|
|
|
|
@ -84,6 +84,75 @@ sub stun_succ {
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
($sock_a, $sock_b, $sock_c) = new_call([qw(198.51.100.1 7188)], [qw(198.51.100.3 7190)], [qw(198.51.100.5 5192)]);
|
|
|
|
|
|
|
|
|
|
($port_a) = offer('SRTP hijack <> RTP', { 'transport-protocol' => 'RTP/AVP' }, <<SDP);
|
|
|
|
|
v=0
|
|
|
|
|
o=- 1545997027 1 IN IP4 172.17.0.2
|
|
|
|
|
s=tester
|
|
|
|
|
c=IN IP4 198.51.100.1
|
|
|
|
|
t=0 0
|
|
|
|
|
m=audio 7188 RTP/SAVP 8
|
|
|
|
|
a=crypto:1 AES_CM_128_HMAC_SHA1_80 inline:QjnnaukLn7iwASAs0YLzPUplJkjOhTZK2dvOwo6c
|
|
|
|
|
----------------------------------
|
|
|
|
|
v=0
|
|
|
|
|
o=- 1545997027 1 IN IP4 172.17.0.2
|
|
|
|
|
s=tester
|
|
|
|
|
t=0 0
|
|
|
|
|
m=audio PORT RTP/AVP 8
|
|
|
|
|
c=IN IP4 203.0.113.1
|
|
|
|
|
a=rtpmap:8 PCMA/8000
|
|
|
|
|
a=sendrecv
|
|
|
|
|
a=rtcp:PORT
|
|
|
|
|
SDP
|
|
|
|
|
|
|
|
|
|
($port_b, undef, $srtp_key_b) = answer('SRTP hijack <> RTP', { }, <<SDP);
|
|
|
|
|
v=0
|
|
|
|
|
o=- 1545997027 1 IN IP4 172.17.0.2
|
|
|
|
|
s=tester
|
|
|
|
|
c=IN IP4 198.51.100.1
|
|
|
|
|
t=0 0
|
|
|
|
|
m=audio 7190 RTP/AVP 8
|
|
|
|
|
----------------------------------
|
|
|
|
|
v=0
|
|
|
|
|
o=- 1545997027 1 IN IP4 172.17.0.2
|
|
|
|
|
s=tester
|
|
|
|
|
t=0 0
|
|
|
|
|
m=audio PORT RTP/SAVP 8
|
|
|
|
|
c=IN IP4 203.0.113.1
|
|
|
|
|
a=rtpmap:8 PCMA/8000
|
|
|
|
|
a=sendrecv
|
|
|
|
|
a=rtcp:PORT
|
|
|
|
|
a=crypto:1 AES_CM_128_HMAC_SHA1_80 inline:CRYPTO128
|
|
|
|
|
SDP
|
|
|
|
|
|
|
|
|
|
$srtp_ctx_a = {
|
|
|
|
|
cs => $NGCP::Rtpclient::SRTP::crypto_suites{AES_CM_128_HMAC_SHA1_80},
|
|
|
|
|
key => 'QjnnaukLn7iwASAs0YLzPUplJkjOhTZK2dvOwo6c',
|
|
|
|
|
};
|
|
|
|
|
$srtp_ctx_b = {
|
|
|
|
|
cs => $NGCP::Rtpclient::SRTP::crypto_suites{AES_CM_128_HMAC_SHA1_80},
|
|
|
|
|
key => $srtp_key_b,
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
snd($sock_b, $port_a, rtp(8, 1000, 3000, 0x1234, "\x00" x 160));
|
|
|
|
|
srtp_rcv($sock_a, $port_b, rtpm(8, 1000, 3000, 0x1234, "\x00" x 160), $srtp_ctx_b);
|
|
|
|
|
|
|
|
|
|
srtp_snd($sock_a, $port_b, rtp(8, 2000, 4000, 0x6543, "\x11" x 160), $srtp_ctx_a);
|
|
|
|
|
rcv($sock_b, $port_a, rtpm(8, 2000, 4000, 0x6543, "\x11" x 160));
|
|
|
|
|
|
|
|
|
|
# attempt inject/hijack
|
|
|
|
|
|
|
|
|
|
snd($sock_c, $port_b, rtp(8, 2001, 4160, 0x6543, "\x11" x 160));
|
|
|
|
|
rcv_no($sock_b);
|
|
|
|
|
|
|
|
|
|
snd($sock_b, $port_a, rtp(8, 1001, 3160, 0x1234, "\x00" x 160));
|
|
|
|
|
rcv_no($sock_c);
|
|
|
|
|
srtp_rcv($sock_a, $port_b, rtpm(8, 1001, 3160, 0x1234, "\x00" x 160), $srtp_ctx_b);
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
new_call;
|
|
|
|
|
|
|
|
|
|
offer('L16 default', { codec => { transcode => ['L16/44100'] } }, <<SDP);
|
|
|
|
|
|