Hey, what's up? I'm Jason. It's great to be here. I'm super passionate about voice over IP security. This is Arjen I'm gonna tell you I'm gonna start for the quick little story and it's the reason why I like Las Vegas so much We were we were here last month Viper spoke at Sands Pintest Summit on voice over IP pentesting and only in Las Vegas Do I get taken up on the stage of Cirque du Soleil's Humanity and Little did I know that they were going to try and take off my pants The girls that's not a bad thing when girls want to take off your pants, but Lucky for me. I wasn't wearing any underwear. So I kind of escaped that part lucky for the audience as well So I was telling the Sands guy this story and it was kind of funny because they they nicknamed me commando and it was It was a Paul Asadorian with paul.com security. I hope he's in their room, but anyways Paul So he called me commando. So I think that's gonna be my new handle now commando and Yeah, so Paul wherever you are. I want you to know that I'm going commando for this talk in your in your honor So well, let's get started here We got a we got a lot of stuff to talk about I'm gonna go really fast at the beginning on The overview of UC and then we got three really cool demos to do We're gonna talk about like an intro to like some of this video stuff that we're talking about And if you guys stick around to the end the last 10 minutes We're gonna have some awesome like really cool pen testing stuff lessons learn and tricks that we learned here a few weeks ago so Viper voice stands for voice over IP exploit research and really all we are is we're highly specialized pen test firm Dedicated towards UC and voice over IP We do structural research on generic Implementation of VoIP and finding vulnerabilities and void protocols, but it's basically penetration testing and then our research around this We built a real production enterprise network It's basically Cisco of I and Microsoft and what we do is we go in and we do the pen test with a customer We learn more about the configuration We recreate in our lab and then we're even more effective in our pen tests and our research feeds into that So obviously this is Arjun here. I'm Jason. We're Viper team members This is our lab actually in Dallas and we've like I said, we have a Cisco network IPS We can do all types of VoIP exploits through the network IPS We have like Cisco of I and Microsoft phones and Video phones and so forth So you see definitions At first it was the first marketing buzzers was a converged convergence, which was voice and data over the same pipe I added that my my definition of unified communication is just adding video into that and we also have Presence as well So this is just a simple slide just like why do we do what we're doing here We were publishing these free assessment tools for education and awareness because we believe that the only way to show people that VoIP attacks are for real is to actually demonstrate it to them and the way you do that as you use security tools We enable security professionals to test the network to show the customer the risk of VoIP and We also enable like VoIP owners like people deploying VoIP You know to test the network themselves so they can see the risks because they're really the ones that have to make the Risk risk decision if their risk tolerance level will accept that risk So let's let's look at some some real-world business examples, and we're talking about IP video here So private IP video calling between users like the CEO calling the CFO Telepresence or video conferencing IP video surveillance, which we're going to take a close look at Then there's these video streaming applications, and we're really it's really interesting to study these and You know we welcome you guys to come to us if you've seen stuff because all the stuff is new in the market And we're we're just now seeing this come out Okay, so here's here's a a business case. We're just taking a look take a quick look at you know What is driving this these video rollouts? So you know saving money going green not having to save on travel costs Wacovia as a result of their tells telepresence solution cost cuts and And then IP video surveillance We're kind of taking a look at these video analytics applications that you can do programmable User-driven analysis automated on DSPs and co-processors that are on the video surveillance cameras Okay on the IP video streaming applications We have America's team The Dallas Cowboys brand-new stadium awesome and We've got a lot of stuff in the press about the Dallas Cowboys. They have an all IP video network It's this new Cisco Stadium vision technology Cisco's partnered up with the Dallas Cowboys and supposedly every single TV IP TV ever the video boards and everything is all has an IP address So what does that mean for us a lot of fun? Now the Cisco Stadium vision is like targeted revenue streams where they can like customize the whole View of all the IP phone all the IP phones and all the IP TVs They can customize that for whatever the event is if it's like it if it's like a Cowboys game or if it's like a concert and so forth The two 60-yard lawn HGTV video boards are the largest in the world For 40 million dollars. They're manufactured by Mitsubishi Yankee Stadium is also doing this as well Toronto Blue Jays Okay, let's take a look at some some example you see attacks Now we're looking at is the video replay attack where we can play we can replay Thank you, Coupe, which appreciate that.  Hey? Hey Coupe comm check it out. Good guy Video replay we can do a video replay against an IP video surveillance system by placing a safe video stream and creating the blind camera and Then while the bad guys are seeking and doing the bad stuff we can also we've actually seen some people do this We can Record the CEO in the middle of like a conversation We had one guy use UC sniff to do this and he showed a CCO that that he had recorded the live Conversation, but you can actually replay that so imagine if like in the middle of an important conference call There's like a previous conference call from two weeks ago and the CEO is like saying the same thing little strange Okay, IP video hijack. We're calling this video interception video denial of service So we're intercepting the video and then we're replaying. We're playing whatever we want whether it be replaying a previous like AVI Or taking a random I AVI clip and playing it against the target video session And then we have the video eavesdropping example that we just talked about Okay, I want to do like a overview of UC sniff now UC sniff is our next-generation VoIP sniffer and I want to walk through like what's what the progression of UC sniff and what's happened with UC sniff First of all, there's no other security software that can decode g7 22 audio code Automatically if people who try and use wire shark and edder cap When they're doing their voice sniffing in a pen test you you're limited because you can't actually reconstruct g7 22 This is the first security code that does g7 g7 22, which is the new codec That's a showing up in all the new avaya and Cisco networks Also, you see sif the very first we released this right after Torcon Combined to man-on-the-mill art poisoning Automatic vlan hop and auto constructs forward and reverse into a single way file for both g7 11 and g7 22 all of this done automatically Another thing is we have a target mode that we introduced and we've done this in a pen test We can actually intercept unity Cisco unity voicemail passwords. We can steal voicemail passwords And we do that by intercepting the skinny keypad button messages So the design of UC sniff is a little different because we we basically combine the signaling and the media together We don't actually start eavesdropping on the RTB media until we've detected that a call has started via the signaling So we use this sccp or a sip to detect that that started Then we close down the RTB dissector after we know that the call is ended the result of this design is We can tell who is calling not just random IP IP streams We can actually if you see the screenshot here, we can we can reconstruct like who's Tied into the corporate directory like the CEO is calling the is calling someone else and In security testing the reason why we did this is time is money with pen testing And I don't want to spend like a lot of time like trying to search you away files and so forth trying to find what I'm looking for So another new feature of UC sniff the very first feature with 1.0 was we actually Mimic the entire behavior of the phone and this is the phone on the left to download the corporate directory and we loaded into memory of the Tool, so we're actually targeting corporate VoIP users based on their name or their directory entry and in the corporate directory Now UCSIF 2.0 when we released this February is the first ever IP video sniffer So there's no other tool out there doing that right now We we decode the H.264 video codec, which Arjun is going to go into in detail So we didn't stop there. We're going to keep on going on this April 2009 we released another version that could eavesdrop on Microsoft OCS I am conversations Because we they use the sip subscribe message We have support now for a via sip as well. We we stress tested that in our lab We've actually enhanced the art poisoning with unicast our requests We're going to talk about that in a second and now we have support for g7 11 a law codec So the gratuitous art thing is really really really cool stuff We actually were researching and we found that like these nice 79 85 video IP phones That we couldn't actually art poison them unless we sat there with UCSIF for 10 minutes So we designed like unicast our request which actually speeds it up now We can do art poisoning like immediately We just hit a button and they're art poison We found the same thing with a via IP phones. They actually don't advertise a feature But you cannot art poison a via phones at all unless you use unicast our request But also we ran into a problem because the unified IP phones have a garb disabled feature Which we're going to talk about here at the end and that really kind of stymied us in a lot of things So UCSIF 3.0, I'm going to get into this a second We have a GUI now. We have a windows port. We have windows VLAN support thanks to Arjen We're working on a real-time video monitor where you can actually like eavesdrop live and see like both ends of the reverse and forward video We actually built Cisco UCM 7071 support that was not even like Didn't work at all in the old versions of UCSIF so we're going to release this in a second All the new deployments are 7071 and then we have garb disablement bypass I'm going to run out of time here garb disabled is the feature that I was telling you about and Okay, so so garb disabled is Basically preventing us from art poison the connection from the phone to the network We can still do the network to the phone But when this feature and this is the default now in new deployments So you're basically unless the phones are on the same VLAN We're going to get to a second how we defeated that but basically no successful art poisoning means no man in the middle condition and We can only get the downstream connection coming from a remote VLAN into the phone But we can't get any of the we can't reconstruct the entire media especially for the phone going to the network in a deep in a default config so Basically basically we devised like a new feature and What we did is we're going to beat the race condition on the phone Because we can actually predict when when garb is disabled what happens is the phone will send an art request As soon as the two RTP peers right so as soon as the phone, let's say the both phones are on the same VLAN They're going to send an art request right before the RTP media starts So we can actually we actually program UCSF to look for a message called start media transmission Which is basically the server telling the phone who the remote RTP peer is right So when that happens, then we know we can actually construct our own Spoofed unicast our reply packet and we can actually flood both phones And so that's how we're winning. We're winning the race condition. We actually are poison the phones that way So this is this is the entire process here And it's the new feature. It's dash dash garb disablement bypass and that's going to be released with UCSF 3.0 So with but with this though if both phones are on the same VLAN We can definitely reconstruct the media because we can we can use this feature to beat them, but The phones there when they they only send our request when they boot up and talk to the server So like when they're talking to remote peers, we can't we can't defeat that right now But that's another story. We actually can but we're going to get into that later So like I just said we can't we can only get unidirectional if it's remote peers in another VLAN Okay Hello guys I'm going to talk about the UCSF development and show you a demonstration of IP video use dropping using UCSNF So UCSNF GUI we developed it using the juice libraries So juice is a C++ class library for developing cross-platform applications So it's really good for creating highly highly specialized user interfaces and for handling graphics and sound So it's really easy to create a GUI application using the juicer because like the juice libraries come with Application called juicer and it also has links at some sample demo applications So why we selected juice libraries for developing the GUI? We needed a cross-platform C or C++ application so that UCSNF GUI looks the same way in Mac Linux and Windows so We are working we are currently working on porting UCSNF to Mac So UCSNF Windows port so we ported the UCSNF Linux code to Windows using the MinGW So MinGW stands for minimalist GNU for Windows So basically it ports all the GNU GCC and the GNU binutils for development of native Windows applications So creating a voice VLAN interface on Windows So actually creating a voice VLAN interface on Linux is pretty easy and straightforward But on Windows we have to like follow the toughest procedures by developing to network drivers So we have to develop NDIS protocol driver and an intermediate driver Using the Windows driver development kit. So we will be releasing these two drivers as a separate package along with UCSNF So what is NDIS? So NDIS is a Windows network driver interface specification so Yeah, so we use the NDIS protocol driver for squaring and setting the dot 1q tag on the Ethernet interface So we can also use the NDIS protocol driver for Sending and receiving raw Ethernet packets on Windows. It can be used like libnet But but it's like more programming than using libnet So installing NDIS Prod. So we used an open source tool for installing NDIS Prod So it's called Prod install you can see a screenshot of NDIS Prod getting installed So starting the NDIS Prod service. So you just need to execute net start NDIS Prod So the NDIS Prod is installed as a service. So just started from the Windows command prompt So we will be like all the steps will be automated before we officially release UCSNF So the IM driver. So What does the IM driver do actually so it creates the actual virtual interface for both the wired and the wireless connection So this virtual interface will be tagged with the voice wheel and ID and the interface will be a part of the voice wheel and So installing IM driver. So we added the support for Installing and uninstalling the IM driver on the open source and this Prod tool So here's the interesting thing Decoding video support on UCSNF. So UCSNF decodes the H.264 content from the RTP payload format So this this decoder is compliant with the RFC 3984 which is the specification for the RTP payload format for H.264 video codec So then UCSNF creates a raw H.264 file format Using the decoder H.264 contents So but this video file is only playable using VLC and M player and it does not have any audio It's only a video only file So if you have if you have configured UCSNF with the ffmpeg library support UCSNF Adds an ABI container to the video files that it creates and it also marks us Audio and video together using the ffmpeg libraries So this ABI file can be played using any famous like or well known Media players including Windows media player Here's a screenshot of the new UCSNF GUI just an overview Here's a very cool animation So here's a cool animation that shows how UCSNF works. It's pretty simple and very basic So all you need to do is like unplug the phone from the Ethernet wall Plug in UCSNF UCSNF uses CDP is a Cisco discovery protocol for creating a for finding the VLAN ID and for Creating a VLAN interface Then it uses DHCP to get an IP address in the voice VLAN Then it orbs scans and art poisons the voice VLAN So at this point UCSNF is a middleman like it receives all the traffic from network and forwards it to the right destination clandestinely So for any active call that comes through UCSNF stores the media To a media file and then it forwards it to the right destination This is how pretty much UCSNF works So now I'm going to show you a demonstration of IP video use drop in using UCSNF the targets of the two Cisco 70 and 85 phones Let me start UCSNF This is UCSNF So I'm selecting the interface to VLAN hop on to sniff the wipes wipe traffic I would start the end-to-sport service I thought to do that We're gonna need a volunteer here in a second. I'm selecting the man in the middle mode So there is an option to VLAN hop So there are like three three ways to VLAN hop by spoofing CDP or by sniffing CDP or by specifying the VLAN ID So spoofing CDP is the fastest way to learn the VLAN ID and to VLAN hop So I want to download the corporate directory So in a Cisco network Makers of the phone is an authentication token for downloading the corporate directory So you can get the markers of the phone from the from a small label on the back of the phone Or from the network configuration settings if the screen is unlocked So I have memorized the MAC address So there are two man in the middle modes number one is the learning mode and second is the target mode So in learning mode UCSNF or poison all the hosts in the network and then it use drops on every phone call But in target mode we can target like specific users and then use drop only on phone calls to one from that user We recommend using the target mode Because the network impact is really low for during penetration testing or security assessment So Jason is going to talk more on this after the demo So I'm enabling unicast Rpreq was poisoning I'm starting UCSNF So it has discovered the white VLAN which is 200 and it's waiting for an IP address There you just downloaded the TFTP configuration file for the marketer specified. It's also downloaded the corporate directory So here's the directory list. It's the same as you can browse through the phone Here's the host list It's the active calls tab. There are no current active calls It's the media files tab So which shows the current media files in the current working directory. So UCSNF as a built-in audio player We're also working on building and we're also working on a video player as a plug-in Here's the target's list. So we need a volunteer to make a video call with Jason So there you go UCSNF has created like three three media files. So number one is the bi-directional audio stream Let me play that It's not playing it's playing, but it's not Let me play the video files Here's the forward direction video file from the calling phone to the call party There you go Hello, you know, we're gonna put it up on YouTube later on tonight Here's the reverse direction video file. I think your audio driver is messed up. It's not working Give us one second we're just getting back set up here so we can we can jump on to the next one so what we have here is we're gonna be talking about video jack next and Video jack is our like IP video interception and replay tool It's like hijacking IP video and it's basically like a cousin tool of UCSNF. It has man in the middle feature supports and What we're using is one of our we're gonna be targeting unidirectional video streams Looks like it has a problem. So you're gonna have to Okay Okay, so video jack was released of February 2009 with along with the UCSF video to support It's a free assessment tool hosted on Sourceforge and you can go download it right now But we're about to release this new version of video jack here right after Defcon But it is this first security assessment tool to support h2s h264 even before UCSF We were using video jack all the time. We first started targeting the two seven and ninety five Cisco unified Video phones and now we just moved into the realm of video surveillance security. So we're gonna be talking about this 1080p high-definition video surveillance camera Cisco 4300 series camera. Did you reboot the surveillance camera? Let's go ahead and do that. Let's give it a second Okay So the new features of video jack is it can it can replay an avi avi file and a continuous loop It can do a targeted video DOS against a random avi file that we select which is essentially the same attack But we can we can actually actually also take a raw h264 file and replay it against the phones So we're working on getting that going against the surveillance camera Can you talk