Re: [PEN-TEST] PBX Security

[PRAYAGSING MUKESH <MPRAYAGSING () DELOITTE LU>]

maybe you should have a look at the pbxhack program provided with THC-SCAN


______________________________________
  Mukesh Prayagsing

  DELOITTE & TOUCHE - ERS Sarl
  Enterprise Risk Services
__________________________________


-----Original Message-----
From: Joe Traietta [mailto:JTraietta () ASAHIBANKNY COM]
Sent: Wednesday, 4.October 2000 16:07 PM
To: PEN-TEST () SECURITYFOCUS COM
Subject: [PEN-TEST] PBX Security


I have been asked to perform a security review on the PBX system (NEC NEAX
2000 IVS) at my company.  I have virtually no PBX experience, so I was
hoping somebody could point me to a good resource, or pass along some
personal experience about reviewing / auditing a PBX system.

Thank you.

Joseph Traietta
Data Security Officer
Asahi Bank, New York Branch