I have shared my Cisco based hosted VoIP networks security research at Blackhat USA 2014 and DEF CON 22 last week. This research contains several different attack vectors, published vulnerabilities, unpatched vulnerabilities, Skinny protocol attacks, new SIP protocol attacks, VOSS IP phone XML services attacks and new version of Viproy VoIP penetration testing kit. I’ll prepare a few detailed blog entries for them, before this, you can review the slide set and the recap of the live demos of the presentation.
VoIP Wars: Attack of the Cisco Phones (Presentation)