eStara SoftPhone 3.0.1.46 - SIP Remote Buffer Overflow (1)

/ eStara Softphone buffer overflow exploit tested on : eStara Softphone 3.0.1.14 |||||| eStara Softphone 3.0.1.46 Vender website : http://www.estara.com/softphone/softph.exe Run this application, then use nc to send builded packet : nc -u 127.0.0.1 5060 include unsigned char invite = 0x49, 0x4E,...

eStara SoftPhone 3.0.1.46 - SIP Remote Buffer Overflow (2)

!/usr/bin/perl -s damn-hippie.pl by kokanin google estara, it shows sip stuff and a hippie Remote "estara softphone" exploit, executable version info = 3.0.1.2 kokanin did the research, metasploit.com did the encoded bindshell on tcp/5060 Lets face it, most users wont know the difference between...