Web Hack List

Collected research

Total surveillance made easy with VoIP phone

Total surveillance made easy with VoIP phones

.mario takes apart the Snom 32x VoIP phone's web interface: CSRF places calls, a persistent XSS in the address book (the number field is unencoded) runs a worm through XHR, call logs are stealable, and the killer step is silently dialling the attacker so the room is bugged with no ring tone, at the victim's expense. No CSRF tokens anywhere, default password 0000.

Record

Document
Total surveillance made easy with VoIP phones
Researcher
.mario
Published by
gnucitizen.org
Topic
Other

In the archive

Tags

This page is the archive's own catalogue record. The research is the work of .mario, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .