February 2018
Intermediate to advanced
396 pages
9h 38m
English
SIP registration hijacking is a serious VoIP security problem. Previously, we saw that before establishing a SIP session, there is a registration step. Registration can be hijacked by attackers. During a SIP registration hijacking attack, the attacker disables a normal user by a Denial of Service, for example, and simply sends a registration request with his own IP address instead of that users because, in SIP, messages are transferred clearly, so SIP does not ensure the integrity of signaling messages:

If you are a Metasploit enthusiast, you can try many other SIP modules. Open a Metasploit console by typing msfconsole ...
Read now
Unlock full access