VideoJak is an IP Video security assessment tool that can simulate a proof of concept video interception or replay test against a targeted, user-selected video session.
VideoJak is the first of its kind security tool that analyzes video codec standards such as H.264. VideoJak works by first capturing the RTP port used in a video conversation or stream. Next, VideoJak analyzes the RTP packets, collecting the RTP sequence numbers and timestamp values used between the video endpoints. Then VideoJak creates a custom video payload by changing the sequence numbers and timestamp values used in the original RTP packets between the two video endpoints.
After the user selects a targeted video device to attack in an ongoing video session, VideoJak delivers the payload over the learned RTP port against the target. This attack results in one of several new features:
VideoJak is designed in consideration of todays UC infrastructure implementions in which QoS requirements dictate the separation of data and VoIP/Video into discrete networks or VLANs.
VideoJak is a proof of concept security assessment tool that can be used to test video applications. Future versions of the tool will support more exciting features.
© Copyright 2011, Sipera Systems, Inc. 