Collected research
Total surveillance made easy with VoIP phone
Total surveillance made easy with VoIP phones
.mario takes apart the Snom 32x VoIP phone's web interface: CSRF places calls, a persistent XSS in the address book (the number field is unencoded) runs a worm through XHR, call logs are stealable, and the killer step is silently dialling the attacker so the room is bugged with no ring tone, at the victim's expense. No CSRF tokens anywhere, default password 0000.
Record
- Document
- Total surveillance made easy with VoIP phones
- Researcher
- .mario
- Published by
- gnucitizen.org
- Topic
- Other
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of .mario, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .