Penetration Testing mailing list archives

[tool] new tool: VideoJak: IP video security assessment tool


From: Jason Ostrom <jostrom () viperlab net>
Date: Thu, 26 Feb 2009 15:27:10 -0600

Sipera VIPER Lab is pleased to release a new IP video security assessment tool:  VideoJak!
http://videojak.sourceforge.net

What is VideoJak?
VideoJak is an IP Video security assessment tool that can simulate a proof of concept DoS against a targeted, 
user-selected video session and IP video phone. VideoJak is the first of its kind security tool that analyzes video 
codec standards such as H.264. VideoJak works by first capturing the RTP port used in a video conversation and 
analyzing the RTP packets, collecting the RTP sequence numbers and timestamp values used between the phones. Then 
VideoJak creates a custom video payload by changing the sequence numbers and timestamp values used in the original RTP 
packets between the two phones. After the user selects a targeted phone to attack in an ongoing video session, VideoJak 
delivers the payload oer the learned RTP port against the target. This attack results in severely degraded video and 
audio quality.



Current thread: