VideoJak v2.0 - IP Video security assessment tool
VideoJak is an IP Video security assessment tool that can simulate a proof of concept video interception or replay test against a targeted, user-selected video session.
This tool is designed in consideration of todays UC infrastructure implementions in which QoS requirements dictate the separation of data and VoIP/Video into discrete networks or VLANs.
VideoJak is a proof of concept security assessment tool that can be used to test video applications.
VideoJak feature list:
- VLAN Discovery (CDP) and VLAN Hop
- Call pattern tracking for SIP and SCCP signaling protocols
- Audio codec (G.711u, G.722) and Video codec (H.263, H.264) support
- Creates custom payload from H.263/H.264 packet capture
- Mitm functions and host management
- Allows user to select ongoing video call from a menu
- Allows user to select a targeted IP Phone or camera for DoS within the video session
- Enables the user to send the attack during an active, ongoing video call
- IP Video Replay attack (New)
- Media Blackhole attack (New)
VideoJak is the first of its kind security tool that analyzes video codec standards such as H.264.; works by first capturing the RTP port used in a video conversation or stream. Next, VideoJak analyzes the RTP packets, collecting the RTP sequence numbers and timestamp values used between the video endpoints. Then it creates a custom video payload by changing the sequence numbers and timestamp values used in the original RTP packets between the two video endpoints. After the user selects a targeted video device to attack in an ongoing video session, VideoJak delivers the payload over the learned RTP port against the target.
This attack results in one of several new features:
- Video Replay of a previous session against the target
- Playing of a random AVI file against the target
- Severely degraded audio and video quality (DoS)
Future versions of the tool will support more exciting features.