EUVD-2018-3547

Malware in sbrugna...

Inside the Hidden World of Elevator Phone Phreaking

Eavesdropping, reprogramming, talking to strangers: Welcome to the harmless and not-so-harmless fun of hacking elevator call boxes...

Cross site request forgery (csrf)

A vulnerability allows a phreaking attack on HCL legacy IVR systems that do not use VoIP. These IVR systems rely on various frequencies of audio signals; based on the frequency, certain commands and functions are processed. Since these frequencies are accepted within a phone call, an attacker can...

CVE-2018-11518

A vulnerability allows a phreaking attack on HCL legacy IVR systems that do not use VoIP. These IVR systems rely on various frequencies of audio signals; based on the frequency, certain commands and functions are processed. Since these frequencies are accepted within a phone call, an attacker can...

CVE-2018-11518

A vulnerability allows a phreaking attack on HCL legacy IVR systems that do not use VoIP. These IVR systems rely on various frequencies of audio signals; based on the frequency, certain commands and functions are processed. Since these frequencies are accepted within a phone call, an attacker can...

CVE-2018-11518

CVE-2018-11518 describes a phreaking attack on HCL legacy IVR systems that do not use VoIP. The vulnerability arises from handling of audio-frequency signals (DTMF) within a phone call, where an attacker can record the tones and trigger a service activation. The issue is a request-forgery : if th...

CVE-2018-11518: Improper Input Validation

A vulnerability allows a phreaking attack on HCL legacy IVR systems that do not use VoIP. These IVR systems rely on various frequencies of audio signals; based on the frequency, certain commands and functions are processed. Since these frequencies are accepted within a phone call, an attacker can...

PT-2018-10634

Name of the Vulnerable Software and Affected Versions HCL legacy IVR systems affected versions not specified Description A phreaking attack can be performed on HCL legacy IVR systems that do not use VoIP, allowing an attacker to record and replay specific audio frequencies to activate services...

How I Got Here: Joe Grand

Dennis Fisher talks with Joe “Kingpin” Grand about his childhood taking apart early PCs and radios, his introduction to the BBS and early phreaking and hacking scene in Boston, his involvement with the L0pht, @stake and now his current life as an engineer running Grand Idea Studios.​ Download:...

Phone Phreaking using Bluebox Demonstrated in India

Phone Phreaking using Bluebox Demonstrated in India Christy Philip Mathew, an Indian Information Security Instructor and Hacker demonstrated Phone Phreaking using Bluebox in his lab. This time we have something really special that would remind us the phone phreaking. Actually Phone Phreaking...