about this while while I work on this? So I'm just going to talk about some trivial challenges we face while developing video jack So number one is finding a valid h264 RDP stream It is very easy to find a h264 RDP stream if we can intercept the signaling on the session being negotiated but what happens is like Initially the session and the signaling gets negotiated like at the very beginning and it does not happen very frequently after once the session is Established so particularly in the case of IP video surveillance camera. So we cannot So particularly in case of IP video surveillance camera like The media the media could be streamed to the destination like for days without having any Signaling taking place. So we thought like how to how to find a valid media RDP stream without any signaling So we came up with a module that intelligently detects Media stream just by fine just by looking at the IP and the UDP parameters and the RTP version And the RTP payload type and the SSRC and and also the monotonically increasing sequence number and timestamp values So we do this like for a periodic interval of 15 to 20 packets and And if the RTP and if the RTP packet matches this matches any of them one of the RTP stream We try to map it to a valid RTP stream So here is a screenshot of Here's a screenshot of a sample capture of a session getting established between an IP video camera I'm monitoring endpoint. So here you can see RTSP and STP which which exchanges the session and the codec parameters And here is also the H.264 RTP media codec So H.264 payload format and fragmentation There are like four types of H.264 RTP payload formats number one is the single Network abstraction layer unit number two is the fragmentation unit number three is the single-time aggregate packets and multi-time aggregate packets So what a H.264 client does is if the H.264 payload size exceeds the MTU The payload will be fragmented at the H.264 level. So these H.264 formats are called FUA or FUB But some H.264 clients like the Cisco video phones They do not handle this FUA or FUB packets. They just drop it So for a video jack attack to work successfully against this 70 and 85 phones So we automatically convert the FU type payload to a single NALU type payload so and then we also fragmented at the IP level so that the so that It works perfectly. So this feature of video jack make sure like video jack works against like every H.264 video client so Video jack also uses the FFMPEG libraries to convert the ABI and the raw H.264 file format to RTP media stream So the converted RTP media stream is Will be initialized with the original RTP streams SSRC payload type Increased sequence and timestamp values and spoof source IP and UDP port of the valid source center so So just an overview of a video jack. It's a hundred out four. I just pinged it You should be able to connect to it So we're reconnecting to the surveillance camera and this is actually a Cisco web ActiveX control web application and it basically streams over RTP. So this is not like HTTP that we're doing here We're actually streaming over RTP negotiated via RTSP Looks like we're going to come up here It's okay So let's just talk a quick overview of video jack. We're selecting right now a one-way audio stream that we're targeting We start the attack and as soon as we start we're blackholing the valid RTP packets from the valid IP Then we select the AVI or the H.264 file and then we're using libnet to reconstruct the H.264 RTP packet we use like the SSRC the timestamp values and other values of the drop packet So we're like we're basically is a very intelligent attack We're taking everything of the valid drop packet and we're recreating it But we're putting our own custom H.264 payload in there The video interception like I said can be a replay or a random movie clip And then we target the video device and send it at the destination RTP port So here's a little animation to kind of show this First off, you know on the network we have the streams the valid H.264 stream The video jack attacker has to have physical access to the port now This could be in a physically remote location and there's a misconfiguration where the VLANs a member of the same VLAN Where the where the video network is so once he basically does the art poisoning attack He creates the man in the middle condition now the packets are going through the attacker But the attackers just silently fording this on he's not doing anything at this point Then when he hits the button to start the attack with whichever file he chooses Then what happens is is he's actually dropping that packet. He's constructing his own packet and Thus the attack works that way Okay, here's our target right up here. It's kind of hard to see right here But it's it's a beautiful little new 4300 series IP surveillance camera It's a 1080p high definition. We bought it from a Cisco video surveillance reseller It uses RTP for port negotiation It does support security features like it supports encryption SRTP by default. It's not enabled And it supports 802.1x as well. So like I said, we're using the web application to stream stream it over Okay, so here's for our demo here now to get it get us in the mood for this I have to play this for a second Okay, so they basically took the Faber J egg And it was it was the type of attack that we're gonna demonstrate here Here's our Faber J egg the little water bottle over here Okay, let's give this demo try Works all right Let's let's start video jack So first thing we're going to do is we're going to capture the safe video stream So we use UC sniff to capture the safe video stream We're running wire shark So we're also going to run wire shark and we're going to capture the into a p-cap the traffic with wire shark We have to sample the traffic for about 20 seconds So we're gonna we're gonna need another volunteer So we're on this other laptop in the attacker laptop. We're capturing this So this is like a real surveillance camera here. It's watching the Faber J egg right over there Okay, so you see stuff has finished its work, let's hope that we we captured a good video stream Blot up Okay, Arjun saved off. We're video jack teammates here. We saved off blot up p-cap So right now I'm gonna create I'm gonna use a tool called video snarf Which is a new tool that we're introducing that basically takes as input an offline p-cap and it basically detects all the video and audio streams and Outputs them into separate files So if you're like a network administrator or and you have a monitor span session and you want to actually see all The video and audio going you can use video snarf and we're gonna release this in a little bit, too Also, you can use like eder cap and wire shark if you don't want to use UCSF You can use video snarf eder cap and wire shark Okay, so we've detected a couple streams here Now we're using ffmpeg to convert the h.264 raw file into an avi file So can I get like a volunteer? Let's try and get a girl this time any any girls Anyone anyone oh We do have a girl. She's coming up. All right Round of applause Okay, you're gonna be like the person stealing the egg say we're Don't do anything until we tell you exactly what to do. So go go right over here So ffmpeg is doing its work And we're ready to start the video jack attack Okay, so why don't you like put your hand like here and just like show that put it in the water See now you can see your hand You can see that like a video surveillance camera would like capture that so move your hand out Okay, now move out a little bit. There you go. Okay, so video jack is detected stream We select other We're gonna do a looping attack and we're gonna select replay dot avi now watch the screen here I don't know if you guys notice anything maybe for a split second there There's a problem with the avi file, but now go ahead and reach it and take the water bottle Nothing let's stop the attack Water bottles water bottles gone Let's try it one more time.  I'm enabling unicast our breakfast poisoning. So yeah, it's ready to go Let me make a video call Meaning Yeah, so I press F to find an active video stream So I find one from the extension eight thousand to the extension eight thousand one I select the video stream now. I can do a very precision attack by attacking either one of the two phones I'm going to attack the phone of the extension eight thousand It's the phone on the left So it's a seventy nine eighty five model. I'm just going to do a one-time attack. I'm playing the movie clip Italian job There you are I'm stopping it. So I'm going to target the next extension. It's eight thousand one the same procedure there you go So I could have played like a pre-recorded video conversation a pre-recorded h2 64 video file or any dirty movie or active video conversation Thanks, man So imagine the impact of this at like a I mean basically you have to monetize this attack And I don't believe attackers attack for for no good reason other than graffiti But you could do this at like an entertainment venue like very high-profile event Okay, so let's let's jump on to the end here at the exciting void pen testing lessons learn Okay, so I've been using UCSIF this way doing on-site pen testing for a while And it's something I've been meaning to tell a lot of people. I never run UCSIF in learning mode I always run it in target mode and one of the problems you're running to is like when you're doing the pen test You want to target like a remote art remote IP phone, but you really don't know the IP address of the phone So what you can do is is you can take a hub in an environment where you're doing your pen testing and you can share the hub with the attacker's laptop and you can pick up and find any user in the corporate directory and You basically call that user and then you use wire shark on attach to the hub and you find the IP address of the remote phone Right, it's not something you really think of but it's very effective Because normally when you're plugged into the ethernet switch port You really there's really not a way you can find the remote IP phone unless you kind of finagle yourself like this way So I find the IP address and I create this file targets dot text on the phone Within UCSIF working directory and then I specify UCSIF in targeted user mode And what it does is we select from a menu. We select the user UCSIF takes care of the front end for you And now it's extremely low risk of service impact because all we're doing is targeting the traffic between that phone And the rest of the network so if something crashes It's only if it's not going to impact rest of all the IP phones on the network So it's a very silent effective attack and this is the way