PaulDotCom mailing list archives

Voicemail Penetration Testing


From: i0null at nightcoder.org (Shane Kelly)
Date: Fri, 7 Aug 2009 18:00:41 +0100

I did look into it, it seemed like it only did analysis on a given
range given rather then post dialling specific extensions. I have also
heard that it does all the sound analysis after dialling. One of the
key elements I am looking for it for it to detect when the passcode
has been entered correct ( by virtue of it not matching the response
given on failure ) and then move onto the next extension.

It sounds like a bit of a task finding a good provider and getting up
and running, but this should not be an issue if it able to provide the
above functionality.


2009/8/7  <christopher.riley at r-it.at>:

Sounds like you might want to try HD Moore's latest toy, WarVOX (1). There
is more information on WarVOX available on the website (2).

(1) http://warvox.org/
(2) http://warvox.org/media/warvox-1.0.0.pdf



pauldotcom-bounces at mail.pauldotcom.com@inet wrote on 07.08.2009 15:53:59:

I am working on a project to test various voicemail systems. It needs
to be able to test a given set of extensions and try to gain access to
them by cycling though a custom set of default pins.

The issue I am having is fuzzy matching the response to determine if
it has succeeded or not. Is the feasible to be able to do in
real-time? If so are there any good ways of doing this?

I was thinking of using the Mgetty::Voice module from perl to
interface with a voice modem and record the response. It has the
capability to record up to a time-out or a specific event. It outputs
RMD files which can be converted to WAV for analysis purposes.

Has anyone any experience in doing voice mail testing or are know if I
am going in the right direction with this?

Modem technology is a bit behind my day so any reference material
would also be great help!

Kudos in advance..
Shane.
_______________________________________________
Pauldotcom mailing list
Pauldotcom at mail.pauldotcom.com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com

----------------------------------------
Raiffeisen Informatik GmbH, Firmenbuchnr. 88239p, Handelsgericht Wien, DVR
0486809, UID ATU 16351908

Der Austausch von Nachrichten mit oben angefuehrtem Absender via E-Mail
dient ausschliesslich Informationszwecken. Rechtsgeschaeftliche Erklaerungen
duerfen ueber dieses Medium nicht ausgetauscht werden.
Correspondence with above mentioned sender via e-mail is only for
information purposes. This medium may not be used for exchange of
legally-binding communications.
----------------------------------------




Current thread: