{"guid":"8a3e490c-30a5-46a6-ab4f-45ef3b23b1a1","title":"Compromising online accounts by cracking voicemail systems","subtitle":null,"slug":"35c3-9383-compromising_online_accounts_by_cracking_voicemail_systems","link":"https://fahrplan.events.ccc.de/congress/2018/Fahrplan/events/9383.html","description":"Voicemail systems can be compromised by leveraging old weaknesses and top of current technology. The impact goes way beyond having your messages exposed.\n\nVoicemail systems have been with us since the 80s. They played a big role in the earlier hacking scene and re-reading those zines, articles and tutorials paints an interesting picture. Not much has changed. Not in the technology nor in some of the attack vectors. Can we leverage the last 30 years innovations to compromise voicemail systems? And what is the real impact today of pwning these?\n\nIn this talk I will cover voicemail systems, it's security and how we can use oldskool techniques and new ones on top of current technology to compromise them. I will discuss the impact of gaining unauthorized access to voicemail systems and introduce a new tool that automates the process\n\n\u003ca href=\"https://www.martinvigo.com/demo_bruteforcing.mp4\"\u003ehttps://www.martinvigo.com/demo_bruteforcing.mp4\u003c/a\u003e\n\n\u003ca href=\"https://www.martinvigo.com/demo_whatsapp.mp4\"\u003ehttps://www.martinvigo.com/demo_whatsapp.mp4\u003c/a\u003e\n\n\u003ca href=\"https://www.martinvigo.com/demo_paypal.mp4\"\u003ehttps://www.martinvigo.com/demo_paypal.mp4\u003c/a\u003e","original_language":"eng","persons":["Martin Vigo"],"view_count":5762,"promoted":false,"date":"2018-12-27T00:00:00.000+01:00","release_date":"2018-12-27T01:00:00.000+01:00","updated_at":"2026-04-21T19:00:04.192+02:00","tags":["35c3","9383","Security"],"length":2521,"duration":2521,"thumb_url":"https://static.media.ccc.de/media/congress/2018/9383-hd.jpg","poster_url":"https://static.media.ccc.de/media/congress/2018/9383-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/congress/2018/9383-hd.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/congress/2018/9383-hd.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/35c3-9383-compromising_online_accounts_by_cracking_voicemail_systems","url":"https://api.media.ccc.de/public/events/8a3e490c-30a5-46a6-ab4f-45ef3b23b1a1","conference_title":"35C3: Refreshing Memories","conference_url":"https://api.media.ccc.de/public/conferences/35c3","related":[{"event_id":6378,"event_guid":"15f4e5c5-40e1-4c73-8da0-4cc2a773ab13","weight":102},{"event_id":6381,"event_guid":"c0e4f528-92c7-4170-aff3-d4dd5cd74b2c","weight":134},{"event_id":6383,"event_guid":"7177142b-6f15-4fac-af62-c45df7a377a9","weight":109},{"event_id":6388,"event_guid":"4cc5cf9a-214f-4e7d-991f-199e9f0db8cc","weight":89},{"event_id":6390,"event_guid":"6a5007f4-e7d6-4c63-9a10-26dd48a6eb6c","weight":162},{"event_id":6391,"event_guid":"1601bf3b-ce4a-44c9-993f-7d28fa65168d","weight":87},{"event_id":6396,"event_guid":"b34662ae-f1c6-4711-9270-b5865f6dd6c8","weight":92},{"event_id":6397,"event_guid":"51ede2da-0f9b-4984-bd58-659c556d20c9","weight":149},{"event_id":6400,"event_guid":"527b56af-8d56-4edb-9027-9ca60767c742","weight":156},{"event_id":6401,"event_guid":"f0d70663-0769-4462-ad27-bc516d9cb141","weight":122},{"event_id":6404,"event_guid":"5b947f86-8ba1-4b99-adbe-7c5030deea0c","weight":104},{"event_id":6406,"event_guid":"686c1387-e761-4df6-b395-f9ddf92d46e7","weight":88},{"event_id":6408,"event_guid":"ffdc92f3-1a39-4931-9409-f8bfabe9f628","weight":118},{"event_id":6409,"event_guid":"a42e5a4f-fd9b-4571-bf17-483978afecb3","weight":245},{"event_id":6411,"event_guid":"42650545-4394-4455-a5f5-9efad111fedc","weight":291},{"event_id":6419,"event_guid":"96d10915-cc4b-42ca-ad75-15205db70d0b","weight":95},{"event_id":6423,"event_guid":"ea7c532f-cc2d-4cb1-8f15-1933df7fd523","weight":107},{"event_id":6430,"event_guid":"462f9320-3a0e-4785-82de-15343803c2ba","weight":87},{"event_id":6433,"event_guid":"30278963-3b07-49a8-96a7-2b24a8cf573b","weight":154},{"event_id":6435,"event_guid":"9777cea0-ac06-4274-85db-908c1e87e2f4","weight":116},{"event_id":6474,"event_guid":"f58a2b6d-bde0-483b-a8db-043ea9371cb6","weight":109},{"event_id":6551,"event_guid":"3a571c21-31ed-453b-886d-