|
Title: [Article]-Fun with Online VoIP Hacking Post by: don on April 03, 2007, 12:46:29 AM Brian Wilson's love of the telecom field as well as hacking is showcased in this fun article. Have a good time but please be careful.
Permanent Link: [Article]-Fun with Online VoIP Hacking (http://www.ethicalhacker.net/content/view/127/24/) Quote By Brian Wilson, CCNA, CCSE, CCAI, MCP, Network+, Security+, JNCIA Disclaimer: This paper and the topics covered in the paper are just for educational purposes and should not be tried on a network without permission from owner of the network/service you plan on testing. I hold no responsibility for any actions or damage that might accrue if you try anything explained in this paper. Ok... We all have heard of Vonage and the other VoIP providers that will give you unlimited phone services over your broadband connection using your regular old phone. But there are other services that are similar but have a few extra fun options. Let's take a look. Leave your comments or suggestions for other topics you'd like to see Brian cover. Don Title: Re: [Article]-Fun with Online VoIP Hacking Post by: ChrisG on April 03, 2007, 11:52:49 AM ok i want to see part 2! it was just getting good!
good article though. are there any good software VoIP programs or any cheap hardware VoIP phones so we can go play? can you sniff VoIP in a switched environment without doing anything evil? Title: Re: [Article]-Fun with Online VoIP Hacking Post by: slimjim100 on April 03, 2007, 02:12:44 PM ok i want to see part 2! it was just getting good!
>> Part 2 might be on it's way :) good article though. are there any good software VoIP programs or any cheap hardware VoIP phones so we can go play? can you sniff VoIP in a switched environment without doing anything evil? >>Software Programs: I know of alot of Clones similer to www.VoIPBuster.com (you can call bridge from there website free without downloading any software too). >> Cheap Hardware: I have been told you can used most of the Vonage/Skype Phones. With VoIPBuster you do not get a real number but you can use a ATA or IP Phone to make outbound calls. >> SNiffer software: To record VoIP Calls. I have not tried with VoIPBuster and I have had no luck sniffing Skype, but I have been able to successfully Sniff the Cisco Unity IP Phone networks with Cain & Able. Some times with the Cisco IP Telephony you have to spoof your MAC to get the correct VLAN depending on how the network is etup but I have been able to sniff over 30 calls at one time with Cain and record them with out affecting the network and the end users never see it. You have to perform a "Man in The Middle Attach (MITM)" to get the traffic running though your NIC. When running a MITM attack with Cain always look to the lower left of the window and watch for data/packet loss. If you see any packet loss when running a MITM attack stop the attach or your LAN switch might lock-up. Good luck and have fun :P Brian Title: Re: [Article]-Fun with Online VoIP Hacking Post by: don on April 03, 2007, 04:53:07 PM Submitted to digg:
http://www.digg.com/security/Fun_with_Online_VoIP_Hacking If you're fans of this type of content from Brian, digg this story to get him some well-deserved attention. Who knows, it might be incentive enough for him to finish Part 2! Don
Powered by SMF 1.1.5 |
SMF © 2006-2008, Simple Machines LLC
Joomla Bridge by JoomlaHacks.com |