Hackers Chronicle - Online Cyber Security News: Linux

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhS3IdKYrF_dEEwkz2LS6MVLA0DKsPUxQb2eRyk5PbJ2udQ-q21HZObtrZODT4zCninDDBKzXHq3LKpOKjdVtqwpP0tRjSxIBBrBnAg8a0TyYNgF3hjoVNGDUu9CgvklSCgIJY5ltxHqyA/s1600/voip-hack.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Caller ID Spoofing with Asterisk" border="0" height="307" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhS3IdKYrF_dEEwkz2LS6MVLA0DKsPUxQb2eRyk5PbJ2udQ-q21HZObtrZODT4zCninDDBKzXHq3LKpOKjdVtqwpP0tRjSxIBBrBnAg8a0TyYNgF3hjoVNGDUu9CgvklSCgIJY5ltxHqyA/s1600/voip-hack.jpg" title="Caller ID Spoofing with Asterisk" width="320" /></a></div>
<br />
<div>
<span class="Apple-style-span"></span><br />
<h3>
<span class="Apple-style-span">Caller ID Spoofing w/ Asterisk</span></h3>
<div class="region region-content">
<div class="block block-system" id="block-system-main" style="clear: both; margin: 0px 0px 15px; position: relative;">
<div class="block-inner clearfix" style="background-image: none; margin-left: 10px; margin-right: 10px;">
<div class="block-content" style="padding: 0px;">
<div class="article-content" style="clear: both; line-height: 1.5em; margin: 1em 0px 0.5em;">
<div class="field field-name-body field-type-text-with-summary field-label-hidden">
<div class="field-item even">
<div class="chili-highlighter highlight-processed">
<div style="margin-bottom: 0.8em; margin-top: 0.4em; padding: 0px;">
<span class="Apple-style-span">Caller ID is often thought of as the ultimate way to see who is calling you. People use it to screen calls all the time. When you're able to spoof that number to whatever you would like you can easily defeat human nature of screening out calls from people they don't want to talk to. Besides being able to get in touch with those ignoring your calls it can be an attackers best friend. He or she can simply spoof your bank's number and social engineer you into giving out valuable information. The way people rely on caller ID it is unlikely the victim will realize what has happened until it is far too late.</span></div>
<h3>
Hardware Used:</h3>
<ul style="list-style-type: disc; margin: 0px; padding: 0px 0px 0px 1em;">
<li style="margin: 0px; padding: 0px;"><span class="Apple-style-span">Intel P4 box with 1GB of RAM</span></li>
<span class="Apple-style-span"> </span></ul>
<h3>
Software Used:</h3>
<ul style="list-style-type: disc; margin: 0px; padding: 0px 0px 0px 1em;">
<li style="margin: 0px; padding: 0px;"><span class="Apple-style-span">  Ubuntu 7.10 Server</span></li>
<span class="Apple-style-span">
<li style="margin: 0px; padding: 0px;">Asterisk</li>
<li style="margin: 0px; padding: 0px;">  VMWare Workstation</li>
</span></ul>
<h3>
Prerequisites</h3>
<ul style="list-style-type: disc; margin: 0px; padding: 0px 0px 0px 1em;">
<li style="margin: 0px; padding: 0px;"><span class="Apple-style-span">VoIP service from companies like NuFone or VoicePulse which allow you to use your own PBX</span></li>
<span class="Apple-style-span">
<li style="margin: 0px; padding: 0px;">Asterisk installed and able to run</li>
<li style="margin: 0px; padding: 0px;">  Basic Linux knowledge</li>
</span></ul>
<h3>
Table of Contents</h3>
<ol style="list-style-type: decimal; margin: 0px 0px 1.5em 1.667em; padding: 0px;">
<li style="margin: 0px; padding: 0px;"><span class="Apple-style-span"><a href="http://allanfeid.com/content/caller-id-spoofing-w-asterisk#intro" style="color: black; margin: 0px; padding: 0px; text-decoration: none;">Introduction</a></span></li>
<span class="Apple-style-span">
<li style="margin: 0px; padding: 0px;"><a href="http://allanfeid.com/content/caller-id-spoofing-w-asterisk#config" style="color: black; margin: 0px; padding: 0px; text-decoration: none;">Configuring Asterisk</a></li>
<li style="margin: 0px; padding: 0px;"><a href="http://allanfeid.com/content/caller-id-spoofing-w-asterisk#final" style="color: black; margin: 0px; padding: 0px; text-decoration: none;">Final Thoughts</a></li>
</span></ol>
<div style="margin-bottom: 0.8em; margin-top: 0.4em; padding: 0px;">
<span class="Apple-style-span"><a href="https://www.blogger.com/blogger.g?blogID=3385998300716176663" id="intro" name="intro" style="font-weight: bold; margin: 0px; padding: 0px; text-decoration: none;"></a></span></div>
<h3>
Introduction</h3>
<div style="margin-bottom: 0.8em; margin-top: 0.4em; padding: 0px;">
