Penetration Testing mailing list archives
RE: IP Telephony pen-test and VLAN's
From: "Paul Melson" <pmelson () gmail com>
Date: Fri, 19 May 2006 10:42:05 -0400
-----Original Message----- Subject: Re: IP Telephony pen-test and VLAN's
* The 'supported' platform is windows 2000, and it will most likely be a win2000 box, so all the usual Windows 2000 exploits should work hopefully
But for the fact that Cisco bundles CSA with CallManager 4. Of course, this the perfect opportunity to read up on bypassing HIPS. http://www.blackhat.com/presentations/bh-usa-04/bh-us-04-tsyrklevich.pdf
* Sniff VoIP RTP in windows with ethereal or Cain&Able
Definitely use Cain & Abel for this. The new version records H.323 calls as WAV files for playback. Very effective demonstration for the client.\ PaulM ------------------------------------------------------------------------------ This List Sponsored by: Cenzic Concerned about Web Application Security? Why not go with the #1 solution - Cenzic, the only one to win the Analyst's Choice Award from eWeek. As attacks through web applications continue to rise, you need to proactively protect your applications from hackers. Cenzic has the most comprehensive solutions to meet your application security penetration testing and vulnerability management needs. You have an option to go with a managed service (Cenzic ClickToSecure) or an enterprise software (Cenzic Hailstorm). Download FREE whitepaper on how a managed service can help you: http://www.cenzic.com/news_events/wpappsec.php And, now for a limited time we can do a FREE audit for you to confirm your results from other product. Contact us at request () cenzic com for details. ------------------------------------------------------------------------------
Current thread:
- IP Telephony pen-test and VLAN's Frank Bussink (May 16)
- Re: IP Telephony pen-test and VLAN's Sn0rkY (May 17)
- Re: IP Telephony pen-test and VLAN's Jason Ostrom (May 17)
- Re: IP Telephony pen-test and VLAN's Chris Serafin (May 18)
- RE: IP Telephony pen-test and VLAN's Paul Melson (May 21)
- Re: IP Telephony pen-test and VLAN's Chris Serafin (May 18)
- Re: IP Telephony pen-test and VLAN's Chris Serafin (May 17)
- <Possible follow-ups>
- Re: IP Telephony pen-test and VLAN's Mark Teicher (May 17)
- Re: IP Telephony pen-test and VLAN's Sheran Gunasekera (May 18)
- Re: IP Telephony pen-test and VLAN's Marco Ivaldi (May 21)