Main:
Cain isn't just a password recovery tool, there's a much more interesting feature that isn't so commonly known.
VoIP and Cain
You've probably all heard of Cain and Abel by now, the Password Recovery program we all used back in High School to get passwords.
Cain has presented itself as a tool with capabilities far beyond just routine password cracking. With the advent of VoIP and the latest edition of Cain we can find some rather interesting new features.
First, find a wireless network around with a VoIP phone. It's suggested that you use YOUR OWN VoIP Phone, or someone else's that you have permission from. </legality>
Fire up Windows and open up Cain. When you're connected to a network. Activate the Sniffer and go to the Sniffer tab and click the plus sign, scan all hosts in the Subnet.
Look for any that match a VoIP phone, such as Cisco device or otherwise. If you can't find one then make sure that there is one in your house or a friends.
If you know there is a phone then you can safely just do the following to all devices on the network.
On the bottom find the Hazard sign, the APR tab. Click the Plus sign and select a device and the default gateway (Normally 192.168.1.1)
Once you have all the devices set up click the same sign at the top to start poisoning. To those new with Cain this is called a Man in the Middle Attack. You trick another computer into sending the information to you by manipulating the ARP tables (Cain does automatically) and using your computer as a gateway for all their sent information.
Now the interesting part of Cain is the VoIP tab. Have your friend call you and chat for a few minutes, or you call someone. Hang up and check this tab and Cain will have recorded the conversation and even does the favor of putting it in a .wav music file for you so you don't have to convert packets.
You can only imagine the possibilities off of this. I won't name off all the possible things you can do with recorded sessions, but I'm sure that anyone that has been hacking before should find loads of things to do.
Cain has many features, don't just think of it as a password recovery or newbie tool, it can be extremely useful if used correctly.
In the next Article we will discuss manipulating and splicing live calls with prerecorded audio or otherwise using SIP_rogue.
You've probably all heard of Cain and Abel by now, the Password Recovery program we all used back in High School to get passwords.
Cain has presented itself as a tool with capabilities far beyond just routine password cracking. With the advent of VoIP and the latest edition of Cain we can find some rather interesting new features.
First, find a wireless network around with a VoIP phone. It's suggested that you use YOUR OWN VoIP Phone, or someone else's that you have permission from. </legality>
Fire up Windows and open up Cain. When you're connected to a network. Activate the Sniffer and go to the Sniffer tab and click the plus sign, scan all hosts in the Subnet.
Look for any that match a VoIP phone, such as Cisco device or otherwise. If you can't find one then make sure that there is one in your house or a friends.
If you know there is a phone then you can safely just do the following to all devices on the network.
On the bottom find the Hazard sign, the APR tab. Click the Plus sign and select a device and the default gateway (Normally 192.168.1.1)
Once you have all the devices set up click the same sign at the top to start poisoning. To those new with Cain this is called a Man in the Middle Attack. You trick another computer into sending the information to you by manipulating the ARP tables (Cain does automatically) and using your computer as a gateway for all their sent information.
Now the interesting part of Cain is the VoIP tab. Have your friend call you and chat for a few minutes, or you call someone. Hang up and check this tab and Cain will have recorded the conversation and even does the favor of putting it in a .wav music file for you so you don't have to convert packets.
You can only imagine the possibilities off of this. I won't name off all the possible things you can do with recorded sessions, but I'm sure that anyone that has been hacking before should find loads of things to do.
Cain has many features, don't just think of it as a password recovery or newbie tool, it can be extremely useful if used correctly.
In the next Article we will discuss manipulating and splicing live calls with prerecorded audio or otherwise using SIP_rogue.
Posted by 
