Skip to content

whoot/TelphOWN

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

7 Commits
 
 
 
 
 
 
 
 

Repository files navigation

TelphOWN

TelphOWN is a proof-of-concept/penetration testing tool that exploits some vulnerabilities in Telpho10.

Telpho10 is a german "Hybrid ISDN / VoIP Telefonanlage" (telephone system) which I hacked for fun.

Tipp: Hack it yourself to test/train your skills or just for fun and you will find a lot of vulnerabilities which are easy to exploit.

Telpho10 v2.6.48 is still vulnerable and the developer is ignoring my emails. Therefore I assume that this is a WONT FIX.

Exploits

TelphOWN can exploit following vulnerabilties:

* Dumping all kind of Credentials
* Reboot/Shutdown Server
* Restart Apache
* Upload a Webshell

For the upload of a webshell, valid credentials are needed, so you first need to dump the credentials. If no credentials are provided, TelphOWN will try the default credentails.

Installation

You can download the latest tarball by clicking here or latest zipball by clicking here.

Preferably, you can download TelphOWN by cloning the Git repository:

git clone https://github.com/whoot/TelphOWN.git

TelphOWN works with Python version 3.x.

You might need to install following packages:

You can install the packages with apt-get:

apt-get install python3-requests python3-requests-toolbelt

Usage

To get a list of all options use:

python3 TelphOWN.py -h

Example: Dump credentials from Telpho10 system on 192.168.0.139:

python3 TelphOWN.py -d 192.168.0.139 --dump

Bug Reporting

Bug reports are welcome! Please report all bugs on the issue tracker.

Links

License

TelphOWN - Telpho10 Ownage Tool

Copyright (c) 2021 Jan Rude

This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.

This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.

You should have received a copy of the GNU General Public License along with this program. If not, see http://www.gnu.org/licenses/

About

Telpho10 Ownage Tool

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages