Attacking Encrypted VOIP Protocols
summary
Demonstrates decrypting TLS-wrapped SIP by chaining mitm_relay.py to Burp to convert SIP into editable HTTP-like requests, then parsing that text to brute-force SIP digest auth with a new tool sipcrack2 because sipdump/sipcrack cannot read mitm_relay output; proof‑of‑concept works in lab (decrypted session, recovered credentials). Attack assumes network position (ARP poisoning or provider compromise) so real-world feasibility is limited; recommends strong passwords, no self‑signed certs, and client‑side certificates.
AI-written summary · about
chapters (12)
- 0:00Introduction to VoIP
- 3:28SIP protocol overview
- 6:41TLS encryption and security
- 8:04Attack methodology
- 9:21Plaintext SIP attacks
- 10:20Man-in-the-middle design
- 12:21POC topology and mechanics
- 15:38Tampering with SIP traffic
- 16:25Custom cracking tool
- 18:17Digest authentication
- 20:38Attack limitations
- 24:11Demo and conclusion
related talks
53mVoIP Wars: the Phreakers Awaken
01h 02mVoIP Wars: Attack of the Cisco Phones
30mMITM On PSTN: Novel Methods For Intercepting Phone Calls
21mHanging on the Telephone: Hacking VoIP
46mWeb Security Experts: Are you overlooking WebRTC vulnerabilities?
21mSecurity is Everyone's Responsibility
38mUsing SIP Traffic to Influence the Communications and Geopolitical Landscape of Germa
48mMobile Network Hacking, IP Edition