I recommend it So it's kind of like a little tips and tricks that we learn running UCSIF Okay, now this is really really cool. This is like I'm saving the best for the last how much time do we have? Okay, so we were engaged and there was a viper security consultant that was in Europe just a couple weeks ago And basically they had it was a UCM 7.1 brand new employment. They had gratuitous ARP disabled Now I've actually talked to Cisco p-cert about this. I've already like communicated this. This is not something that's That can't be protected against so it's something that can be remediated by just turning on security features But we couldn't intercept skinny keypad messages and they had the garp disabled feature on so the garp disabled looks exactly like this perfect Garp disabled was no and I talked about this before what this means This means I can't get the any messages from the phone to the network So I can't get the media from the phone in the network and I can't get anything anything that the user dials like and it's really nice To be able to steal voicemail passwords So what did we know? We had to figure out a way to defeat this We knew that garp enabled is a setting that's managed server side We also knew that the Cisco unified phone downloads the configuration file via TFTP Which tells the IP phone how to configure itself? So basically this Configuration file was everything that the phone used that it parses and it learns how to configure itself So and it's only boot and it's only downloaded when the phone boots up Could there be a way for us to force this IP phone to downloads configuration file? This is what we figured out We figured out a method to do this with UC step We call it the TFTP man the middle modification attack. What we do is is we immediately start we target the phone We create targets that text we launch UC step with the new feature that we created for UC step, which we're about to release First off what we do is we drop keep alive back messages Now this is a heartbeat mechanism between the phone to the server But we can't intercept what's from the phone and network But we can intercept the return traffic back to the phone So we start blocking the keep alive back message right from the server to the phone no matter where the server is Now all of a sudden what the phone will do is it'll think that it's lost registration So it'll try and re-register to the server when it does this It actually does a TFTP get for its configuration file Well, guess what when it does a TFTP get the return traffic we can add an RT We can add a TFTP dissector Okay, so we capture the UDP stream on the way back and all we do is look for and intercept that Gratuitous ARP setting so we take it from whatever its setting is one and we change that to zero to garp enable so then UC SIF does its work and Finish Cisco the phone downloads finished parsing the file and now it has the new configuration Garp enabled. Yes So this all happens in less than 30 seconds If users watching the phone they might be able to catch it But they might not think anything of it and all you have to do is is wait until the users go home for the day And you target each phone pick it off one by one and you when they plot arrive for work the next morning They have gratuitous ARP enabled on all the phones in the environment We can add new features onto this when we come up with new ideas So we basically poem the phone we can change anything on the phone. We want to I'm gonna show and like I said You can totally remediate this following Cisco security best practices now I'm gonna show one little quick video of this actual attack. Oh It just started actually There we go Okay, so I'm going to the phone right now and I just I'm finding its IP address 200 dot six and then I'm going to its device configuration and Gratuitous ARP is no We're just verifying that on the phone and then we go to UC SIF when we launched with the new feature We select the targeted phone UC SIF ARP scans its VLAN hopped Now it's listening for traffic. It's looks listening for that drop for that keep alive a message most important part of the Con So it takes a second here See dropping the keep alive act all of a sudden the phone loses registration on the left Now the phone is actually like going out via TFTP and getting the new configuration file We're going to intercept the return traffic from the server the third file coming from the server to the IP phone and a couple seconds here, it's going to Watch the phone. It's going to turn and we just on the right just modified the setting now We go into the phone. It's re-registered and New configuration Gratuitous ARP enabled. I guess that's really it Great time being here. Thanks for everything and we'll be in the Q&A room. It's room 104. We'll be there for about 20 minutes


Hello guys, so this video is just an answer to the question asked on my previous video So in the previous video, we have seen the bottom navigation bar in Flutter So I got a question that if I press switch to another screen in the bottom navigation bar So will the state would be maintained for the screen? For example, if I want to maintain this scroll position So will it be maintained? So I said no it will not be maintained So in order to maintain that you need to do one extra thing. So I ask for the video by this person So let's go to the project and see the same So in this project if you go to favorite page, you can see it is a scroll level and Let's say I want to keep the scroll position till this if I go back and go back to favorite and you can see this position is not maintained It is scroll to the beginning. I just go here This is in the bottom and go to the home page come back and you can see it is Not maintained. Same way for setting page. We have this. I scrolled it to the privacy and security Go to home page Come back and this scroll position is not maintained So if you want to maintain the scroll position, there is another class we can use So just go to your scroll view, whatever it is So I'm using here for the favorite page. So you have to use the key There's a key property. So for that, we have to use one key that is page storage Key Okay, so page storage key and here you have to specify some unique name So let's give it fav here And copy this Save this and go to settings page Same way. I will go to the list view and use the key property And assign the same over here. So I already copied And here make sure you're not giving the same if you will give it the same So same key would be maintained and the position will be maintained for the same two screens or multiple screens So I just make it with settings. I will Let you know by putting it the same so that you can see what is happening with the same key Okay, so now if I scroll down to the privacy come back to home And go back to settings. You can see this scroll position is maintained Same way for favorite. We have added scroll down is your phone charts So go to home Come back And you can see the scroll position is maintained And by the way, if you put it the same key, we have a problem here. Let me show you So make sure save this If your key is same, you may face this problem So for example, I just scroll it to the bottom If I go to the settings I just scroll it I go to the home Come back the position is maintained But if I go to home, you can see this is already scrolled to the bottom If you scroll it up I go to the setting You can see it is also scrolled up if I scroll it down I just go to this favorite and you can see it is already scrolled to Down So make sure every of your list view whatever page you are using this storage key. It should be unique So that is all for this video. Thank you


Mobile app links in Moodle 3.4. Links to the app in the footer and profile page are now available. The official Moodle mobile app is a great way for learners to access their courses anytime, anyplace. Admins can now encourage course participants to download and use the app with a useful link in the footer of the site, as we can see when our student mark logs in. This link can be customised to link to your organisation's own branded Moodle mobile app instead. When student mark views his profile, it says the site has mobile access enabled but shows he's not yet using the app. Mark simply clicks the link to download the app. And then, like student Barbara's profile here, it will show mobile app connected, meaning learning can continue on the go. To summarise, links in the footer and profile page encourage use of the Moodle mobile app.


fetchwydd ei rôl i chi i chi, rydyn ni wrth ymdeithas unig a rydyn ni'n byw i gyd yn ysgrifennu'r siŵn o wahanol i fwyaf ar hyn o'r ddefnyddio'r gweithio'r gweithio'n gyffredinol o'r wabaeth o'r peth yn rhywbeth i mlynedd mewn gwahanol o wahanol a'r gyfer amserion ymdodd, ond rym ni yn ei ffryd. Rwy'n rhaid i hynny oherwydd cael pwysoedd ymddun yn ei wahanol. Felly mae halu ai fod y bydd ymdyn nhw'n mwy o'n grwyl Yn ddiddordeb yng Nghymru, ond mae'n ddiddordeb yng Nghymru, a ddiddordeb yng Nghymru, yna y system? Nid yw'r system? Yn ddiddordeb yng Nghymru? Rwy'n ddiddordeb am ymlaen ni. Yn y ddiddordeb yng nghyrch, yna ychydig y gallwn ni'n fwych chi'n fwyllt. Y bwysig yng nghymru, mae'n ddiddordeb yng nghymru o'r politicio yn gyfnodd, yna ei ffamiliau i ddiddordeb yng nghymru yng nghymru, what museum work is about and we want to make them work. We don't want to pull it too hard because you don't know what's underneath and it might be harmful for the art piece and you unfold it. You do have to keep that in mind. If I touch my hair it might be greasy or I might have put something in it and touch the work and it's stained. You can see that the glass has to be cleaned. I would say it's secure, so I would take that. I think if we truly understand how things work and why people working in the sector are doing the jobs that they're doing and understanding for ourselves the challenges, the everyday challenges working behind the scenes, I think we can be better advocates for the sector. So this is Julie, I would like to meet Denise. I'm a bit nervous. Yeah, I can really know. You have to push the button. Now you did it. She wants to pay by card. You want to pay by card? Bitch. Winkle cards. Shop cards. What do I do now? Nope. Oh look, here it is. And a receipt. That's yours. Thank you very much. I did it. To me a public institution like a museum is maybe an example of the last piece of public space. And because of that I think we should try to convince as many people as possible of the importance of that institution for our civilization. I've learnt a lot. It's a great place but it needs friends. Friends in high places. That one and that one. Yes. Off. Off.


Andre Rublev vs. Alexander Zverev is a final group stage match for the AWP Finals for 2023, and both are trying to end the year off with a good win. Andre Rublev comes to the AWP Finals as the number five in the world after having one of his best seasons yet. His best result at the finals is actually last year making to the semifinals and there's a very strong chance of replicating that at this year's event. His win-loss record this year 56 wins 23 losses have won two titles out of his six finals with his biggest title coming in Monte Carlo, winning his first 1000 event there. His best win was against Kasparud in Bastard on the clay courts but his worst loss came at the very start of the year losing to Kokonakis in Adelaide so it wasn't a great start to Rublev's season but he did get better as it went on. His form lately has been good too having only lost three matches in his last 10 matches and losing to Djokovic in Paris and also making the Shanghai Final a couple of weeks ago. Alexander Zverev comes back into the AWP Finals this year as the number seven in the world caused last year being injured around this time so it's been a great rise up the ranks again. Zverev to qualify. His best results winning this title back in 2018 and also in 2021 he'll be able to try and defend that title from two years ago after of course not playing last year. His record this year 53 wins 26 losses winning two out of the four finals that he's played as well. His best win was against Danil Mehvedev in Cincinnati during that US Open swing and his worst loss was actually at the start of the year against Moru at the Australian Open as he was starting to make his comeback. His form lately has been a bit sketchy with five losses in his last 10 matches. We do know that he plays really well at this event and with this round robin format anything could happen. These guys played eight times a four with Zverev leading the head to head five three but Rublev has won their last three matches including a win in Vienna a couple of weeks ago on the indoor hard court so Rublev really enjoyed playing Zverev this year and will look to finish the season with another win over him. Zverev is going to win this one he needs to serve big he also needs to frustrate Rublev by getting a lot of shots back we know how good defensively Zverev can be and we know how crazy Rublev has been this week mentally so he needs to get as many shots back and just frustrate the hell out of Rublev. If Rublev is going to win this one he needs to serve well but he also needs to keep his cool. He hasn't been keeping his cool this week by losing to both Mehvedev and Alcaraz that usually is in the mind where it starts so he needs to make sure he keeps his head if he's going to get a win to finish this tournament. Such an interesting match up both wanting to finish this tournament on a high with a win Rublev doesn't want to go 0-3 and Zverev needs to make it to the semifinals with a win here but I've got to go with Rublev in this one I just think Rublev is going to finish the season off with a high and just take Zverev down especially after what we saw against Mehvedev and Rublev doesn't want to go 0-3 here he's much better than that so I think he's going to get the win here but let me know down in the comments below who's going to win this one


Today, for this session, we'll be discussing managing technology for inclusive education. They say that we now live in an information society. Information technology plays a central position in our production, economy, and society at large. Information and communication technologies now pervade our business and economy, the government, our society and culture, and even our education. In recent years, there have been calls to make sure that the benefits of information and communication technologies reach the people. And this is what we call e-inclusion. E-inclusion means providing access to information society based products and services to all people, including those with special needs or risk of exclusion. It ensures that everyone is included in and gains from developments enabled by ICT. It connotes the right to belong to the mainstream. The concept of e-inclusion has been also applied in education. Inclusive education is the idea that all students are ensured with equal opportunities. It means offering the same level of education to all pupils irrespective of their varying abilities and possibilities. Now, there are several reasons for exclusion. First, physical disabilities. Second, cognitive disabilities. Third, resource constraints. And last, gender. Now, e-inclusion in education is also part of these efforts for inclusive education. It refers to the idea that all students with no distinction have the right to benefit from ICT tools to the same extent irrespective of their disabilities or difficulties. There are several factors in e-inclusion in education. We have accessibility, usability, and availability. Accessibility refers to the degree to which a product, like a device, a service, or environment, can be used both from a physical and cognitive viewpoint by as many people as possible. Now, this is crucial to those who have learning and physical disabilities. Usability refers to the actual clarity and ease of use of the tools, how easy it is to use a particular technology. This is crucial to people with different cultural backgrounds, like those from rural or from urban centers. Availability refers to the actual possibility of having once-on-disposal e-tools in order to fulfill a certain educational activity or objective. This is crucial to those who do not have the computers or internet due to socioeconomic constraints. Addressing e-inclusion in education can take on several levels. First, we have the macro-level interventions. First, like in terms of policy. In the 1990s, there was a change in our policy in terms of the regulation of the telecom industry. These lead to the entry of more telecom companies which led to the installation of more telephone lines and internet connections in the country. We need more of these to ensure more internet availability in the country. There are also different programs implemented by government and non-government agencies to promote digital literacy and also to provide infrastructure in terms of ICT equipment in different parts of the country. And there are also partnerships between different institutions along these lines. And of course, political will is very important to ensure that we are able to implement e-inclusion in education to the fullest. Now for this session, I will be focusing my discussion on e-tools for inclusive education in the classroom. Now to address the problems of accessibility experienced by differently abled, we have assistive technologies for them. Assistive technologies are products, equipment and systems that enhance learning, working and daily living for persons with disabilities. Now there are different types of assistive e-technologies depending on the disability. Like for people with sensory disability, we have voice recognition programs, screen readers, screen enlargement applications, talking book player and audio recorder and player. For those with hearing problems, we have closed caption, speech to text and headphone. For cognitive disabilities, we have picture schedule and calendar, picture based instructions, smart phone with adopted task lists, schedules, calendars, audio recorders and graphic organizers. There are different examples of online assistive technologies that you can find on the web. For text to speech, we have read speaker and TTS reader. For speech to text, we have speech notes and dictation. And examples of screen readers are NV access and usability geek. In most schools, however, the main problem is the lack of connectivity or ICT equipment in the classroom. There are several strategies which we can use to address these ICT resource constraints. First, we can combine offline tools with online technologies like we can share files using USB and you can also install a learning management system via LAN or local area network rather than the internet. We can also identify learning activities where online technologies are essential. Like in the case of collaborative activities, we could limit the online technology used to the research part. Tapping resources outside the classroom is another approach. We can make use of the library or the local internet cafes. The teacher can also use simpler technologies like using texting for student announcements and polls and using a website instead of a learning management system which requires technical maintenance. We also need to address gender issues in the use of ICT in the classroom. Teacher should avoid gender stereotypes in the use of ICT like assigning of programming roles to the males and the writing roles to the females in terms of the learning activities. There should also fairness between the genders in terms of the frequency of the use of the ICTs available in the classroom. And lastly, we have to select gender sensitive digital resources. For e-inclusive education to be effective, our teachers need to develop these competencies. First, technical. This refers to the ability of the teacher to select the appropriate e-tools including adaptive technologies and also understand the affordances and limitations of those technologies in terms of providing access. Second is methodological. This refers to the ability of the teacher to make use of those resources of those tools in promoting active learning. From this session, we have learned that digital inclusion in education provides opportunities for everybody to participate in and benefit from the affordances of ICTs. Assistive technologies can be used to address physical and cognitive barriers to inclusive education. And there are strategies that can be adopted to address resource constraints in ICT and gender issues in exclusive education. Thank you.


