Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

[TUT] Setting up a PBX and Spoofing Caller-ID's With Asterisk and Flowroute [PICS!!!]

I've been interested in hacking/phreaking for quite some time now. I've always knew about asterisk and flowroute but really haven't used either much. I did a little bit of research today and found out that flowroute will let you set your own caller-id for outbound calls. This could be very useful/bad. They charge .0098c/min for calls and $6.95 unlimited for 2 channels with a $1.00 set up fee. If you could generate enough traffic you could get a pretty successful spoofing business going. They also let you pick your DID and offer 800 numbers which reveal blocked CID's (*67) numbers. There is a way to do that with a normal flowroute number but that is for another tutorial. So, let's get started with setting up Elastix. This is asterisk and a modified freepbx wrapped around centos.

You can download Elastix here. I'm using version 2.0.3.
Code
http://www.elastix.org/en/downloads.html

This tutorial will work for either installing it on a physical machine or in vmware. Unfortunately I'm not going to walk you through the installation as it's rather straightforward and I'm doing enough hand holding as it is.

Once Elastix is installed you'll need to know it's ip address. Type in "ifconfig" and hit enter.

[Image: X2WmZ.png]

Once you have that naviage to that address in your web browser. You'll be greeted with this

[Image: aF4OP.png]

Now, we're going to configure X-Lite, a softphone, to work with Elastix.

Click on the PBX tab at the top. Then click on the Extensions button on the left under Basic. Select "Generic SIP Device" and click submit.

[Image: NWQjO.png]

Now we'll configure the extension. Pick a display name, an outbound CID (this is set to show up as the caller id), and a secret (this is the password for the extension). The rest of the configurations are optional and not covered in this tutorial. Click submit at the bottom of the page.

[Image: PGRor.png]

Next, you'll notice a little red bar at the top of the screen. ANY changes you make within Elastix will require you to push this button. Failure to do this will only make you look stupid.

[Image: pfnkn.png]

Now we'll set up X-Lite, you can download it here.

Code
http://www.counterpath.com/x-lite-download.html

Install it. Once it starts up you'll see this.

[Image: JuISj.png]

Click on the Account Settings button and configure it similar to how I have according to what you put into Elastix. Make sure and uncheck "IM/Presence", this may cause problems. Account name should be your display name, user id should be your extension, the domain should be local, password should be what you set for secret, display name should be obvious, authorization name should be your extension. Make sure Domain Proxy is checked and Proxy is selected with the address of Elastix. Hit ok and X-Lite should register fine. You cannot make calls at this time.

[Image: hFYmd.png]

Go to flowroute.com and register. You'll get .25c of free credit to make calls with. Once you log in you'll be greeted with this page.

[Image: utNS7.png]

Next you'll need to click the "Interconnection" button at the top. Then click on the "System Configurator" at the bottom.

[Image: HRrB8.png]

Once you do that, select "trixbox" from the dropdown menu and follow the instructions.

[Image: Dd8Pb.png]

You'll need to go to "Trunks" and "Add SIP Trunk" in Elastix.

[Image: C1uou.png]

Then you'll fill in the information that flowroute has provided.

[Image: OM6g1.png]

Make sure that you include the register string at the bottom.

[Image: 9rpGn.png]

After this is done you'll need to setup how outbound routes are handled. So, click on Outbound Routes and 9_outside.

[Image: oyrKT.png]

Next, you might want to rename the route, do so by clicking the rename button. Then select how you want your dial patterns to be. Default is 9|. which means you can dial anything as long as you dial a 1 first. I prefer to simply dial a number and i have these 3 in the field, 1NXXNXX, NXXNXX, NXX. Then, make sure to select SIP/flowout as your outbound trunk to use.

[Image: x2Mcq.png]

Next hit apply and go back to your softphone. Dial 1-xxx-xxxx and your call should go through without a hitch. Remember, to change the CID that shows up it's under Extensions -> your X-Lite extension -> Outbound CID. I plan to write a small perl program or something that will allow you to set the outbound CID when you call a DID from flowroute. So it'll be your phone -> DID@flowroute -> elastix -> prompt for # to call, # to show up -> create new call with creds entered -> bridge the 2 calls. I'll update this post once i've created it, or if anyone cares to do it before me.

