Hacking Exposed VoIP: Voice Over IP Security Secrets & Solutions

Submitted by mark on Tue, 06/26/2007 - 14:38
I have been looking for this book for a while after hearing it mentioned by the guys on the BlueBox Podcast and this week was lucky enough to find a copy.

The book is broken up in to five separate parts :-

  • Part 1 - Casing the Establishment covers Footprinting , Scanning and Enumeration.
  • Part 2 - Exploiting the VoIP Network includes chapters on Denial of Service , Network Eavesdropping and Network and Application Interception.
  • Part 3 - Exploiting Specific VoIP Platforms covers Cisco Call Manager , Avaya Communication Manager , Asterisk and Softphone s.
  • Part 4 - VoIP Session and Application Hacking covers Fuzzing VoIP , Disruption of Service and VoIP Signaling / Media Manipulation.
  • Part 5 - Social Threats like Spam / Spit and VoIP Phishing.

I`ve only just started reading it but so far it looks well thought out , its good to see they cover the prevalent Asterisk PABX as well as commercial offerings.

The book also has a companion website at www.hackingvoip.com where you can read more details and download the tools they used throughout the book.

Comments