iiinova — where your digital self keeps evolving

enablesecurity.bsky.social @enablesecurity.bsky.social · 27/03/2026

Web app security has DVWA. Now VoIP/WebRTC security has DVRTC: a hands-on vulnerable lab with SIP, RTP, and TURN exercises. Live instance at pbx1.dvrtc.net. enablesecurity.com/blog/introducing-dvrtc-damn-vulnerable-real-time-communications/

pbx1.dvrtc.net

DVRTC - Damn Vulnerable Real-Time Communications

000

enablesecurity.bsky.social @enablesecurity.bsky.social · 25/02/2026

New: TURN server security best practices + coturn configuration guide with copy-paste templates and three hardening levels. Best practices: enablesecurity.com/blog/turn-security-best-practices/ coturn: enablesecurity.com/blog/coturn-security-configuration-guide/

enablesecurity.com

TURN Server Security Best Practices

TURN server security guide for any implementation. Hardening checklist, IP range block lists, rate limiting, and deployment patterns for production WebRTC systems.

001

enablesecurity.bsky.social @enablesecurity.bsky.social · 12/02/2026

TURN servers are meant to relay WebRTC media. To an attacker, they're just proxies. We wrote up the threats we've been finding since 2017: relay abuse, DoS amplification, and software vulns. www.enablesecurity.com/blog/turn-se...

enablesecurity.com

TURN Security Threats: A Hacker's View

TURN servers are powerful proxies abused for internal network access, C2 operations, and DDoS attacks. Threat analysis from years of research and pentesting.

023

enablesecurity.bsky.social @enablesecurity.bsky.social · 01/10/2025

Thanks @fred.tel ! This one covers: FreePBX troubles and fixes (CVE-2025-57819 + more) Voice-AI meets toll fraud 📞💸 RTP Bleed clarifications for DTLS-SRTP TURN security deep-dive + Qualcomm & Chrome WebRTC vulns

022

enablesecurity.bsky.social @enablesecurity.bsky.social · 30/04/2025

Sent out the latest RTCSec Newsletter, covering Verizon's CDRs compromised by a security researcher, SIP ALG vulnerabilities and learning about NAT types, Cisco VoIP security flaws and cool vulnerability demos, phone phreaking and much more. www.enablesecurity.com/newsletter/2...

enablesecurity.com

April 2025: Verizon's CDR compromise, Cisco VoIP security flaws and phreaking

April 2025 RTCSec newsletter: Verizon's CDR compromise, Cisco VoIP security flaws and phreaking

010