Hi everybody, Joe for jasperjasecasebreaks.com coming at you with 2020-2021 Panini Noir basketball four box pick your team at number 10 our last case For the time being just keep an eye on the website for more now the next time we get more Noir Might be at a different price point prices may have gotten up gone up but Just keep that in mind common occurrence after our first round of products that we get for new release day, but No more for now. Thanks everybody for filling up all these breaks since new release day And thank you everyone here for this particular break for buying your spots straight up Appreciate it Steve with double last spot mojo bought the Clippers and the Raptors last before we pulled out teams for those random number blocks Which are right here. Here's one for the Charlotte Hornets So a number block break just for that team and just for this pick your team right here Let's set this over here, and we did what this one earlier in the evening right here Get a block of numbers for those teams for this pick your team keep those right next to me here in fact There's that noir case here Steph Curry on the case Charlotte Yeah, I'm excited for this break too. I want to see some some really nice sneaker spotlight Autographs See let's get some good stuff out of here Let's use this blank card right here kind of hide the hits on top a little bit. So We're both surprised 24 out of 99 Zach Levine that is for Matt and the Bulls We've got a Nicola Vusevich 21 out of 99 for Orlando. That's gonna be for Tyler We got a Jason Tatum frame 14 out of 25. I like that big like Kaboom in the background there Statement edition that does make a statement Tommy with the Celtics there you go Tom 57 out of 75 Marvin Bagley a third As it says clearly states in the description Redemptions even if it's a one-of-one still go to number zero Marvin Bagley that's for Sean and the Kings 49 out of 99 Tyler hero box office relic for Lance and the heat Jordan pool 15 out of 25 Part of the the Warriors sort of bridge logo there. That's looks pretty cool Oh Golden State is a number block team. So that goes to the that that digit right there So it's 15 out of 25. It'll go to Warriors 5 Golden State 5 is gonna be for Joseph Salkin. Oh, there's a thin card here. It's private signings Peyton Prichard for Tommy you and the Celtics David Thompson snapshot signatures 92 out of 99 nice auto for Denver Matthew Oh and a nice Latrel spree. Well sneaker spotlight signatures for the New York Knicks 16 out of 99 And that's for that's a number block So Knicks 6 is Matthew G. There you go Matthew. These are really sharp All right, and the last one here. Oh nice Anthony Edwards rookie Jersey and autograph 55 out of 99 Timberwolves are part of that number block team Timberwolves 5 Joseph Salkin, there you go, Joseph With the number 5 gets the Anthony Edwards Jersey and autograph the number one overall pick that was just the first box nice start second box Sons up to nothing in the NBA finals We've got a redemption on the bottom next box We've got Zach Levine to 99 Matt Daniels with the Bulls We've got Julius Randall to 99 that's for Knicks 8 It's gonna be for Sean Alexi Pokusevsky to 25 Kayla with Alexi 59 out of 99 precious to Chua New Wave jerseys Lance with the heat Jumbo material Kobe White 36 out of 99 Matt Daniels with the Bulls Jumbo material Luca Donchich 5 out of 99 Tommy you Tom you with the Mavs and a Cavs auto drew good and 11 out of 99 Chris Lombardo with the Cleveland Cavaliers Cleveland. This is for you Couple more than the redemption. There's a Jarrett Culver for the Timberwolf 36 out of 99 reigning Knights autograph So Timberwolves 6 is for Matthew Matthew G One more than the redemption. We've got another reigning Knights autograph Laurie Markin and 17 out of 25 for da Bulls Matt Daniels and the redemption. Good luck everybody rookie autographs card 397 and that is C o Cole Cole Anthony Orlando magic that'll be for Tyler there you go Cole Anthony Alright halfway through this four box rate Good luck everybody. Oh, we got a one-of-one coming up here one-of-one base card. It's gonna be CJ McCollum Cameron Johns with the Portland Trailblazers Cardboard dust on the side of that card All right Cameron Johns All aboard the Big Hit Express Out of fives and under getting the train whistle, of course we got Devin Vassel to 99 AJ with the Spurs there's Kevin Love one out of ten Chris with the Cavs some elegant decor on Yeka a Kongu 44 out of 75 Jason Rubin and the Atlanta Hawks New Wave jerseys Isaac a Coral Seven out of 99 for the Cavs Chris We got box office relic Seth Curry Three color relic and not autograph three just a three color patch 18 out of 25 that's gonna be for Sean and the Sixers And here's the autograph three color patch and autograph Tyler Bay 20 out of 99 for Dallas Tom you with the Mavs Few more here raining nights Terrence Ross 89 out of 99 Orlando Magic got Kira Lewis Jr. 19 out of 99 Jersey and autographs Jersey not a graph for Lance and the Pelicans and the last one here is oh nice Patrick Williams 50 out of 99 Bulls picked up straight up by Matt Daniels three color patch and on card autograph Final box coming up. Good luck everybody There's Joe P sons and four he says You're honest still not 100. I don't think so you see his hands on knees a lot. I mean Yeah, that knees bothering him for sure, but hey sons are doing their business Joe P Looks like sons and four There's Desmond Bain to 99 for Tom I got Patrick Williams 69 out of 99 Matt Daniels And we've got LeBron James and Anthony Davis split screen to 25 I mean imagine what he could do EJC if he was 100% Be winning that ballgame for the for the Bucks Bradley Beale 16 out of 99 That's for Andrew and the Wizards Icons memorabilia 36 out of 99 John Stockton No, in reality, it's actually Chris Middleton needs to actually help his team out Tim Duncan spurs AJ There's Matthew Delavadova snapshot signature 25 out of 99 Chris Lombardo with the calves Cleveland, this is for you And there's Zeke Najee private signings for Denver Matthew Oh with the Nuggets and one more and then a Redemption 88 out of 99 triple J Jaren Jackson Jr Tom Tom with the Memphis Grizzlies and the last Hit good luck everybody is our last in the war basketball break for the time being so I appreciate everybody Getting into all of these breaks. I appreciate that shadow signatures the shadow knows It's gonna be S H Shay Gilgis Alexander Shadow signatures. What are these shadow signatures look like? We have a picture of these shadows. I don't think I've ever seen one of these As of yet, we're in cardboard connection.com has a Has a picture of this. Oh, I know what these are These are the ones that are the I see one on eBay the all-white one so I think it's Yeah, it goes this way and it just says noir in the background the card is all white And it's the player and there's like a shadow underneath him hence Yeah, nice one for okc. That's Kayla Garrett with the Oklahoma City Thunder and ladies and gentlemen, there you have it Thank you very much for getting into 2020 2021 panini noir basketball. I'm Joe for jazby's case breaks calm Thanks for watching. Thanks for breaking with us and I'll see you next time for the next one. Bye. Bye


Hey, good morning everyone. Welcome to the session. Let's begin this time with a word of prayer and we'll get into our class Father we thank you so much for this time once again Lord that you have given us to Just come together and study and learn and we pray God that even as we learn That our hearts will be open to your leading to your guidance Lord that Holy Spirit you will Continue to minister to our hearts of God to learn Lord we even as we learn God empower us by your spirit of God We thank you for this wonderful opportunity in Jesus name. We pray Amen All right, so last class we were talking about Spiritual aspects that was yesterday chapter 17. We looked at how Sorry when it comes to church planting We know that the battle for souls is a spiritual battle it's so We can do all our outreaches. We can do all our programs all our events, which is all important But the real battle for souls is a spiritual battle, right? And so we learned about how the devil, you know, he binds people's minds he holds them in bondage he hinders the work of the gospel and He also brings in Things into the church by weakening the church he infiltrates into the church, right? But we also closed yesterday talking about the church's responsibility now The reason we learned about okay, what the enemy is doing is because We know his tactics. We are not unaware of it But we are also Focusing not on the enemy, but we're focusing on what God has done for us. And so through the cross God says, you know, the Lord Jesus says the church has authority the church has kingdom power We have spiritual weapons that God has given us. We You know, we subdue we overcome we can bind we can Use our spiritual weapons that God has given us To you know, build God's kingdom So as pioneers as leaders as pastors of a church This is something that we must be established in we must know in our heart that The victory is already won. The Lord Jesus has Paid the price we are victorious and and you know Just interestingly yesterday one of our Students had come down from Varanasi and I was getting got a lot of time to talk to him And he was sharing about the church in You know, North India there are so you're saying three states in India, right? One is Uttar Pradesh The other one is Jharkhand and Chhattisgarh. So these are three states where there's intense persecution that is happening right now right and apparently he was saying that pastors have been You know locked up for months and years and even when the you know, the Papers go for the hearing comes into the court The judges say no, we don't want to hear this case go to another place and so But it was very disheartening to see that you know pastors and even even Women who are leaders of the church have been put into prison and they've been there for six months a year and more than a year as well But on the flip side, he was saying The more the persecution is happening the more the church is growing meaning more, you know in his entire village 500 people just in this from the beginning of January 2023 500 odd people have given their life to Christ only in his village So, you know, he was saying yes, the enemy is doing a lot Trying to hinder the work or hinder the church But God is still working. So I was so encouraged right of course. I we do feel, you know, a pain for those who are going through You know being in the prison going through this intense persecution, but we look at the other side God is still building the church God is still doing his work It's not that God is sitting back and just watching everything. No, he is building the church And so it was a very very encouraging for me. I just to hear it. Of course, we can't do Open-air events and even churches are meeting in a very Insincluded places in home settings and even in home settings, you know, he was sharing that You know, they don't meet more than five or six people because they get to know and so prayer then they would come in and So all of this is there, right? But Jesus says I will build my church The gates of hell shall not prevail against it. So God has given us Weapons, he has given us authority. So let's get into chapter 18. We're talking about Raying and exercising authority for spiritual transformation, right now As a church When you look at a church I'm talking about a local church, right when you plant a local church. It is very important to engage in Three spiritual aspects, of course, there are many other but three very important