7dea7b5751cd","weight":89},{"event_id":6603,"event_guid":"ea00d1e0-a580-415f-a8cf-f02883d939dc","weight":102}],"recordings":[{"size":null,"length":null,"mime_type":"application/x-subrip","language":"fin","filename":"35c3-9383-eng-deu-fra-Compromising_online_accounts_by_cracking_voicemail_systems.fi.srt","state":"translated","folder":"","high_quality":true,"width":null,"height":null,"updated_at":"2022-03-18T18:47:02.514+01:00","recording_url":"https://cdn.media.ccc.de/congress/2018/35c3-9383-eng-deu-fra-Compromising_online_accounts_by_cracking_voicemail_systems.fi.srt","url":"https://api.media.ccc.de/public/recordings/57711","event_url":"https://api.media.ccc.de/public/events/8a3e490c-30a5-46a6-ab4f-45ef3b23b1a1","conference_url":"https://api.media.ccc.de/public/conferences/35c3"},{"size":null,"length":null,"mime_type":"application/x-subrip","language":"eng","filename":"35c3-9383-eng-deu-fra-Compromising_online_accounts_by_cracking_voicemail_systems.en.srt","state":"complete","folder":"","high_quality":true,"width":null,"height":null,"updated_at":"2021-02-21T17:47:22.767+01:00","recording_url":"https://cdn.media.ccc.de/congress/2018/35c3-9383-eng-deu-fra-Compromising_online_accounts_by_cracking_voicemail_systems.en.srt","url":"https://api.media.ccc.de/public/recordings/44529","event_url":"https://api.media.ccc.de/public/events/8a3e490c-30a5-46a6-ab4f-45ef3b23b1a1","conference_url":"https://api.media.ccc.de/public/conferences/35c3"},{"size":224,"length":2521,"mime_type":"video/mp4","language":"eng","filename":"35c3-9383-eng-Compromising_online_accounts_by_cracking_voicemail_systems.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2018-12-27T22:12:18.059+01:00","recording_url":"https://cdn.media.ccc.de/congress/2018/h264-hd/35c3-9383-eng-Compromising_online_accounts_by_cracking_voicemail_systems.mp4","url":"https://api.media.ccc.de/public/recordings/30917","event_url":"https://api.media.ccc.de/public/events/8a3e490c-30a5-46a6-ab4f-45ef3b23b1a1","conference_url":"https://api.media.ccc.de/public/conferences/35c3"},{"size":224,"length":2521,"mime_type":"video/mp4","language":"deu","filename":"35c3-9383-deu-Compromising_online_accounts_by_cracking_voicemail_systems.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2018-12-27T22:12:26.686+01:00","recording_url":"https://cdn.media.ccc.de/congress/2018/h264-hd/35c3-9383-deu-Compromising_online_accounts_by_cracking_voicemail_systems.mp4","url":"https://api.media.ccc.de/public/recordings/30918","event_url":"https://api.media.ccc.de/public/events/8a3e490c-30a5-46a6-ab4f-45ef3b23b1a1","conference_url":"https://api.media.ccc.de/public/conferences/35c3"},{"size":224,"length":2521,"mime_type":"video/mp4","language":"fra","filename":"35c3-9383-fra-Compromising_online_accounts_by_cracking_voicemail_systems.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2018-12-27T22:12:35.372+01:00","recording_url":"https://cdn.media.ccc.de/congress/2018/h264-hd/35c3-9383-fra-Compromising_online_accounts_by_cracking_voicemail_systems.mp4","url":"https://api.media.ccc.de/public/recordings/30919","event_url":"https://api.media.ccc.de/public/events/8a3e490c-30a5-46a6-ab4f-45ef3b23b1a1","conference_url":"https://api.media.ccc.de/public/conferences/35c3"},{"size":363,"length":2521,"mime_type":"video/mp4","language":"eng-deu-fra","filename":"35c3-9383-eng-deu-fra-Compromising_online_accounts_by_cracking_voicemail_systems_hd.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2018-12-27T22:12:46.017+01:00","recording_url":"https://cdn.media.ccc.de/congress/2018/h264-hd/35c3-9383-eng-deu-fra-Compromising_online_accounts_by_cracking_voicemail_systems_hd.mp4","url":"https://api.media.ccc.de/public/recordings/30920","event_url":"https://api.media.ccc.de/public/events/8a3e490c-30a5-46a6-ab4f-45ef3b23b1a1","conference_url":"https://api.media.ccc.de/public/conferences/35c3"},{"size":178,"length":2521,"mime_type":"video/mp4","language":"eng-deu-fra","filename":"35c3-9383-eng-deu-fra-Compromising_online_accounts_by_cracking_voicemail_systems_sd.mp4","state":"new","folder":"h264-sd","high_quality":false,"width":720,"height":576,"updated_at":"2018-12-28T00:03:06.535+01:00","recording_url":"https://cdn.media.ccc.de/congress/2018/h264-sd/35c3-9383-eng-deu