<span class="Apple-style-span">There are 3 main configuration files that need a bit of tweaking to get Asterisk working properly. These are iax.conf, sip.conf, and extensions.conf. The names pretty much tell you what each will be configuring. IAX is Inter-Asterisk Exchange and is the protocol used when connecting two Asterisk servers and is perfect for NAT transversal unlike the nightmare of SIP. SIP is the protocol that software based phones or hardware IP phones use to connect to the Asterisk box and extensions are what process call flow and routing. These configuration files all follow the standard "INI" file type where sections are denoted such as <code style="font: 1em 'Lucida Console',Monaco,'DejaVu Sans Mono',monospace;">[section1]</code> and variables under sections are declared simply with <code style="font: 1em 'Lucida Console',Monaco,'DejaVu Sans Mono',monospace;">var=foo</code>.</span></div>
<div style="margin-bottom: 0.8em; margin-top: 0.4em; padding: 0px;">
<span class="Apple-style-span"><a href="https://www.blogger.com/blogger.g?blogID=3385998300716176663" id="config" name="config" style="font-weight: bold; margin: 0px; padding: 0px; text-decoration: none;"></a></span></div>
<h3>
Configuring Asterisk</h3>
<div style="margin-bottom: 0.8em; margin-top: 0.4em; padding: 0px;">
<span class="Apple-style-span">First thing we'll cover is setting up the connection to your VoIP provider. Most good providers will give you a sample iax configuration file that you can look over for specifics to your service but in most cases simple open up <code style="font: 1em 'Lucida Console',Monaco,'DejaVu Sans Mono',monospace;">/etc/asterisk/iax.conf</code>and add a few lines at the end as follows:</span></div>
<div style="margin-bottom: 0.8em; margin-top: 0.4em; padding: 0px;">
</div>
<div class="content shadow-radial">
[VoicePulse]<br />
type=peer<br />
host=<a href="http://server.example.voicepulse.com/">server.example.voicepulse.com</a><br />
username=SomeuSer<br />
secret=PaSsWorD</div>
<div style="margin-bottom: 0.8em; margin-top: 0.4em; padding: 0px;">
</div>
<div style="margin-bottom: 0.8em; margin-top: 0.4em; padding: 0px;">
<span class="Apple-style-span">The first line there gives this connection a human readable name. The type tells Asterisk what type of connection this will be. Peer lets us know we will be sending calls through this connection. <code style="font: 1em 'Lucida Console',Monaco,'DejaVu Sans Mono',monospace;">Host</code>, <code style="font: 1em 'Lucida Console',Monaco,'DejaVu Sans Mono',monospace;">username</code>, and <code style="font: 1em 'Lucida Console',Monaco,'DejaVu Sans Mono',monospace;">secret</code> are all used to make the connection and authenticate. All of this should be given to you by your provider. As you can see this configuration is very basic and there are tons more options that can be done if this was going to be used in a production environment. The next file we need to edit is<code style="font: 1em 'Lucida Console',Monaco,'DejaVu Sans Mono',monospace;">/etc/asterisk/sip.conf</code>.</span></div>
<div style="margin-bottom: 0.8em; margin-top: 0.4em; padding: 0px;">
</div>
<div class="content shadow-radial">
[sipuser]<br />
type=peer<br />
host=dynamic<br />
username=allan<br />
secret=1234<br />
context=outgoing</div>
<br />
<div style="margin-bottom: 0.8em; margin-top: 0.4em; padding: 0px;">
<span class="Apple-style-span">First line is again used to give the connection a name and <code style="font: 1em 'Lucida Console',Monaco,'DejaVu Sans Mono',monospace;">type</code> lets Asterisk know we can send calls to this connection and also make calls out. Setting <code style="font: 1em 'Lucida Console',Monaco,'DejaVu Sans Mono',monospace;">host</code> to <code style="font: 1em 'Lucida Console',Monaco,'DejaVu Sans Mono',monospace;">dynamic</code> ensures Asterisk keeps track of the IP/Hostname of the connection since it uses a dynamic IP. <code style="font: 1em 'Lucida Console',Monaco,'DejaVu Sans Mono',monospace;">Username</code> and <code style="font: 1em 'Lucida Console',Monaco,'DejaVu Sans Mono',monospace;">secret</code> are the username and password used to make the connection and context is used to simply tell Asterisk which context in the extension configuration to use. This lets Asterisk route the call as needed and be changed for each SIP user if you would like. The last configuration file for Asterisk is located in the same directory and named <code style="font: 1em 'Lucida Console',Monaco,'DejaVu Sans Mono',monospace;">extension.conf</code>. Open it up and add the following to the end:</span></div>
