Home page logo

pen-test logo Penetration Testing mailing list archives

Ballpark figures on a PBX assessment
From: mikem () tridigitalenterprises com
Date: Tue, 27 Sep 2005 11:09:40 -0800 (AKDT)

Hi Folks,

We're looking at having a vulnerability assessment done on our PBX, and
I'd like to get a feel for what it might cost.

Specifically, we're looking to have the following accomplished:

* PBX configuration reviewed for any misconfigurations that could result
  in a compromise
* A check of approximately 1000 phone numbers (war-dialing) to detect the
  presence of any modems or other devices set to auto-answer
* A review of logging capabilities and configurations on the PBX to ensure
  that all call details are being properly logged
* Verification that all userids/passwords on the PBX are being changed
  according to company policies

If anyone has done these sorts of tests on a PBX before and wouldn't mind
sharing what a ballpark estimate might cost, we'd be most appreciative.
If not dollars, then possibly hours required to perform an adequate review
and test.

Thanks in advance,

Audit your website security with Acunetix Web Vulnerability Scanner: 

Hackers are concentrating their efforts on attacking applications on your 
website. Up to 75% of cyber attacks are launched on shopping carts, forms, 
login pages, dynamic content etc. Firewalls, SSL and locked-down servers are 
futile against web application hacking. Check your website for vulnerabilities 
to SQL injection, Cross site scripting and other web attacks before hackers do! 
Download Trial at:


  By Date           By Thread  

Current thread:
  • Ballpark figures on a PBX assessment mikem (Sep 28)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]