Re: VoIP Hopper: New test tool

From: jpecou@gmail.com
Date: Wed Sep 12 2007 - 14:54:59 EDT


('binary' encoding is not supported, stored as-is) OMG this is music to my ears... For the last month I have been testing the Voice VLAN Vulnerability W/CDP in a lab at my job. I figured if you currently have a data vlan configured with Mac Sticky and 802.1x Authentication you might be setting your self back by adopting a voice VLAN that only requires a phone to send a CDP packet to basically "Authenticate or place it on the Voice side" I have been using Yersinia and CDP to spoof CDP packets of what would resemble a Cisco Phone. I noticed that the switch is seeing this traffic and placing me onto the voice VLAN instead of the data side but I could not for the life of me figure out how to communicate with the DHCP server and/or any other service for that matter. I am definately going to check this tool out to see I can finally close this chapter. Thanks!

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:58:06 EDT