asterisk

AsteriskR 开源 PBX root@kitploit: By Mark Spencer and the Asterisk.org developer community. Copyright C 2001-2025 Sangoma Technologies Corporation and other copyright holders. 安全 在尝试配置和运行 Asterisk 服务器之前，您必须阅读并充分理解安全信息文档的全部内容。 有关更多信息，请参阅重要安全注意事项。 什么是 Asterisk？ Asterisk 是一个开源 PBX...

email-prediction-asterisks

ASTERISKS & OBELIX 邮件预测星号 是一个脚本，能够让你识别隐藏在星号背后的电子邮件。它是OSINT分析师和安全部门的理想工具。通过利用Intelx泄露数据，它可以智能预测与我们正在寻找的人员相关的电子邮件。此外，它还能通过生成的CSV数据集自动获取邮件信息，便于手动分析。 推特上带有星号的电子邮件示例 演示 安装 需要安装Python的intelx库 root@kitploit: git clone https://github.com/Quantika14/email-prediction-asterisks pip3 install -r...

bluebox

Bluebox 开发中 一个针对不同VoIP产品的漏洞利用集合。感谢 Go Exploit Framework。 如果你来找VoIP渗透测试解决方案，请查看 Sippts（Kali 中的 sippts-gui）或 SIPVicious。本项目更侧重于漏洞利用阶段。 安装 root@kitploit: git clone https://github.com/jesusprubio/bluebox.git cd bluebox go mod tidy go mod vendor 用法 我们遵循 Go Exploit Framework 推荐模式。为方便起见，本仓库不包含二进制文件。...

sipcheck

SIPCheck v.3.0 简介 SIPCheck 是一个监控 Asterisk 用户认证并自动封禁尝试使用错误密码注册或拨号的用户（或机器人）的工具。 与 Fail2Ban 不同，SIPCheck 不仅管理攻击者，还管理您信任的客户端。因此，如果您有已证明可信的 SIP 用户，即使收到错误密码，也不会封禁该 IP，因为该 IP 后面可能有很多 SIP 客户端，若直接封禁会造成误伤。 为此，我们从头重新设计了此应用，与旧版本相比引入了多项特性。 更简易 ：安装、配置和执行都非常简单。 资源优化 ：面向大量并发呼叫的大型系统，避免访问日志文件和解析大量实时信息。 持久化...

htb-machine-ringdown

htb-machine-ringdown Writeup detallado de diseño y explotación para Ringdown: una máquina vulnerable original basada en Debian/Asterisk que incluye CVE-2024-42365 AMI, cracking de pre-hash PJSIP y escalada de privilegios mediante ACL POSIX de Fail2ban...

Issabel Authenticated - Remote Code Execution

A vulnerability was found in Issabel PBX 4.0.0. It has been rated as critical. This issue affects some unknown processing of the file /index.php?menu=asteriskcli of the component Asterisk-Cli. The manipulation of the argument Command leads to os command injection. The attack may be initiated...

astDoS

astDoS 用于利用CVE-2018-7284和CVE-2018-19278的工具 用法 该工具作为命令行使用。 root@kitploit: astDoS.py -h -a 1,2 -sA SERVERIP -sP SERVERPORT -u USER -p PASSWD -sub SUBUSER -dA DNSIP -dP DNSPORT -v VERSION DoS attack against Astersisk, CVE-2018-7284 and CVE-2018-19278 optional arguments: -h, --help show this help...

BC-WHY-NOT-LEARN-NEW-STUFF-

BC-WHY-NOT-LEARN-NEW-STUFF- 入侵 SIP/PJSIP 使远程 asterisk 实例崩溃 : https://github.com/asterisk/asterisk/security/advisories/GHSA-v428-g3cw-7hv9...