is prayer praise and worship Ministry of the word Right. These are the most Important aspects in a church plot, right? I mean when you have a church We got to ensure that these three prayer Ministries of the word praise and worship now, it's not like there's an order all three of them are important And these are basically the foundations of the church now The other things of having a stage and the lights and all of that that is additional right now I'm not saying that's not important. That is important. That's needed But the foundation of the church is not You know the the lightings or the stage. No the foundation is these three Ministry of the word praise and worship and prayer, right? And and so when we engage Um In prayer when we engage In praise and worship What are we doing? We are exercising spiritual authority over those who are lost And we cannot Control or dictate people's choices, right? No, can we manipulate people? We cannot say hey Why don't you come to this place on Sunday and Uh, it's not a church service, but we're just maybe 50 of us meeting together now That's called manipulation like we don't do that, right? each person has To make their own decision To believe in the Lord Jesus Christ none of us As pastors as leaders we cannot Make a decision for another person Now they may come they may ask questions. They may have 100 questions, right? They may want to know That's wonderful, but the decision finally has to be made by the person We cannot force them to do it. We cannot say hey kneel down and pray and let Jesus come into your heart Even if he does it or if he does it by force That is not real change right so Through prayer and the exercise of spiritual authority We make it easier for people to respond to the gospel of Jesus Christ now for example Look at this How many of you, you know Before becoming believers we were just living our life, you know Just doing everything in the world living sinful lives How many of you can testify that hey, I am here Because of the prayers of others Right, I'm sure many of us can say that in my personal life I didn't want God. God was the last thing on my list It was not something that I was looking forward to It was not that, you know, I wanted to learn. I wanted to know about Jesus. I was fine Everything's going fine Oh, but it was the prayers of others It was definitely the prayers of others and God's grace comes in Right, especially when you are hard hearted And, you know, you just know that You know Growing up I was very hard hearted, right? So I didn't want anybody to tell me anything Like forget about the bible. That was the last thing that they would tell me but just telling me anything I didn't want anyone to speak to me um But it was the prayers of people prayers of family members prayers of relatives and Rare groups meeting together praying. I I didn't know that Right, but those prayers what they do is they break Those hard heart, you know, we were talking about how the devil Blinds us, right? He blinds us. He hardens our heart to the gospel. So when we pray That hard heart softly You know slowly begins to break Right, there is territory gained. Why because we are we are slowly But steadily taking ground We're making sure that the enemy there's these certain areas are being broken off You know stage by stage. Okay, uh these spirits that are causing Anger or spirits that are causing this blindness, you know, people are praying for it We don't know it We don't know what's happening. But all of a sudden now six months down the line or one year down the line You're you know, you just come across some somebody telling you about Jesus and you're willing to listen Now that's basically what happened to me, right? I remember this pastor coming home and saying, why don't you come play guitar in church? I said, okay Since it's guitar I'll come Right. Uh, I didn't want anything to do with Jesus. Uh, I said, okay, guitar I'll come But just one year before that there was Nobody allowed inside my house. No pastors are allowed I would put a You know protection there. I said no past no preachers allowed inside my house But what happened is the prayers of others, right people pray people intercede And God begins to work and so while interceding for the lost we engage in two aspects pray that the lord Pray to the lord for his work to be done towards that person or towards the lost, right? Now we're talking about both people and communities and cities and nations right so Pray to the lord that his work and his will and his plans and purposes will prevail for the lost Right If you look at it You know, we study this about fulfilling God's purpose from purposes for our lives God has a blueprint. God has a purpose for every person For every city every town every city every nation. That is a purpose Right, so we pray God let your purposes prevail in this person's life Let your purposes prevail in the city In the nation in the communities let your plans let your purpose prevail So what are we doing? We are beginning to gain territory Now here's the thing that we must remember Right, even as you enter, you know that this is a spiritual battle. You know that you're entering Uh a territory where there are going to be demonic forces All right now never Be afraid of it Right, don't be afraid. Hey, where am I going? Am I? Uh, you know, am I going to bring trouble over my family or is something good?  We are not doing it Right, but the lord is going to do it So don't be afraid, right? It doesn't matter what kind of Uh territory you're gaining into Right, uh, you pray Pray with a thorough tree pray with boldness now. I want to put a little disclaimer here Now if you know that there are certain areas And uh, there's witchcraft. There is Uh occult and witchcraft practices and You know that there the these areas are there in the city Now if you feel that you're not ready to pray for that Right, it's all right Don't pray for it Right, uh, you can just take a step back right pray for other things you can pray for youth There are many other things we can pray for for the youth for teens for Workplaces the seven spheres of influence you can Right now if you're not if you feel that you're not spiritually there yet Right, uh, or there's some kind of fear Inside you it is natural. It's all right You can wait you can pray for other things right and But right there are many things that we can pray for right in the city So you can do that and do is spiritual warfare now establishing God's presence through worship And through exercising our spiritual authority to destroy What satan is doing That hinders people from coming to the gospel right so spiritual warfare right and Paul writes Corinthians Let me just try to pull up that verse here Yeah, uh second Corinthians chapter 10 Sorry verse four. He says the weapons we fight are not weapons of the world on the contrary. They have Divine power to demolish strongholds We demolish arguments and every pretension that sets itself up against the knowledge of God we take And we take captive every thought to make it obedient to christ right so the Beginning passage 10 verse four the weapons of our warfare The weapons that we fight Are not the weapons of the world In another place he says the weapons of our warfare not carnal, but they are mighty in God They bring down strongholds right so remember that when we are fighting this spiritual warfare uh the battles though the The weapons that we have are not carnal member James he writes and he says Elijah prayed And then he gives that whole example and then he ends it by saying the prayers of a righteous man is effective Doesn't say a prayer of a pastor a prayer of a pioneer Prayer of an apostle is effective. He says the prayers of a righteous man All right, so engaging Get your church community engage together right Have times of prayers Some of the things that we do as a church and you if you'd like you can replicate it You can come up with your own plans and uh, some of the things that we do is we had We have 21 days of fasting and worship and fasting and prayer This is in the first Or maybe sometimes it's on the in february first week So the whole of february because in january we have a conference and So february first week, right 21 days fasting and prayer every day as a church Come together pray for People pray for the church pray for the city pray for the nation everything all right 21 days And then after every semester Oh, so that's every six months. We have Five days of fasting and prayer again worship Prayer prayer points. We all pray together Right. So what are we doing? We are We are establishing god's presence. We are through worship We're we're we're trying to tap into Places where the enemy is working and destroying the work of the devil right And if we look back remember the you know initially I used to think You know, why are we doing these prayers? 21 days of prayer. I don't know about 2010 And we would be maybe about 10 people And we 21 days of prayer and five days prayer I used to always think to myself why are we doing this nobody's coming? But then I realized that hey, it's not about that. It's about What is happening in spiritual realm even if we have a 10 15 people there was There was there there is something that is happening in the spiritual realms right and so The way that we can gain ground the way that we can exercise Transformation Is through spiritual warfare And then comes the other aspects right evangelism Reaching out events programs all of that comes next Spiritual warfare is number one Now if we don't pray We haven't spent time and prayer.  He will still work But what will happen is the you know if we are trying to reach out trying to You know tap into a new Place in a city a new area in the city. What will happen is Uh, it's very unlikely that we will not see victory Because we haven't spent time and prayer Right Most likely we'll be like, uh, you know, we may get tired may get weary. We may give up very soon Uh, so it's very important To first have these two in order right prayer Spiritual warfare. All right, so how do we pray for the lost? We learn some of this, um, and I'm sure that You know in lifestyle evangelism we learn so much But let's look at some of these points. How do we pray for the lost pray and ask God for the city as an inheritance And a possession Psalms 2 8 talks about it right ask of me. I don't give you the nations for your inheritance Pray and invite the holy spirit to bring about conviction of sin righteousness and judgment John 16 7 through 11 Uh, it's a wonderful passage john 16 7 through 11. Can we just read that? John 16 7 through 11 I can also read uh, or you can just start with the eight. So John 16 Yes, go ahead anyone can read please 7 through 11 you can read Nevertheless, I tell you the truth It is to your advantage that I go away But if I do not go away the helper will not come to you But if I depart I will send him to you and when he has come He will convict the world of sin and of righteousness And of judgment Of sin because they don't believe in me of righteousness because I go to my father and you see me no more Of judgment because the ruler of this world is judged Yes Yeah, thank you. John. So we see here That when we when we pray and I'm sure we all know about all of this It's good to remind ourselves when we pray and invite the holy spirit to work in people's lives It brings about sin righteousness and judgment We can not do the convicting We cannot right Because even if we can do some convicting that's only going to be You know, it could be a temporary convicting right? It's like Like what parents do to children But when the holy spirit comes he brings a