<div style="margin-bottom: 0.8em; margin-top: 0.4em; padding: 0px;">
</div>
<div class="content shadow-radial">
[outgoing]<br />
exten => _1NXXNXXXXXX,1,SetCallerID(2024561111)<br />
exten => _1NXXNXXXXXX,n,Dial(IAX2/VoicePulse/${EXTEN})</div>
<div style="margin-bottom: 0.8em; margin-top: 0.4em; padding: 0px;">
</div>
<div style="margin-bottom: 0.8em; margin-top: 0.4em; padding: 0px;">
<span class="Apple-style-span">Once again the first line is used to give a name to our settings. In this case it is called a context and that is what Asterisk uses to place calls based on your own rules. The next two lines will match any 1 + 10 digit US number. The N's and X's are basically just wild cards N matching any digit greater than 2 and X matching any at all. The 1 tells Asterisk to do that command first and the n is used to say "do this next" is basic terms. <code style="font: 1em 'Lucida Console',Monaco,'DejaVu Sans Mono',monospace;">SetCallerID()</code> is the key to spoofing caller ID. Here you can change the number to whatever you would like but most providers require a 10 digit number while others will let you even set your caller ID to numbers like 911. The next command is <code style="font: 1em 'Lucida Console',Monaco,'DejaVu Sans Mono',monospace;">Dial()</code> which is what we use to send off the call. The arguments used tell Asterisk to use the IAX2 protocol to our VoicePulse connection and to route the call to what we've dialed. <code style="font: 1em 'Lucida Console',Monaco,'DejaVu Sans Mono',monospace;">${EXTEN}</code> is just a global variable used for the number dialed.</span></div>
<div style="margin-bottom: 0.8em; margin-top: 0.4em; padding: 0px;">
<span class="Apple-style-span">Everything should now be setup correctly and ready to use. The only thing left to configure is your softphone or IP phone depending what you are using. This is specific to individual phones and out of the scope of my project but essentially you tell your phone to connect to your Asterisk server. Often times from experience softphones will refer to this as "releam" or "domain" depending what phone you use (I recommend X-Lite or Twinkle). Besides that it will just ask for your username and password which were setup in <code style="font: 1em 'Lucida Console',Monaco,'DejaVu Sans Mono',monospace;">sip.conf</code>.</span></div>
<div style="margin-bottom: 0.8em; margin-top: 0.4em; padding: 0px;">
</div>
<span class="Apple-style-span"><br />
</span> <br />
<center>
<div style="margin-bottom: 0.8em; margin-top: 0.4em; padding: 0px;">
</div>
<div align="center" style="display: block; margin-bottom: 0.8em; margin-top: 0.4em; padding: 0px; text-align: center; width: 820px;">
<span class="Apple-style-span"><b>CID Spoofing In Action</b></span><br />
<span class="Apple-style-span"><img height="299" src="http://allanfeid.com/sites/default/files/cid_white_house.jpg" style="border-width: 0px;" width="500" /></span></div>
</center>
<span class="Apple-style-span">As you can see because of <a href="http://www.voip-info.org/wiki/view/CallerID" style="color: black; font-weight: bold; margin: 0px; padding: 0px; text-decoration: none;" title="Caller ID">CNAM</a> it shows the owner of that number as well as the actual number. Sorry about the image quality I could not take a picture of my phone without it being blurry :( but you get the idea.</span><br />
<br /></div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<br />
<h3>
Final Thoughts</h3>
<div style="margin-bottom: 0.8em; margin-top: 0.4em; padding: 0px;">
<span class="Apple-style-span">Caller ID spoofing is not illegal in anyway. You should however worry about committing fraud as there are tons of laws against that. The real use of caller ID spoofing is to just trick your friends and have some fun. Don't do anything stupid. This is just information I'm trying to spread in order to show people that you can't always trust what your caller ID says.</span></div>
</div>
</div>

Caller ID Spoofing w/ Asterisk Caller ID is often thought of as the ultimate way to see who is calling you. People use it t...

Caller ID Spoofing with Asterisk

Popular

Comments

Archive