FreePBX >= 17.0.2.36 && < 17.0.3 - Authenticated Command Injection

FreePBX Endpoint Manager 17.0.2.36 to = 17.0.2.36 && 17.0.3 - Authenticated Command Injection author: th3y severity: critical description: | FreePBX Endpoint Manager 17.0.2.36 to 17.0.3 contains a command injection caused by improper sanitization in filestore module's testconnection checksshconne...

Astra Linux – Vulnerability in the 389-DS-base

A flaw was discovered in 389-ds-base. If an asterisk is imported as password hashes, either accidentally or maliciously, then any password will successfully match during authentication, instead of being inactive. This flaw allows an attacker to successfully authenticate as a user whose password h...

CVE-2026-73662

A flaw was found in the FreePBX Music on Hold module. An authenticated administrator can exploit dangerous command-line options when configuring media players, such as /usr/bin/mpg123. This allows the administrator to execute arbitrary commands as the asterisk service user by writing files, openi...

CVE-2026-73665

FreePBX is an open source IP PBX. Prior to 17.0.9, the UCP Node server on ports 8001 and 8003 uses io.usecheckAuth in node/lib/server.js, but Socket.IO version 4 applies that middleware only to the default namespace. An unauthenticated client can connect to custom namespaces that do not...

CVE-2026-73660

FreePBX is an open source IP PBX. Prior to 16.0.6 and 17.0.5.4, the FreePBX Text-To-Speech module allows an authenticated administrator to save a TTS destination name that is HTML-encoded for storage, decoded during dialplan generation, passed as an AGI argument, and used to build filenames insid...

CVE-2026-73662

FreePBX is an open source IP PBX. From 17.0.1 until 17.0.7, the FreePBX Music on Hold module permits dangerous command-line options for /usr/bin/mpg123 and other allowed players in validateCustomConfiguration in Music.class.php. An authenticated administrator can use options that write files, ope...

CVE-2026-73665 FreePBX UCP: Unauthenticated remote code execution via socket.io namespace auth bypass and AMI action injection

FreePBX is an open source IP PBX. Prior to 17.0.9, the UCP Node server on ports 8001 and 8003 uses io.usecheckAuth in node/lib/server.js, but Socket.IO version 4 applies that middleware only to the default namespace. An unauthenticated client can connect to custom namespaces that do not...

CVE-2026-73662

CVE-2026-73662 affects FreePBX Music on Hold module (versions 17.0.1–17.0.7). The vulnerability arises from validateCustomConfiguration() in Music.class.php allowing dangerous command-line options to mpg123 and other allowed players, enabling an authenticated administrator to write files, open co...

CVE-2026-73662 Authenticated FreePBX Music RCE via mpg123 and Asterisk Call Files

FreePBX is an open source IP PBX. From 17.0.1 until 17.0.7, the FreePBX Music on Hold module permits dangerous command-line options for /usr/bin/mpg123 and other allowed players in validateCustomConfiguration in Music.class.php. An authenticated administrator can use options that write files, ope...

EUVD-2026-58485

FreePBX is an open source IP PBX. From 17.0.1 until 17.0.7, the FreePBX Music on Hold module permits dangerous command-line options for /usr/bin/mpg123 and other allowed players in validateCustomConfiguration in Music.class.php. An authenticated administrator can use options that write files, ope...

CVE-2026-73662 Authenticated FreePBX Music RCE via mpg123 and Asterisk Call Files

FreePBX is an open source IP PBX. From 17.0.1 until 17.0.7, the FreePBX Music on Hold module permits dangerous command-line options for /usr/bin/mpg123 and other allowed players in validateCustomConfiguration in Music.class.php. An authenticated administrator can use options that write files, ope...

CVE-2026-73660 FreePBX: Authenticated TTS AGI Command Injection Through TTS Name

FreePBX is an open source IP PBX. Prior to 16.0.6 and 17.0.5.4, the FreePBX Text-To-Speech module allows an authenticated administrator to save a TTS destination name that is HTML-encoded for storage, decoded during dialplan generation, passed as an AGI argument, and used to build filenames insid...