Enjoy
~Tully
Go back to the 1980's. Noice tut.
Thanks Cephei for the kind words and forceful attempt at time travel.
<tully> hey retards, i made a tutorial none of you will understand,

Success 🤝
This would be useful if this was free. I'll just stick with my iPhone spoofing app.
Deserves a lot more posts, looks like Tully worked really hard on this tutorial. But since its not "How to install Cybergate" or "How to Ping" most of HF's population of 12 year olds won't bother clicking on this let alone actually have enough of an attention span to read it.
(Jul 5, 2011 08:14 PM)snake_escape Wrote:  This would be useful if this was free. I'll just stick with my iPhone spoofing app.

The iphone spoofing app you're referring to requires you to listen to 3-5 minutes of ads. While still free i'd prefer to have my own box, where I control what's logged and can make a call at a moments notice instead of sitting there listening to how walmart can make my life better. thanks for the reply though.

(Jul 5, 2011 08:18 PM)Gorgon825 Wrote:  Deserves a lot more posts, looks like Tully worked really hard on this tutorial. But since its not "How to install Cybergate" or "How to Ping" most of HF's population of 12 year olds won't bother clicking on this let alone actually have enough of an attention span to read it.

I really appreciate this kind of feedback and it is rather sad to see people on this forum being satisfied with only knowing how to generate a RAT and connect to it.
INTERESTING. Thank you so much for this contribution.
i really think you are heading the right direction, keep up the good work , it looks like you work hard on this tutorial. i'll be waiting for more.
thanks nice tut. I wanted to setup an Asterisk box for my work office, its just a few sip phones could never find any updated tut and the Asterisk forums where no help to first time users of Asterisk.
(Jul 5, 2011 09:30 PM)CustomSync Wrote:  INTERESTING. Thank you so much for this contribution.

Thank you for replying :P

(Jul 5, 2011 09:31 PM)gizmodo Wrote:  i really think you are heading the right direction, keep up the good work , it looks like you work hard on this tutorial. i'll be waiting for more.

It was a little involved, nothing too tedious though. I am working on a follow up tutorial covering phone bombing and spoofing via inbound DID's that should be done soon.

(Jul 5, 2011 11:35 PM)bluntlee Wrote:  thanks nice tut. I wanted to setup an Asterisk box for my work office, its just a few sip phones could never find any updated tut and the Asterisk forums where no help to first time users of Asterisk.

I'd be happy to help if you'd like, you can contact me on aim @ cornsnake or catch me on the HF irc.
Great looking tut tully! I'm sure it'll help tons.
Wow. But i guess this is only for the US? I'd totaly buy 2 unlimited channels if i'd be able to use this inside Denmark. Prank calling in a greater level, using the number of our local pizza man = profit.
(Jul 7, 2011 04:10 AM)Joler1302 Wrote:  Wow. But i guess this is only for the US? I'd totaly buy 2 unlimited channels if i'd be able to use this inside Denmark. Prank calling in a greater level, using the number of our local pizza man = profit.

It's voip so it works through the internet. It works in denmark as well although the rates might be a bit higher per minute although the unlimited plan should still apply to you.
(Jul 6, 2011 06:18 PM)Tully Wrote:  I'd be happy to help if you'd like, you can contact me on aim @ cornsnake or catch me on the HF irc.

When I get sometime in the next few weeks I will contact you. Thanks


Possibly Related Threads...
Thread / Author Replies Views Last Post
by Elite_xApr 13, 2025 04:44 PM 4 571 Apr 13, 2025 04:44 PM
Last Post: SS2580G
by mrtrukeroFeb 12, 2023 01:11 PM 4 814 Feb 12, 2023 01:11 PM
Last Post: Bgould101
by yomoralaJun 9, 2021 04:50 AM 5 280 Jun 9, 2021 04:50 AM
Last Post: Goku