Christiaan008's video: OHM 2013: Security of VoIP phones

For more information visit: http://bit.ly/OHM13_web To download the video visit: http://bit.ly/OHM13_down Playlist OHM 2013: http://bit.ly/OHM13_pl Speakers: mourn | edcv VoIP phones are deployed in a large number of companies. It has already been showed how to use a phone as a spying device (Hacking Cisco Phones [29C3] by Cui and Costello). In this presentation we will focus on other brands of VoIP phones and show how to use reverse engineering in order to be able to log in some phone RTOS and generate rogue updates for permanent "modifications" as well as understanding the phone internals in order to use it as a remote spying device. This presentation will focus on Broadcom based VoIP phones, running vxWorks as their Real-Time OS. Presentation is divided in 3 party: - Reverse engineering of a vxWorks image - Finding flaws in vxWorks and Broadcom part of the code. - Reversing the authentication method for FW updates in the Original Design Manufacturer part of the code.