Any one have any experience in testing ISDN based VC systems?

What approach did you take, tools used? How did you approach fuzzing the protocol?

What resources did you read up on prior to testing?

  • I also have some video conference systems which I would love to do some testing on. However these systems are not ISDN based, but uses xDSL/Fiber. Is there any difference you think?
    – Chris Dale
    Dec 21, 2010 at 8:16

2 Answers 2


I have had limited exposure to this - but the main attack routes I have found successful in Video and VOIP have always been misconfigured H.323 gateways - it can be very difficult to set up H.323 and the associated protocols correctly, as each vendor seems to implement things differently. Symantec had a useful list of 20 rules in this paper - well worth having a look.


More important than fuzzing the implementation, is wether the conversation itself is secure. Most VOIP implementations don't encrypt the conversation. Capture a call session with tcpdump or wireshark and run the capture through Cain & Able to see if you can extract an audio stream.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.