.

[Article]-Fun with Online VoIP Hacking

<<

don

User avatar

Administrator
Administrator

Posts: 4226

Joined: Sun Aug 28, 2005 10:47 pm

Location: Chicago

Post Tue Apr 03, 2007 12:46 am

[Article]-Fun with Online VoIP Hacking

Brian Wilson's love of the telecom field as well as hacking is showcased in this fun article. Have a good time but please be careful.

Permanent Link: [Article]-Fun with Online VoIP Hacking

By Brian Wilson, CCNA, CCSE, CCAI, MCP, Network+, Security+, JNCIA

Disclaimer: This paper and the topics covered in the paper are just for educational purposes and should not be tried on a network without permission from owner of the network/service you plan on testing. I hold no responsibility for any actions or damage that might accrue if you try anything explained in this paper.

Ok... We all have heard of Vonage and the other VoIP providers that will give you unlimited phone services over your broadband connection using your regular old phone. But there are other services that are similar but have a few extra fun options. Let's take a look.


Leave your comments or suggestions for other topics you'd like to see Brian cover.

Don
CISSP, MCSE, CSTA, Security+ SME
<<

LSOChris

Post Tue Apr 03, 2007 11:52 am

Re: [Article]-Fun with Online VoIP Hacking

ok i want to see part 2! it was just getting good!

good article though.

are there any good software VoIP programs or any cheap hardware VoIP phones so we can go play?  can you sniff VoIP in a switched environment without doing anything evil?
<<

slimjim100

User avatar

EH-Net Columnist
EH-Net Columnist

Posts: 385

Joined: Wed Nov 08, 2006 12:50 pm

Location: Atlanta

Post Tue Apr 03, 2007 2:12 pm

Re: [Article]-Fun with Online VoIP Hacking

ok i want to see part 2! it was just getting good!

>> Part 2 might be on it's way :)

good article though.

are there any good software VoIP programs or any cheap hardware VoIP phones so we can go play?  can you sniff VoIP in a switched environment without doing anything evil?

>>Software Programs: I know of alot of Clones similer to www.VoIPBuster.com (you can call bridge from there website free without downloading any software too).

>> Cheap Hardware: I have been told you can used most of the Vonage/Skype Phones. With VoIPBuster you do not get a real number but you can use a ATA or IP Phone to make outbound calls.

>> SNiffer software: To record VoIP Calls. I have not tried with VoIPBuster and I have had no luck sniffing Skype, but I have been able to successfully Sniff the Cisco Unity IP Phone networks with Cain & Able. Some times with the Cisco IP Telephony you have to spoof your MAC to get the correct VLAN depending on how the network is etup but I have been able to sniff over 30 calls at one time with Cain and record them with out affecting the network and the end users never see it. You have to perform a "Man in The Middle Attach (MITM)" to get the traffic running though your NIC. When running a MITM attack with Cain always look to the lower left of the window and watch for data/packet loss. If you see any packet loss when running a MITM attack stop the attach or your LAN switch might lock-up.

Good luck and have fun :P

Brian
CISSP, CCSE, CCNA, CCAI, Network+, Security+, JNCIA, & MCP
<<

don

User avatar

Administrator
Administrator

Posts: 4226

Joined: Sun Aug 28, 2005 10:47 pm

Location: Chicago

Post Tue Apr 03, 2007 4:53 pm

Re: [Article]-Fun with Online VoIP Hacking

Submitted to digg:

http://www.digg.com/security/Fun_with_O ... IP_Hacking

If you're fans of this type of content from Brian, digg this story to get him some well-deserved attention. Who knows, it might be incentive enough for him to finish Part 2!

Don
CISSP, MCSE, CSTA, Security+ SME
<<

bobbywhite77

Newbie
Newbie

Posts: 2

Joined: Tue Feb 17, 2009 7:32 pm

Post Tue Feb 17, 2009 9:41 pm

Re: [Article]-Fun with Online VoIP Hacking

Voipuser.org has a lot of good phones for Voip and I think Skype has its own program built in to record calls.

Bobby W
Business Phones
VOIP PBX
<<

inindix

Newbie
Newbie

Posts: 1

Joined: Wed Mar 18, 2009 2:32 am

Post Wed Mar 18, 2009 2:38 am

Re: [Article]-Fun with Online VoIP Hacking

ChrisG wrote:ok i want to see part 2! it was just getting good!

good article though.

are there any good software VoIP programs or any cheap hardware VoIP phones so we can go play?  can you sniff VoIP in a switched environment without doing anything evil?


I think that is a good article to read, i think there are many resources that maybe available to us but it is hard to find though... hope that sometimes their will get introduce things like that to us.






__________________
Call Center Software
<<

g00d_4sh

User avatar

Sr. Member
Sr. Member

Posts: 394

Joined: Tue Sep 18, 2007 1:50 pm

Location: Guayaquil, Ecuador

Post Wed Mar 18, 2009 11:48 am

Re: [Article]-Fun with Online VoIP Hacking

I found this out recently as I was preparing for a class I was teaching on Wireshark for a region workshop.  It turns out you can now sniff/record/play back voip calls with Wireshark. Pretty nifty. You know... it's sad, I still have never used Cain and Abel really. I've downloaded it, installed it... just never gotten around to using it.  I remember it had that voip play back ability though... I will have to compare how easy it is compared to Wireshark for that.
"Bad.. Good?  I'm the guy with the gun"
<<

blue.angel

Newbie
Newbie

Posts: 1

Joined: Thu Mar 19, 2009 2:55 am

Post Thu Mar 19, 2009 3:07 am

Re: [Article]-Fun with Online VoIP Hacking

Most VoIP devices (phones, servers, etc.) also run Web servers for remote management. • Find them with Google. • VoIP Google Hacking Database,











______________________________________________________________________
IP PBX
Last edited by blue.angel on Thu Mar 19, 2009 3:11 am, edited 1 time in total.
<<

bobbywhite77

Newbie
Newbie

Posts: 2

Joined: Tue Feb 17, 2009 7:32 pm

Post Tue Mar 24, 2009 5:25 pm

Re: [Article]-Fun with Online VoIP Hacking

Blue Angel

do you have an example of an exact site. I couldnt find one on google.

Bobby W
Small Business Voip
Voip

Return to Wilson

Who is online

Users browsing this forum: No registered users and 0 guests

cron
.
Powered by phpBB® Forum Software © phpBB Group.
Designed by ST Software