key Topics: nauthorised access, call spoofing, brute-forcing VoIP accounts and debugging services using as MITM. Furthermore, Viproy provides these attack modules in a penetration testing environment and full integration. The presentation contains live demonstration of practical VoIP attacks and usage of new Viproy modules.
Related talks
Black Hat·53 min
Industry experts analyze emerging threats surrounding VoIP Wars: the Phreakers Awaken.
Black Hat·1 hr 5 min
Analysts investigate attack surfaces and defenses concerning VOIP Wars: Destroying Jar Jar Lync.
Black Hat·22 min
Industry experts analyze emerging threats surrounding SSO Wars: The Token Menace.