[Article]-Fun with Online VoIP Hacking

This topic contains 6 replies, has 6 voices, and was last updated by  blue.angel 10 years, 7 months ago.

  • Author
    Posts
  • #1233
     Don Donzal 
    Keymaster

    Brian Wilson’s love of the telecom field as well as hacking is showcased in this fun article. Have a good time but please be careful.

    Permanent Link: [Article]-Fun with Online VoIP Hacking

    By Brian Wilson, CCNA, CCSE, CCAI, MCP, Network+, Security+, JNCIA

    Disclaimer: This paper and the topics covered in the paper are just for educational purposes and should not be tried on a network without permission from owner of the network/service you plan on testing. I hold no responsibility for any actions or damage that might accrue if you try anything explained in this paper.

    Ok… We all have heard of Vonage and the other VoIP providers that will give you unlimited phone services over your broadband connection using your regular old phone. But there are other services that are similar but have a few extra fun options. Let’s take a look.

    Leave your comments or suggestions for other topics you’d like to see Brian cover.

    Don

  • #12243
     Anonymous 
    Participant

    ok i want to see part 2! it was just getting good!

    good article though.

    are there any good software VoIP programs or any cheap hardware VoIP phones so we can go play?  can you sniff VoIP in a switched environment without doing anything evil?

  • #12244
     slimjim100 
    Participant

    ok i want to see part 2! it was just getting good!

    >> Part 2 might be on it’s way 🙂

    good article though.

    are there any good software VoIP programs or any cheap hardware VoIP phones so we can go play?  can you sniff VoIP in a switched environment without doing anything evil?

    >>Software Programs: I know of alot of Clones similer to http://www.VoIPBuster.com (you can call bridge from there website free without downloading any software too).

    >> Cheap Hardware: I have been told you can used most of the Vonage/Skype Phones. With VoIPBuster you do not get a real number but you can use a ATA or IP Phone to make outbound calls.

    >> SNiffer software: To record VoIP Calls. I have not tried with VoIPBuster and I have had no luck sniffing Skype, but I have been able to successfully Sniff the Cisco Unity IP Phone networks with Cain & Able. Some times with the Cisco IP Telephony you have to spoof your MAC to get the correct VLAN depending on how the network is etup but I have been able to sniff over 30 calls at one time with Cain and record them with out affecting the network and the end users never see it. You have to perform a “Man in The Middle Attach (MITM)” to get the traffic running though your NIC. When running a MITM attack with Cain always look to the lower left of the window and watch for data/packet loss. If you see any packet loss when running a MITM attack stop the attach or your LAN switch might lock-up.

    Good luck and have fun 😛

    Brian

  • #12245
     Don Donzal 
    Keymaster

    Submitted to digg:

    http://www.digg.com/security/Fun_with_Online_VoIP_Hacking

    If you’re fans of this type of content from Brian, digg this story to get him some well-deserved attention. Who knows, it might be incentive enough for him to finish Part 2!

    Don

  • #12246
     inindix 
    Participant

    @ChrisG wrote:

    ok i want to see part 2! it was just getting good!

    good article though.

    are there any good software VoIP programs or any cheap hardware VoIP phones so we can go play?  can you sniff VoIP in a switched environment without doing anything evil?

    I think that is a good article to read, i think there are many resources that maybe available to us but it is hard to find though… hope that sometimes their will get introduce things like that to us.

    __________________
    Call Center Software

  • #12247
     Clay Briggs 
    Participant

    I found this out recently as I was preparing for a class I was teaching on Wireshark for a region workshop.  It turns out you can now sniff/record/play back voip calls with Wireshark. Pretty nifty. You know… it’s sad, I still have never used Cain and Abel really. I’ve downloaded it, installed it… just never gotten around to using it.  I remember it had that voip play back ability though… I will have to compare how easy it is compared to Wireshark for that.

  • #12248
     blue.angel 
    Participant

    Most VoIP devices (phones, servers, etc.) also run Web servers for remote management. • Find them with Google. • VoIP Google Hacking Database,

    ______________________________________________________________________
    IP PBX

You must be logged in to reply to this topic.

Copyright ©2019 Caendra, Inc.

Contact Us

Thoughts, suggestions, issues? Send us an email, and we'll get back to you.

Sending

Sign in with Caendra

Forgot password?Sign up

Forgot your details?