TelphOWN is a proof-of-concept/penetration testing tool that exploits some vulnerabilities in Telpho10.
Telpho10 is a german "Hybrid ISDN / VoIP Telefonanlage" (telephone system) which I hacked for fun.
Tipp: Hack it yourself to test/train your skills or just for fun and you will find a lot of vulnerabilities which are easy to exploit.
Telpho10 v2.6.48 is still vulnerable and the developer is ignoring my emails. Therefore I assume that this is a WONT FIX.
TelphOWN can exploit following vulnerabilties:
* Dumping all kind of Credentials
* Reboot/Shutdown Server
* Restart Apache
* Upload a Webshell
For the upload of a webshell, valid credentials are needed, so you first need to dump the credentials. If no credentials are provided, TelphOWN will try the default credentails.
You can download the latest tarball by clicking here or latest zipball by clicking here.
Preferably, you can download TelphOWN by cloning the Git repository:
git clone https://github.com/whoot/TelphOWN.git
TelphOWN works with Python version 3.x.
You might need to install following packages:
You can install the packages with apt-get:
apt-get install python3-requests python3-requests-toolbelt
To get a list of all options use:
python3 TelphOWN.py -h
Example: Dump credentials from Telpho10 system on 192.168.0.139:
python3 TelphOWN.py -d 192.168.0.139 --dump
Bug reports are welcome! Please report all bugs on the issue tracker.
TelphOWN - Telpho10 Ownage Tool
Copyright (c) 2021 Jan Rude
This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.
This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.
You should have received a copy of the GNU General Public License along with this program. If not, see http://www.gnu.org/licenses/