VoIP Wars: the Phreakers Awaken
summary
Demonstrations show concrete exploits against cloud UC and IMS installations including a method to jailbreak tenant environments and a reproducible MSRP file transfer exploit that can crash or execute code on clients, with live federation and Skype for Business examples. Tools used are Viproy and Viproxy MITM modules integrated with Metasploit to inject custom SIP/SDP headers, RTF/HTML payloads, and mass-invite sequences, with remediation advice on SBCs, authentication, patching and client isolation.
AI-written summary · about
chapters (25)
- 0:00Intro
- 4:08TRADITIONAL PHONE SYSTEMS
- 5:12UNIFIED COLLABORATION
- 5:40UNIFIED ATTACK SURFACES
- 6:36SIP & RTP FUNDAMENTALS
- 9:13CHALLENGES OF MODERN COMMUNICATIONS
- 11:00CORPORATE COMMUNICATIONS
- 12:18CLOUD COMMUNICATIONS
- 14:06FEDERATED COMMUNICATIONS
- 17:35IP-MULTIMEDIA SUBSYSTEM (IMS)
- 22:07CLIENTS UNDER ATTACK
- 23:18ATTACK SURFACES TO CLIENTS
- 24:20TEST APPROACH
- 25:19SECURITY TESTING SERVICES
- 26:41CALL CENTRE SECURITY TESTING
- 27:34IMS SECURITY TESTING
- 29:16VIPROY VOIP PEN-TESTING TOOLKIT
- 30:59SECURITY TESTING USING VIPROXY
- 32:09ATTACKING THROUGH UC/IMS
- 34:22SAMPLE SIP INVITE/SDP EXPLOIT
- 36:06ATTACKING THROUGH MESSAGING
- 36:54ATTACKING WITH ORIGINAL CLIENTS
- 42:32ATTACKING SKYPE FOR BUSINESS
- 49:08SECURING UNIFIED COMMUNICATIONS
- 51:10VOIP WARS: THE LIVE WORKSHOP
related talks
01h 02mVoIP Wars: Attack of the Cisco Phones
01h 05mVOIP Wars: Destroying Jar Jar Lync
30mAttacking Encrypted VOIP Protocols
21mHanging on the Telephone: Hacking VoIP
46mWeb Security Experts: Are you overlooking WebRTC vulnerabilities?
33mVoLTE Phreaking
48mMobile Network Hacking, IP Edition
56mHacking your Mind and Emotions