The vulnerability of the VoIP gateway software Telecom MG, related to improper code generation, allows a hacker to execute arbitrary code.

The vulnerability of the VoIP gateway software of Telecom MG is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the VoIP gateway software Telecom MG, related to improper code generation, allows a hacker to execute arbitrary code.

The vulnerability of the VoIP gateway software of Telecom MG is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the VoIP gateway software Telecom MG, related to improper code generation, allows a hacker to execute arbitrary code.

The vulnerability of the VoIP gateway software of Telecom MG is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the VoIP gateway software Telecom MG, related to improper code generation, allows a hacker to execute arbitrary code.

The vulnerability of the VoIP gateway software of Telecom MG is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

WireBug

WireBug WireBug is a tool set for Voice-over-IP penetration testing. It is designed as a wizard which makes it easy to use. The tools are build for single using too, so every tool is its own python or bash program. Installation Read the Installation Guide in the wiki. Tools FullBridge: This is a...

vsaudit

vsaudit This is an opensource tool to perform attacks to general voip services It allows to scans the whole network or single host to do the gathering phase, then it is able to search for most known vulnerabilities on the founds alive hosts and try to exploit them. Install dependencies To start...

viproy-voipkit

Discontinued Viproy was a PoC VoIP security assessment tool which had several modules and exploits to maintain. However, it was developed as a modules set to Metasploit Framework. As Metasploit Framework had significant updates, Viproy's current modules won't be able to work unless you use legacy...

bluebox

Bluebox trabajo en progreso Una colección de exploits para diferentes productos VoIP. Gracias al Go Exploit Framework. Si terminaste aquí buscando una solución de pentesting VoIP, echa un vistazo a Sippts sippts-gui en Kali o SIPVicious. Este proyecto está más enfocado en la fase de explotación...

sippts

¿Qué es Sippts? Sippts es un conjunto de herramientas para auditar servidores y dispositivos VoIP que utilizan el protocolo SIP. Sippts está programado en Python y nos permite comprobar la seguridad de un servidor VoIP utilizando el protocolo SIP. ¿Es gratuito? Sí. Puedes usarlo, modificarlo y...

asterisk

La PBX de código abierto AsteriskR root@kitploit: By Mark Spencer and the Asterisk.org developer community. Copyright C 2001-2025 Sangoma Technologies Corporation and other copyright holders. SEGURIDAD Es imprescindible que lea y comprenda completamente el contenido del documento de información d...

phoneinfoga

Framework de recopilación de información para números de teléfono Documentación • Documentación de la API • Artículo de blog relacionado Acerca de PhoneInfoga es una de las herramientas más avanzadas para escanear números de teléfono internacionales. Permite primero recopilar información básica...

viproy-voipkit

已停止维护 Viproy 是一个 PoC 级 VoIP 安全评估工具，曾包含多个模块和漏洞利用代码需要维护。然而，它是作为 Metasploit 框架的模块集开发的。随着 Metasploit 框架的重大更新，除非您使用旧版 Kali Linux 和 Metasploit 框架，否则 Viproy 的现有模块将无法正常工作。我很久以前就停止了该项目，因为过去 5 年我停止从事 VoIP 和 UC 项目的工作。 如果您仍然需要这些模块，"infosecconsultant" 在 Issues...

Auerswald COMpact 5500R 7.8A and 8.0B Devices Backdoor

Auerswald COMpact 5500R 7.8A and 8.0B devices contain an unauthenticated endpoint "https://192.168.1.2/aboutstate", enabling the bad actor to gain backdoor access to a web interface that allows for resetting the administrator password. id: CVE-2021-40859 info: name: Auerswald COMpact 5500R 7.8A a...

SmartNode SN200 Analog Telephone Adapter (ATA) & VoIP Gateway - Command Injection

The SmartNode SN200 Analog Telephone Adapter ATA & VoIP Gateway is vulnerable to command injection. id: CVE-2023-41109 info: name: SmartNode SN200 Analog Telephone Adapter ATA & VoIP Gateway - Command Injection author: princechaddha severity: critical description: | The SmartNode SN200 Analog...

gxv3175-remote-code-exec

Ejecución remota de código para el teléfono VoIP Grandstream GXV3175. === INSTALACIÓN === copia los archivos a la misma estructura de directorios bajo el directorio de nivel superior de metasploit === USO === en msfconsole use exploits/linux/http/grandstreamgxv3175cmdexec set RHOST 192.168.0.1 se...

yealink_tools

Ingeniería inversa del firmware de Yealink Este repositorio contiene algunas utilidades de script utilizadas durante la ingeniería inversa del firmware de los teléfonos VoIP de Yealink. Para obtener más información sobre esta investigación, lea la entrada del blog...

CVE-2021-40859

CVE-2021-40859 Backdoors secretos del sistema VoIP Auerswald -PoC Uso de la herramienta: CVE-2021-40859.py http://target:port...

Room-Walkthrough-Billing

🧠 房间通关：Billing 作者： Aditya Bhatt | 开源贡献者 📦 概览 在本攻略中，我们将全力攻破 Billing 房间 ，展示一个脆弱的 MagnusBilling 实例、一个诱人的未授权 RCE（CVE-2023-30258）以及一个喊着“提权我吧”的 fail2ban sudo 配置错误。 这个房间完美融合了自动化利用与创造性权限提升，让我们亲手体验隐藏在 VoIP 计费软件中的真实漏洞。 我们将从初始侦察 一路走到Root Shell ，附带完整 PoC、评论和 🗿 风格。 🌐 第一步：枚举阶段 🏁 初始着陆 部署机器后，首先映入眼帘的就像一个配置错误的防火墙：...

AudioServer-Voip-Recorder

Objetivo: Demostrar la captura de flujos VoIP enganchando el audioserver de Android específicamente libaudioflinger.so y grabando los buffers PCM de subida micrófono y bajada altavoz cuando el sistema está en modo communication. Diseño del Proyecto y Metodología Arquitectura: App de Control Andro...

CVE-2026-11498

A vulnerability was found in Tenda HG7HG9 and HG10 300001138enxpon. Affected by this issue is the function aspvoipOtherSet of the file /boaform/voipotherset of the component Web Management Interface. Performing a manipulation of the argument funckeytransfer results in stack-based buffer overflow...