-fra-Compromising_online_accounts_by_cracking_voicemail_systems_sd.mp4","url":"https://api.media.ccc.de/public/recordings/30973","event_url":"https://api.media.ccc.de/public/events/8a3e490c-30a5-46a6-ab4f-45ef3b23b1a1","conference_url":"https://api.media.ccc.de/public/conferences/35c3"},{"size":180,"length":2521,"mime_type":"video/mp4","language":"eng-deu-fra","filename":"35c3-9383-eng-deu-fra-Compromising_online_accounts_by_cracking_voicemail_systems_hd-slides.mp4","state":"new","folder":"slides-h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2018-12-28T00:05:07.243+01:00","recording_url":"https://cdn.media.ccc.de/congress/2018/slides-h264-hd/35c3-9383-eng-deu-fra-Compromising_online_accounts_by_cracking_voicemail_systems_hd-slides.mp4","url":"https://api.media.ccc.de/public/recordings/30977","event_url":"https://api.media.ccc.de/public/events/8a3e490c-30a5-46a6-ab4f-45ef3b23b1a1","conference_url":"https://api.media.ccc.de/public/conferences/35c3"},{"size":24,"length":2521,"mime_type":"audio/opus","language":"eng","filename":"35c3-9383-eng-Compromising_online_accounts_by_cracking_voicemail_systems_opus.opus","state":"new","folder":"opus","high_quality":false,"width":0,"height":0,"updated_at":"2018-12-28T03:05:05.074+01:00","recording_url":"https://cdn.media.ccc.de/congress/2018/opus/35c3-9383-eng-Compromising_online_accounts_by_cracking_voicemail_systems_opus.opus","url":"https://api.media.ccc.de/public/recordings/31119","event_url":"https://api.media.ccc.de/public/events/8a3e490c-30a5-46a6-ab4f-45ef3b23b1a1","conference_url":"https://api.media.ccc.de/public/conferences/35c3"},{"size":469,"length":2521,"mime_type":"video/webm","language":"eng-deu-fra","filename":"35c3-9383-eng-deu-fra-Compromising_online_accounts_by_cracking_voicemail_systems_webm-hd.webm","state":"new","folder":"webm-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2018-12-28T03:05:49.985+01:00","recording_url":"https://cdn.media.ccc.de/congress/2018/webm-hd/35c3-9383-eng-deu-fra-Compromising_online_accounts_by_cracking_voicemail_systems_webm-hd.webm","url":"https://api.media.ccc.de/public/recordings/31120","event_url":"https://api.media.ccc.de/public/events/8a3e490c-30a5-46a6-ab4f-45ef3b23b1a1","conference_url":"https://api.media.ccc.de/public/conferences/35c3"},{"size":38,"length":2521,"mime_type":"audio/mpeg","language":"eng","filename":"35c3-9383-eng-Compromising_online_accounts_by_cracking_voicemail_systems_mp3.mp3","state":"new","folder":"mp3","high_quality":false,"width":0,"height":0,"updated_at":"2018-12-28T03:07:40.172+01:00","recording_url":"https://cdn.media.ccc.de/congress/2018/mp3/35c3-9383-eng-Compromising_online_accounts_by_cracking_voicemail_systems_mp3.mp3","url":"https://api.media.ccc.de/public/recordings/31125","event_url":"https://api.media.ccc.de/public/events/8a3e490c-30a5-46a6-ab4f-45ef3b23b1a1","conference_url":"https://api.media.ccc.de/public/conferences/35c3"},{"size":277,"length":2521,"mime_type":"video/webm","language":"eng-deu-fra","filename":"35c3-9383-eng-deu-fra-Compromising_online_accounts_by_cracking_voicemail_systems_webm-sd.webm","state":"new","folder":"webm-sd","high_quality":false,"width":720,"height":576,"updated_at":"2018-12-28T03:10:14.430+01:00","recording_url":"https://cdn.media.ccc.de/congress/2018/webm-sd/35c3-9383-eng-deu-fra-Compromising_online_accounts_by_cracking_voicemail_systems_webm-sd.webm","url":"https://api.media.ccc.de/public/recordings/31130","event_url":"https://api.media.ccc.de/public/events/8a3e490c-30a5-46a6-ab4f-45ef3b23b1a1","conference_url":"https://api.media.ccc.de/public/conferences/35c3"},{"size":9,"length":null,"mime_type":"application/pdf","language":"eng","filename":"35c3-9383-compromising_online_accounts_by_cracking_voicemail_systems.pdf","state":"new","folder":"slides-pdf","high_quality":true,"width":null,"height":null,"updated_at":"2019-01-11T02:38:34.535+01:00","recording_url":"https://cdn.media.ccc.de/congress/2018/slides-pdf/35c3-9383-compromising_online_accounts_by_cracking_voicemail_systems.pdf","url":"https://api.media.ccc.de/public/recordings/32765","event_url":"https://api.media.ccc.de/public/events/8a3e490c-30a5-46a6-ab4f-45ef3b23b1a1","conference_url":"https://api.media.ccc.de/public/conferences/35c3"}]}