Pentesting VoIP
Download as PPTX, PDF0 likes322 views
This document discusses penetration testing of voice over IP (VoIP) systems. It begins with an overview of VoIP, describing how it allows phone calls over the internet and its common protocols like SIP and RTP. It then covers attacks like information gathering, eavesdropping on traffic, VLAN hopping, spoofing caller ID, and denial of service vulnerabilities. The document concludes with a checklist of penetration testing techniques for VoIP systems, such as VLAN hopping, extension enumeration, capturing SIP authentication, eavesdropping on calls, and callerID spoofing.
Pentesting VoIP
- 2. Boring stuffs • allows you to make and receive telephone calls over the Internet • low international phone call rates to other countries • Protocols under voIP: • SIP(UDP -5060) • H.323 • RTP • Skype
- 3. • SIP: Requests • INVITE - establish connection • BYE - terminate • REGISTER – indicate client address to server • SIP: Responses • 1xx - responses to requests • 2xx: 200-level responses indicate a successful completion of the request • 3xx: redirection is needed for completion of the request. • 4xx: bad syntax • 5xx: The server failed to fulfil an apparently valid request • 6xx: This is a global failure
- 4. Attacks on SIP • Information gathering and foot printing • Eavesdropping and capturing traffic • VLAN hopping • Spoofing Caller ID • Identification of Denial of Service (DoS) vulnerabilities • Authentication Attacks
- 5. Demo !!
- 6. VoIP Checklist for Penetration Testers • VoIP-001 - VLAN hopping from data network to voice network • VoIP-002 - Extension Enumeration & Number Harvesting • VoIP-003 - Capturing SIP Authentication • VoIP-004 - Eavesdropping Calls • VoIP-005 - CallerID spoofing • VoIP-006 - RTP injection • VoIP-007 - Signaling Manipulation • VoIP-008 - Identification of insecure services • VoIP-009 - Testing for Default Credentials • VoIP-010 - Application level vulnerabilities • VoIP-011 - Voice Mail Attacks • VoIP-012 - Phone Firmware Analysis