
Hacking VoIP
Protocols, Attacks, and Countermeasures
Himanshu Dwivedi(Author)
No Starch Press
Published on 15. October 2008
232 pages
978-1-59327-309-5 (ISBN)
System requirements
for ePUB without DRM
E-Book Single Licence
You are acquiring a single user licence for this eBook, which you might not transfer. [L]
Available for download
Description
Alles über E-Books | Antworten auf Fragen rund um E-Books, Kopierschutz und Dateiformate finden Sie in unserem Info- & Hilfebereich.
Voice over Internet Protocol (VoIP) networks have freed users from the tyranny of big telecom, allowing people to make phone calls over the Internet at very low or no cost. But while VoIP is easy and cheap, it's notoriously lacking in security. With minimal effort, hackers can eavesdrop on conversations, disrupt phone calls, change caller IDs, insert unwanted audio into existing phone calls, and access sensitive information.
Hacking VoIP takes a dual approach to VoIP security, explaining its many security holes to hackers and administrators. If you're serious about security, and you either use or administer VoIP, you should know where VoIP's biggest weaknesses lie and how to shore up your security. And if your intellectual curiosity is leading you to explore the boundaries of VoIP, Hacking VoIP is your map and guidebook.
Hacking VoIP will introduce you to every aspect of VoIP security, both in home and enterprise implementations. You'll learn about popular security assessment tools, the inherent vulnerabilities of common hardware and software packages, and how to:
-Identify and defend against VoIP security attacks such as eavesdropping, audio injection, caller ID spoofing, and VoIP phishing
-Audit VoIP network security
-Assess the security of enterprise-level VoIP networks such as Cisco, Avaya, and Asterisk, and home VoIP solutions like Yahoo! and Vonage
-Use common VoIP protocols like H.323, SIP, and RTP as well as unique protocols like IAX
-Identify the many vulnerabilities in any VoIP network
Whether you're setting up and defending your VoIP network against attacks or just having sick fun testing the limits of VoIP networks, Hacking VoIP is your go-to source for every aspect of VoIP security and defense.
Hacking VoIP takes a dual approach to VoIP security, explaining its many security holes to hackers and administrators. If you're serious about security, and you either use or administer VoIP, you should know where VoIP's biggest weaknesses lie and how to shore up your security. And if your intellectual curiosity is leading you to explore the boundaries of VoIP, Hacking VoIP is your map and guidebook.
Hacking VoIP will introduce you to every aspect of VoIP security, both in home and enterprise implementations. You'll learn about popular security assessment tools, the inherent vulnerabilities of common hardware and software packages, and how to:
-Identify and defend against VoIP security attacks such as eavesdropping, audio injection, caller ID spoofing, and VoIP phishing
-Audit VoIP network security
-Assess the security of enterprise-level VoIP networks such as Cisco, Avaya, and Asterisk, and home VoIP solutions like Yahoo! and Vonage
-Use common VoIP protocols like H.323, SIP, and RTP as well as unique protocols like IAX
-Identify the many vulnerabilities in any VoIP network
Whether you're setting up and defending your VoIP network against attacks or just having sick fun testing the limits of VoIP networks, Hacking VoIP is your go-to source for every aspect of VoIP security and defense.
More details
Language
English
Place of publication
New York
United States
Product notice
Reflowable
File size
2,89 MB
ISBN-13
978-1-59327-309-5 (9781593273095)
Schweitzer Classification
Other editions
Additional editions

Book
10/2008
1st Edition
No Starch Press
€45.50
Article exhausted; check different version
Person
Himanshu Dwivedi is a leading security expert and researcher. He has published four books, Hacking Exposed: Web 2.0 (McGraw-Hill), Securing Storage (Addison Wesley), Hacker's Challenge 3 (McGraw-Hill), and Implementing SSH (Wiley). A founder of iSEC Partners, Himanshu manages iSEC's product development and engineering, specialized security solutions, and the creation of security testing tools for customers.
