Skype 0 Day Exploitation Presentation - HITB Malaysia 2011

Document Title: =============== Skype 0 Day Exploitation Presentation - HITB Malaysia 2011 References: =========== Presentation: https://www.vulnerability-lab.com/resources/documents/294.pdf Documentation: https://www.vulnerability-lab.com/getcontent.php?id=293 Speaker:...

BackBox Linux 2 released

BackBox Linux 2 released The BackBox team is proud to announce the release of BackBox. Linux 2.BackBox 2 features the following upstream components: Ubuntu 11.04, Linux Kernel 2.6.38 and Xfce 4.8. BackBox is an Ubuntu-based distribution developed to perform penetration tests and security...

Hackers Push Sipvicious VoIP Tools In Malicious Attacks

Researchers at NSS Labs claim that they’ve spotted attacks that use Sipvicious, a common auditing tool for Voice over IP VoIP networks as part of malicious attacks aimed at taking control of vulnerable VoIP servers. The attacks are apparently aimed at taking control of VoIP servers to place...

Skype多个字段多个HTML注入漏洞

Bugtraq ID: 49194 Skype是一款流行的P2P VoIP软件，可提供高质量的语音通讯服务。 Skype不正确过滤下面用户信息条目中的输入和输出： - home - office - mobile 攻击者可以进行跨站脚本攻击，可能获得敏感信息或劫持用户会话。 Skype Technologies Skype 4.2 169 Skype Technologies Skype 4.2 155 Skype Technologies Skype 4.2 152 Skype Technologies Skype 4.1 .179 Skype Technologies Skype 4...

Moshi Moshi : VoIP bot written in Python

Moshi Moshi : VoIP bot written in Python Moshi Moshi is a VoIP Bot written in Python that uses SIP as VoIP Protocol, Text-to-speech engines for Output, and DTMF Tones for Input. It is part of a talk "Sounds Like Botnet " given at DEF CON 19 and BSidesLV 2011 on VoIP Botnets by Itzik Kotler and...

Moshi Moshi : VoIP bot written in Python

Moshi Moshi : VoIP bot written in Python Moshi Moshi is a VoIP Bot written in Python that uses SIP as VoIP Protocol, Text-to-speech engines for Output, and DTMF Tones for Input. It is part of a talk "Sounds Like Botnet" given at DEF CON 19 and BSidesLV 2011 on VoIP Botnets by Itzik Kotler and...

BlackBuntu V0.3 Released

BlackBuntu V0.3 Released For Blackbuntu 0.3 we are supporting both x86 and x8664 architectures.Security and Penetration Testing tools available in Blackbuntu : Information Gathering Network Mapping Vulnerability Identification Penetration Privilege Escalation Maintaining Access Radio Network...

Ventrilo v3.0.5 v3.0.4 - Stack Buffer Overflow Vulnerability

Document Title: =============== Ventrilo v3.0.5 v3.0.4 - Stack Buffer Overflow Vulnerability Release Date: ============= 2011-07-22 Vulnerability Laboratory ID VL-ID: ==================================== 98 Product & Service Introduction: =============================== Ventrilo 3.0.0 is the next...

Ventrilo v3.0.5 v3.0.4 - Stack Buffer Overflow Vulnerability

Document Title: =============== Ventrilo v3.0.5 v3.0.4 - Stack Buffer Overflow Vulnerability Release Date: ============= 2011-07-22 Vulnerability Laboratory ID VL-ID: ==================================== 98 Product & Service Introduction: =============================== Ventrilo 3.0.0 is the next...

Manageengine Opmanager v8.8 - SQL Injection Vulnerability

Document Title: =============== Manageengine Opmanager v8.8 - SQL Injection Vulnerability Release Date: ============= 2011-07-19 Vulnerability Laboratory ID VL-ID: ==================================== 200 Product & Service Introduction: =============================== Network performance...

Manageengine Opmanager v8.8 - SQL Injection Vulnerability

Document Title: =============== Manageengine Opmanager v8.8 - SQL Injection Vulnerability Release Date: ============= 2011-07-19 Vulnerability Laboratory ID VL-ID: ==================================== 200 Product & Service Introduction: =============================== Network performance...

[SECURITY] Fedora 14 Update: asterisk-1.6.2.19-1.fc14

Asterisk is a complete PBX in software. It runs on Linux and provides all of the features you would expect from a PBX and more. Asterisk does voice over IP in three protocols, and can interoperate with almost all standards-based telephony equipment using relatively inexpensive hardware...

Portech MV-372 VoIP Gateway - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/48560/info The Portech MV-372 VoIP Gateway is prone to multiple security vulnerabilities. An attacker may leverage these issues to obtain potentially sensitive information, cause vulnerable devices to crash resulting in a denial-of-service condition, or...

Portech MV-372 VoIP Gateway - Multiple Vulnerabilities

Portech MV-372 VoIP Gateway - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/48560/info The Portech MV-372 VoIP Gateway is prone to multiple security vulnerabilities. An attacker may leverage these issues to obtain potentially sensitive information, cause vulnerable devices to...

Portech MV-372 Denial Of Service / Bypass

Portech MV-372 Mobile VoIP Multiple Vulnerabilities 1. Description Multiple vulnerabilities have been found in Portech MV-372 Mobile VoIP Gateway which allows an attacker to compromise the device and/or initiate a denial of service attack against it’s telnet service. The ’Device details’ section...

Nmap NSE net: iax2-version

Detects the UDP IAX2 service. The script sends an Inter-Asterisk eXchange IAX Revision 2 Control Frame POKE request and checks for a proper response. This protocol is used to enable VoIP connections between servers as well as client-server communication. SPDX-FileCopyrightText: 2011 Greenbone AG...

Nmap NSE net: iax2-version

Detects the UDP IAX2 service. The script sends an Inter-Asterisk eXchange IAX Revision 2 Control Frame POKE request and checks for a proper response. This protocol is used to enable VoIP connections between servers as well as client-server communication. OpenVAS Vulnerability Test $Id:...

Fedora Update for asterisk FEDORA-2011-6208

Check for the Version of asterisk OpenVAS Vulnerability Test Fedora Update for asterisk FEDORA-2011-6208 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Skype Technologies Skype (Mac OS X) 5未明远程代码执行漏洞

Bugtraq ID: 47747 Skype是一款流行的P2P VoIP软件，可提供高质量的语音通讯服务。 Mac OS X平台上运行的Skype存在一个安全漏洞，允许攻击者只发送一条消息就完全控制目标机器。目前没有详细漏洞细节提供。 Skype Technologies Skype Mac OS X 5 厂商解决方案 －－－－ Skype Technologies Skype Mac OS X 5.1.0.922已经修复此漏洞，建议用户下载使用： http://www.skype.com/...

sip-brute NSE Script

Performs brute force password auditing against Session Initiation Protocol SIP accounts. This protocol is most commonly associated with VoIP sessions. Script Arguments sip.timeout See the documentation for the sip library. creds.service, creds.global See the documentation for the creds library...