16
Busy Tone Vulnerable PBX Giovanni Cruz Security Researcher @fixxx3r

Busy Tone Vulnerable PBX

Embed Size (px)

DESCRIPTION

Slides del lanzamiento de Busy Tone Vulnerable PBX en exclusiva durante el DragonJARtv episodio 3 www.dragonjar.org/dragonjar-tv-episodio-3.xhtml

Citation preview

Page 1: Busy Tone Vulnerable PBX

Busy Tone Vulnerable PBX

Giovanni CruzSecurity Researcher@fixxx3r

Page 2: Busy Tone Vulnerable PBX

Busy Tone, es un proyecto de I+D en seguridad en comunicaciones unificadas y comunicaciones móviles.

Page 4: Busy Tone Vulnerable PBX

Presentamos...BTVPBX ??

Page 5: Busy Tone Vulnerable PBX

Porque ??

Page 6: Busy Tone Vulnerable PBX

Qué Módulos ? ● IM● VoIP SIP● vTiger CRM● IPv4 / IPv6● Fax● ...● ...● ...

Page 7: Busy Tone Vulnerable PBX

IPv6

Page 8: Busy Tone Vulnerable PBX

THC - IPv6

Page 9: Busy Tone Vulnerable PBX

Nessus ??? :)

Page 10: Busy Tone Vulnerable PBX

Enumeración...

Page 11: Busy Tone Vulnerable PBX
Page 12: Busy Tone Vulnerable PBX
Page 13: Busy Tone Vulnerable PBX
Page 14: Busy Tone Vulnerable PBX

Code Execution ???

Page 15: Busy Tone Vulnerable PBX
Page 16: Busy Tone Vulnerable PBX

GRACIAS