astDoS

astDoS Tool to exploit CVE-2018-7284 and CVE-2018-19278 Usage This tool is used as a command. astDoS.py -h -a 1,2 -sA SERVERIP -sP SERVERPORT -u USER -p PASSWD -sub SUBUSER -dA DNSIP -dP DNSPORT -v VERSION DoS attack against Astersisk, CVE-2018-7284 and CVE-2018-19278 optional arguments: -h, --he...

email-prediction-asterisks

ASTERISKS & OBELIX Email prediction asterisks is a script that allows you to identify the emails hidden behind asterisks. It is a perfect application for osint analysts and security forces. It allows to intelligently predict, using Intelx leaks, which emails are related to the person we are looki...

bluebox

Bluebox work in progress A collection of exploits for different VoIP products. Thanks to the Go Exploit Framework. If you ended up here looking for a VoIP pentesting solution, check out Sippts sippts-gui in Kali or SIPVicious. This project is more focused on the exploitation phase. Install git...

Issabel Framework - Hard-Coded PBX API JWT Key

Issabel Framework before commit b97dbaf uses a shared HS256 key for PBX API bearer tokens. This template uses the read-only AMI ExtensionState action to check whether the PBX API accepts a short-lived token signed with either the vulnerable upstream-source key or the key in the 5.0.0-2 RPM, after...

asterisk

The AsteriskR Open Source PBX By Mark Spencer and the Asterisk.org developer community. Copyright C 2001-2025 Sangoma Technologies Corporation and other copyright holders. SECURITY It is imperative that you read and fully understand the contents of the security information document before you...

sipcheck

SIPCheck v.3.0 Introduction SIPCheck is a tool that watch the authentication of users of Asterisk and bans automatically if some user or bot try to register o make calls using wrong passwords. Unlike Fail2Ban, SIPCheck manage, not just the attacker, also the clients that you have trust so if you...

htb-machine-ringdown

htb-machine-ringdown Detailed design & exploitation writeup for Ringdown—an original Debian/Asterisk vulnerable machine featuring CVE-2024-42365 AMI, PJSIP pre-hash cracking, and Fail2ban POSIX ACL privilege escalation...

Issabel Authenticated - Remote Code Execution

A vulnerability was found in Issabel PBX 4.0.0. It has been rated as critical. This issue affects some unknown processing of the file /index.php?menu=asteriskcli of the component Asterisk-Cli. The manipulation of the argument Command leads to os command injection. The attack may be initiated...

BC-WHY-NOT-LEARN-NEW-STUFF-

BC-WHY-NOT-LEARN-NEW-STUFF- HACKING SIP/PJSIP crash remote asterisk instances : https://github.com/asterisk/asterisk/security/advisories/GHSA-v428-g3cw-7hv9...

FreePBX >= 17.0.2.36 && < 17.0.3 - Authenticated Command Injection

FreePBX Endpoint Manager 17.0.2.36 to = 17.0.2.36 && 17.0.3 - Authenticated Command Injection author: th3y severity: critical description: | FreePBX Endpoint Manager 17.0.2.36 to 17.0.3 contains a command injection caused by improper sanitization in filestore module's testconnection checksshconne...

CVE-2026-57191

A flaw was found in Asterisk. An unbounded string parsing vulnerability in the respjsippubsub module allows an unauthenticated remote attacker to trigger a stack-based buffer overflow by sending a specially crafted Message Waiting Indication MWI NOTIFY packet. Successful exploitation leads to a...

CVE-2026-57199

A flaw was found in Asterisk. An attacker can trigger a Denial of Service DoS or memory corruption by supplying crafted Short Message Service SMS data to an affected system configured with the SMS dialplan application. This issue occurs because incoming message lengths are copied into fixed...

CVE-2026-57203

A flaw was found in Asterisk. The astloggrabber utility executes a script directly from the shared, world-writable temporary directory /tmp. A local attacker with shell access can place a malicious script in this location to achieve privilege escalation and execute arbitrary code when an...

CVE-2026-57194

A flaw was found in Asterisk. An out-of-bounds write vulnerability in the chanunistim channel driver allows a remote attacker to cause a Denial of Service DoS by crashing the Asterisk service. By sending a specially crafted network request to an exposed chanunistim port, an attacker can overflow ...

CVE-2026-57196

A flaw was found in Asterisk. When phone provisioning resphoneprov is enabled, reflected cross-site scripting in HTTP error pages allows an unauthenticated remote attacker to steal an authorized user's Asterisk Manager Interface AMI session cookie and impersonate that user. Exploitation requires...

CVE-2026-57193

A flaw was found in Asterisk's resconfigldap module. An unauthenticated remote attacker can exploit this flaw to cause information disclosure through Lightweight Directory Access Protocol LDAP filter injection. By sending specially crafted Session Initiation Protocol SIP packets with a manipulate...

CVE-2026-57192

A flaw was found in Asterisk. An authenticated remote attacker can cause a Denial of Service DoS via a heap-based buffer overflow in the Codec 2 audio decoder. Due to a sample-count calculation mismatch, an attacker can establish a call and transmit specially crafted audio packets to corrupt memo...

CVE-2026-57187

A flaw was found in Asterisk. This vulnerability allows an authenticated remote attacker to cause a Denial of Service DoS through a heap use-after-free memory error in the PJSIP communication handling component. By sending a Session Initiation Protocol SIP INVITE request over a connection-oriente...

CVE-2026-57188

A flaw was found in Asterisk. This vulnerability allows an authenticated remote attacker to cause a Denial of Service DoS by sending specially crafted network packets to the resxmpp module. When processing Extensible Messaging and Presence Protocol XMPP namespace prefixes from a local or federate...

CVE-2026-57202

A flaw was found in Asterisk. An authenticated remote attacker with read-only permissions to the Asterisk REST Interface ARI can bypass access controls by invoking the setChannelVar function. This vulnerability allows the attacker to execute restricted write operations, such as modifying arbitrar...