OpenSIPS Security Audit, fully disclosed

If almost one year ago we were releasing the first results of the security audit performed by of Enable Security over the OpenSIPS 3.2 code, now is the right time for the full disclosure. What was missing? As per the initial post, we hold back all the information about how to reproduce the crashes. Why? … Continue reading OpenSIPS Security Audit, fully disclosed

OpenSIPS Security Audit, facts and results

Almost an year ago we were boiling the idea of starting a professional security audit over the freshly released OpenSIPS 3.2 . What were the reasons for doing this and how the audit actually took shape, as targets, methodology and deliverables, is described in this original manifest. Of course, nothing would have been possible without … Continue reading OpenSIPS Security Audit, facts and results

The OpenSIPS Security Audit is happening

Couple of months ago, after exchanging some ideas we Sandro Gauci from Enable Security, we saw as plausible the project of performing a professional Security Audit (PenTests) for OpenSIPS 3.2, with public results and benefits for the whole project and community. So, we embarked in the quest of making that possible, to put together the … Continue reading The OpenSIPS Security Audit is happening