spng/selfphoneng
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 12 Wiki Activity

Security/freepbx campaign #10

Merged
iamdoubz merged 5 commits from security/freepbx-campaign into main 2026-10-29 18:48:12 -05:00
Conversation 0 Commits 5 Files Changed 37
+847 -49
iamdoubz commented 2026-10-29 18:42:33 -05:00
Owner
Copy link
Copy source

Freepbx was attacked with a malware campaign (read here) and I wanted to use what was learned there and how to make this PBX safer from this type of attack angle.

Freepbx was attacked with a malware campaign ([read here](https://cybersecuritynews.com/hackers-attack-freepbx-servers/)) and I wanted to use what was learned there and how to make this PBX safer from this type of attack angle.
iamdoubz added 5 commits 2026-10-29 18:42:33 -05:00
asterisk: AMI limited to the classes we use, no shell-running modules in the image 63286a1954
security: fraud alerts (M11-T10), admin access spec (M11-T9) 08bc611dec
voipms: IP restriction on the setup checklist, getCDR checked against voip.ms's examples 1979a02827
repo: ignore voip.ms's API example bundle
ci / check (push) Successful in 1m19s
Details
ci / images (push) Successful in 1m30s
Details
f435b475ed
release: version 0.0.13
ci / check (push) Successful in 1m5s
Details
ci / images (push) Successful in 22s
Details
ci / check (pull_request) Successful in 1m5s
Details
ci / images (pull_request) Successful in 4s
Details
34f443385d
iamdoubz merged commit 10b499e263 into main 2026-10-29 18:48:12 -05:00
iamdoubz deleted branch security/freepbx-campaign 2026-10-29 18:48:12 -05:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
bug
Something is not working
 duplicate
This issue or pull request already exists
 enhancement
New feature
 help wanted
Need some help
 invalid
Something is wrong
 question
More information is needed
 wontfix
This won't be fixed
bug
Something is not working
 duplicate
This issue or pull request already exists
 enhancement
New feature
 help wanted
Need some help
 invalid
Something is wrong
 question
More information is needed
 wontfix
This won't be fixed
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
iamdoubz (iamdoubz)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: spng/selfphoneng#10