Signaling Manipulation

• Tools:

• • sip-redirectrtp + rtpproxy
  • • http://skora.net/voip/attacks/
  • Registration manipulation tools (hijacker, eraser, adder)
  • • http://www.hackingexposedvoip.com/tools/reghijacker.tar.gz
    • http://www.hackingexposedvoip.com/tools/eraseregistrations.tar.gz
    • http://www.hackingexposedvoip.com/tools/add_registrations.tar.gz

• Mitigation:

• • Encrypt the signaling channel
  • Fix protocols to authenticate ALL signaling messages related to a call