| the former birb app | https://twitter.com/vandorb12 |
| website thing | https://vandorb12.com |
| Omlette | du fromage |
| DMs | Open (don't be a dick) |
Web application security has DVWA and WebGoat. VoIP and WebRTC security hasn't had anything like it ... until now.
We built DVRTC (Damn Vulnerable Real-Time Communications): a hands-on lab for learning VoIP/WebRTC attack techniques. Full dockerized stack with Kamailio, Asterisk, rtpengine, and coturn — each configured to exhibit specific vulnerable behaviors.
7 exercises covering SIP extension enumeration, RTP bleed, SIP digest leaks, credential cracking (online and offline), TURN relay abuse, and traffic analysis. There's a live instance at pbx1.dvrtc.net you can test against right now.
https://www.enablesecurity.com/blog/introducing-dvrtc-damn-vulnerable-real-time-communications/
GitHub: https://github.com/EnableSecurity/DVRTC/
#infosec #webrtc #voipsecurity #sipsecurity #penetrationtesting #training #TURN
The problem with Meta’s business model is that they’re beholden to shareholders, not their community. We are not publicly traded, we are publicly FUNDED.
Mastodon has no incentive to keep you addicted. Our incentive is to make you happy, and help you build friendships, because it’s the right thing to do for you, and it's the right thing to do for humanity.
If you believe in a better way forward for our digital social spaces, please help support us by donating: https://joinmastodon.org/sponsors#donate
(2/2)
Sean Casten
Enable Security
AI6YR Ben
Felix Hlatky
Botgov
it's pronounced 'yagoda'
evacide
candle 🕔
Fritz Adalis