VoIP Hopper: New test tool

From: Jason Ostrom (justiceguy@pobox.com)
Date: Mon Sep 10 2007 - 13:46:11 EDT


http://voiphopper.sourceforge.net/

WHAT IS VOIP HOPPER?

VoIP Hopper is a GPLv3 licensed security tool, written in C, that rapidly
runs a VLAN Hop into the Voice VLAN on specific Ethernet switches. VoIP
Hopper does this by mimicking the behavior of an IP Phone. It first
dissects either IEEE 802.3 or Ethernet II for Cisco Discovery Protocol
(CDP) packets. If CDP is enabled on the switch port and the Voice VLAN
feature is enabled, it will determine the Voice VLAN ID (VVID). This will
allow the tool to create a new Ethernet interface on the PC that tags the
802.1q VLAN header in the Ethernet packet. After VoIP Hopper has created
the new Ethernet device, it will send a DHCP client request.

WHY?

VoIP Hopper was written with the specific aim of improving security in
VoIP environments by validating Layer 2 protection controls.

REQUIREMENTS

libpcap, linux, C Compiler.

VoIP Hopper is designed for, and has been tested on, BackTrack linux. It
runs just fine in a default installation of BackTrack. It has also been
tested to compile and run on Fedora 7. It should compile and run on other
versions of UNIX / Linux.

It has been tested to dissect CDP packets on the following Cisco IOS
Ethernet Switch platforms:

1. Catalyst 3550

2. Catalyst 3750

3. Catalyst 6513 with WS-X6148A-GE-45AF module

WHERE CAN I GET IT?

http://voiphopper.sourceforge.net

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:58:06 EDT