VOIP Wars: Destroying Jar Jar Lync
summary
Covers security weaknesses in Microsoft Lync/Skype for Business 2015 deployments and clients (Office 365, Lync, Skype for Business, IP phones, mobile/desktop/web clients) and how modern VoIP attacks can exploit open front-end/edge servers, insecure federation, lack of encryption, protocol options and malicious messaging to hijack communications or compromise softphones. Describes newly published Lync vulnerabilities and the speaker’s Viproy VoIP testing modules, and includes live demonstrations against a test Lync environment.
AI-written summary · about
chapters (12)
- 0:00Introduction
- 6:45Voiceover IP environment
- 13:14Skype for business overview
- 16:44Federation and security
- 21:07Security assessment tools
- 24:39Vulnerability research
- 30:27V-proxy tool demonstration
- 34:31Instant messaging exploits
- 39:37URL filter bypass attacks
- 47:24Advanced exploitation
- 55:13Mass compromise scenario
- 59:14Defense and conclusion
related talks
53mVoIP Wars: the Phreakers Awaken
01h 02mVoIP Wars: Attack of the Cisco Phones
21mHanging on the Telephone: Hacking VoIP
46mWeb Security Experts: Are you overlooking WebRTC vulnerabilities?
40mFighting Where They Aren't: How Attackers Avoid Endpoints in Modern Attacks
30mAttacking Encrypted VOIP Protocols
45mVoice Security - Get Up to Speed on This Attack Vector
33mVoLTE Phreaking