Content
- Intro
- Hacking VoIP Protocols, Attacks, and Countermeasures
- ACKNOWLEDGMENTS
- INTRODUCTION
- Book Overview
- Lab Setup
- SIP/IAX/H.323 Server
- SIP Setup
- H.323 Setup (Ekiga)
- IAX Setup
- 1. AN INTRODUCTION TO VOIP SECURITY
- Why VoIP
- VoIP Basics
- How It Works
- Protocols
- Deployments
- VoIP Security Basics
- Authentication
- Authorization
- Availability
- Encryption
- Attack Vectors
- Summary
- I. VOIP PROTOCOLS
- 2. SIGNALING: SIP SECURITY
- SIP Basics
- SIP Messages
- Making a VoIP Call with SIP Methods
- Registration
- The INVITE Request
- Enumeration and Registration
- Enumerating SIP Devices on a Network
- Registering with Identified SIP Devices
- Authentication
- Encryption
- SIP with TLS
- SIP with S/MIME
- SIP Security Attacks
- Username Enumeration
- Enumerating SIP Usernames with Error Messages
- Enumerating SIP Usernames by Sniffing the Network
- SIP Password Retrieval
- Data Collection for SIP Authentication Attacks
- An Example
- Tools to Perform the Attack
- Man-in-the-Middle Attack
- Registration Hijacking
- Spoofing SIP Proxy Servers and Registrars
- Denial of Service via BYE Message
- Denial of Service via REGISTER
- Denial of Service via Un-register
- Fuzzing SIP
- Summary
- 3. SIGNALING: H.323 SECURITY
- H.323 Security Basics
- Enumeration
- Authentication
- Symmetric Encryption
- Password Hashing
- Public Key
- Authorization
- H.323 Security Attacks
- Username Enumeration (H.323 ID)
- H.323 Password Retrieval
- H.323 Replay Attack
- H.323 Endpoint Spoofing (E.164 Alias)
- E.164 Alias Enumeration
- E.164 Hopping Attacks
- Denial of Service via NTP
- DoS with Authentication Enabled
- Denial of Service via UDP (H.225 Registration Reject)
- Denial of Service via Host Unreachable Packets
- Denial of Service via H.225 nonStandardMessage
- Summary
- 4. MEDIA: RTP SECURITY
- RTP Basics
- RTP Security Attacks
- Passive Eavesdropping
- Capturing Packets from Different Endpoints: Man-in-the-Middle
- Using Cain & Abel for Man-in-the-Middle Attacks
- Using Wireshark
- Active Eavesdropping
- Audio Insertion
- Audio Replacement
- Denial of Service
- Message Flooding
- RTCP Bye (Session Teardown)
- Summary
- 5. SIGNALING AND MEDIA: IAX SECURITY
- IAX Authentication
- IAX Security Attacks
- Username Enumeration
- Offline Dictionary Attack
- Active Dictionary Attack
- Targeted attack
- IAX Man-in-the-Middle Attack
- MD5-to-Plaintext Downgrade Attack
- Targeted attack-id001
- Wildcard attack
- Denial of Service Attacks
- Registration Reject
- Call Reject
- HangUP
- Targeted attack-id002
- Wildcard attack-id001
- Hold (QUELCH)
- Summary
- II. VOIP SECURITY THREATS
- 6. ATTACKING VOIP INFRASTRUCTURE
- Vendor-Specific VoIP Sniffing
- Hard Phones
- Compromising the Phone's Configuration File
- Uploading a Malicious Configuration File
- Exploiting Weaknesses of SNMP
- Cisco CallManager and Avaya Call Center
- Using Nmap to Scan VoIP Devices
- Scanning Web Management Interfaces with Nikto
- Discovering Vulnerable Services with Nessus
- Modular Messaging Voicemail System
- Infrastructure Server Impersonation
- Spoofing SIP Proxies and Registrars
- Redirecting H.323 Gatekeepers
- Summary
- 7. UNCONVENTIONAL VOIP SECURITY THREATS
- VoIP Phishing
- Spreading the Message
- Receiving the Calls
- Making Free Calls
- Caller ID Spoofing
- Example 1
- Example 2
- Example 3
- Example 4
- Anonymous Eavesdropping and Call Redirection
- Spam Over Internet Telephony
- SPIT and the City
- Lightweight SPIT with Skype/Google Talk
- Summary
- 8. HOME VOIP SOLUTIONS
- Commercial VoIP Solutions
- Vonage
- Call Eavesdropping (RTP)
- Voice Injection (RTP)
- Username/Password Retrieval (SIP)
- PC-Based VoIP Solutions
- Yahoo! Messenger
- Eavesdropping on Yahoo! Messenger
- Injecting Audio into Yahoo! Messenger Calls
- Google Talk
- Microsoft Live Messenger
- Skype
- SOHO Phone Solutions
- Summary
- III. ASSESS AND SECURE VOIP
- 9. SECURING VOIP
- SIP over SSL/TLS
- Secure RTP
- SRTP and Media Protection with AES Cipher
- SRTP and Authentication and Integrity Protection with HMAC-SHA1
- SRTP Key Distribution Method
- ZRTP and Zfone
- Firewalls and Session Border Controllers
- The VoIP and Firewall Problem
- The Solution
- Summary
- 10. AUDITING VOIP FOR SECURITY BEST PRACTICES
- VoIP Security Audit Program
- Summary
- COLOPHON
System requirements
File format: ePUB
Copy protection: without DRM (Digital Rights Management)
System requirements:
- Computer (Windows; MacOS X; Linux): Use a reader that can handle the file format ePUB, such as Adobe Digital Editions or FBReader – both free (see eBook Help).
- Tablet/Smartphone (Android; iOS): Install the free app Adobe Digital Editions or the app PocketBook (see eBook Help).
- E-reader: Bookeen, Kobo, Pocketbook, Sony, Tolino and many more (not Kindle).
The file format ePUB works well for novels and non-fiction books – i.e., 'flowing' text without complex layout. On an e-reader or smartphone, line and page breaks automatically adjust to fit the small displays.
This eBook does not use copy protection or Digital Rights Management
For more information, see our eBook Help page.