holy conviction And there's a change In a person's life a person can be a hardcore criminal for 20 years And the holy spirit can make him the most softest person Uh, you know after he becomes a believer So we must pray for the holy spirit to work to move to touch people's lives Right ask god to draw them to him to the to him right so the bible teaches us john 644 John 1232 and many other passages. He says if you draw to me, I will draw I will draw my people I will draw them to me And so when we pray god, this is what you said you will draw your people You will draw your children to yourself do it Right then we pray that god will move them Bring them to repentance and to the knowledge of the truth That they will come to their senses and escape the trap of the evil one right so repentance Is again it comes through conviction When we repent of our sins god convicts us we repent of our sins And we begin to walk in the knowledge of the truth of god's work God's word god's promises And we will come to their senses to know that what they're doing is a trap by the evil one Right uh, you know I just thought i'll share this a couple of months back or maybe a month back Very close a good friend of mine Right we grew up together, but he was two years. He's two years younger to me And uh, he was a pastor's son right and Uh, you know, I would keep telling him He knows everything about the bible everything right growing up. We grew up in in church Right, he knew those bible verses everything, but you know as he became a teen he He got into drugs and all these other things and uh You know, uh, many people were praying for him Eventually what happened was he He would always sense that he's in a trap and he would tell me I feel that I'm in a prison cell All right, I keep telling him you see you know everything You know the word of god, you know Uh, the holy spirit is there it is your responsibility.  You're in a cell Because you have I love the devil to put you into the cell and locked it And you're saying devil, please help me out You don't have to ask the devil to let you out you ask god to let you out So I used to keep ministering to him And uh, you know last month Yeah, uh, all of a sudden he died of a heart attack Right and it was very very painful I was thinking about it talking about it very painful Uh, but this is what the devil does He puts people into traps And he puts people into these Craps that are not only physical but also In the mind He craps people he traps people in thinking that you know, uh, they have in prison cells And so when we pray We gotta pray that god they will know the knowledge Of the truth of god's word right Unfortunately, there are people who know the word of god, but they don't know the truth of god's word Right and so we must pray The lord you will speak to them Ask god to grant them a spirit of wisdom and revelation so that their spiritual eyes will open That we they'll be enlightened. They will see the lord They will see the beauty of his word They will see and know the purposes of god now all of these things we can pray for Poor people Right, uh, my heart goes out when I see young people My college students my heart really goes out because I see them Uh, there's so much that The world has to offer So much, you know, when we were growing up There was no phones. There was no social media. I thank god for that But I thank god for social media now as well, but uh, you know, we spend our time, you know, cycling outside or doing something outside But when I look at this generation and look at what's happening Uh, and it's so easy to follow the traps One of our church members came up to me and said I still I I I feel discouraged today. I said what happened And she said You know, she has a genuine heart. Uh, she said nobody Has commented or viewed on what I have posted on instagram It's very easy to say.  You know the enemy is using these subtle small things And she's saying I couldn't I could not I could not read the word. I could not pray. I could not do anything for more than a week Subtle traps But we got to ask god to open spiritual eyes That people will be enlightened that being in god's presence Will will not be a burden something People see the beauty of his word know the purpose know the calling know the greatness of his power you know efficient is one Paul writes so beautifully he says He says what is our identity right?  So we know the worst the laborers The harvest is plenty, but the laborers are few so we need more laborers pray that god will send forth laborers And finally pray for god's power to be demonstrated Science wonders and miracles that the supernatural that the supernatural interventions There'll be visitations of god god will You know there'll be outpourings In places that people will see experience the power of god Now yesterday as i mentioned i was speaking to this young man and he's from Uh varanasi and he was talking to me About some of the miracles that are happening in varanasi Right i said what is happening i asked him what is happening in the church in varanasi apart from the persecutions And people coming to christ how are people coming to christ? people who have cancers Right there are some of them who are on the death bed lame people Are walking Blind people are seeing Right and the way he's saying this He was so You know it was as if it's a common thing Right you're sharing a testimony about how an uh a lady in You know was was blind So she kept coming to church one day she one of the sundays she received healing she went and sat She received healing she went she sat back she said thank you jesus And it's a common thing Right now What do we do sometimes if somebody receives healing? Who's blind we put it on instagram facebook everywhere else Make a big deal out of it. There was no big deal You know they were they pray for the supernatural the supernatural happens And that's what we must do just like in the book of acts we pray god Start small But do it right so as we pray for this god begins to You know just work and begins to You know as a pioneer as a church he begins to really strengthen the church Right. There's the sense of unity Oneness all of this happens within the church even though we may be praying for people outside We're praying for the lost you you sense this You know there's this strength of the lord upon the church Upon the believers as well, right? uh, then Preparing for spiritual warfare Right important truths to remember when we are preparing for spiritual warfare Right, uh, and we know all of this satan has been defeated He has been crushed Has been expelled. He's been condemned. He's disarmed right Colossians 214. I love that was I I keep declaring it. I say hey What does Colossians 214 15 say having disarmed every power every principality And powers of darkness he made a public Spectacle of his victory over the devil Right. Such a powerful verse He said having disarmed he made a public spectacle Jesus didn't just say, you know Hey, uh, you know, maybe in the physical he just met with a few of them Uh after he resurrected from the dead, but in the spiritual he made a public spectacle. He said to every demon every and satan saying hey, you are defeated And satan is powerless right, so right now You and I are in this place of victory Right, so when you're praying for people when you're praying over cities over communities over people Now over your congregation Just just be just stand on this understanding. Hey I am victorious satan has been defeated And many times the devil will come to bring accusations Right. We were afraid maybe for something we have not received an answer or we've not received healing And satan may come and say see you prayed you didn't you haven't received healing Now it does not matter God says i'm the healer if he heals at that moment wonderful if he doesn't heal at that moment God is still the healer That's a don't fall into The traps of the devil right we have complete mastery and dominion over the enemy Right look 10 18. Let's read that verse like that was look 10 18 Sorry 19 look 10 19 Go ahead Behold I give you the authority to trample on serpents and scorpions And over all the power of the enemy and nothing shall by any means hurt you amen Amen This is jesus saying I have given you authority over snakes and scorpions And nothing by any means will hurt you So this is this should be established in our heart That it should be there like it should be really strong in us Know that we are victorious know that we have dominion over the enemy know that we have mastery over the enemy and there is no Work that the devil can do that can bring us into his You know under his authority free. We are not contending for victory again We are we are here to enforce the victory. Jesus already has given us Right so again wonderful We know that we're not fighting for victory What satan and his demons have been crushed destroyed We operate boldly in a sense of authority Right enforce christ triumph Right, you know as a church You may be 10 people in a church Or just a small group And force christ triumph and force christ victory But I remember when uh when we were in Uh Mangalore we were about 7 8 p 7 or 8 of us and Out every day every sunday would say hey, I would make them repeat This is only eight of us Uh So our services used to go on for two and a half hours I guess We were just eight of us. So we would say we would declare This is who I am This is what god did Right and we would declare and declare and declare. We just keep saying it Right. This is what victory that we have authority We are 10 people right now But in the spiritual realms, we are a thousand people Right, you declare it And we would go out in boldness Right, uh Because there's this sense of authority the sense of boldness Right, we would enforce christ triumph enforce his victory over everything that we do Over every door that he opens we wouldn't go in like in a way of you know Uh bowing our heads or you know ashamed but no wherever we got opportunities wherever we went we went victorious We went With our head held high And that will continue to happen Right. So even you as a church we talked about this, uh, you know seven spheres of influence and even as Your church grows your ministry grows Enter those seven spheres With boldness with victory Knowing that you have dominion over whatever's demon that is working in that place whatever spiritual authority that's working You have authority Remember we talked about this Light Well, you are the light. So when you go into places of darkness light is greater than darkness Right. Remember that we are we are protected as we keep all entry points closed Satan and his demons cannot harm us Passes that we always can declare Psalms 91 Right. Psalms 91 is a beautiful sum. A thousand may fall at our side Ten thousands at our right hand, but nothing by any means shall hurt us We're protected Right. Now it's interesting to see here as we keep all entry points closed Remember the devil is like a roaring lion trying to Devour trying to deceive. He's working. He's looking for open doors And so as believers I'm not saying we don't make mistakes. We make mistakes In ministry in church. We will make mistakes Uh, but we we got to go back to god and say god, this is something I did wrong Forgive me. Help me to not to do this again. Help me to change Give me your strength. Let me get back on track Close all entry points Remember paul again says in one of the verses he says don't give the enemy. I don't know if it was paul or peter Don't give the enemy a foothold list. He takes the entire place Right. You close every door Five words are important in the spiritual realm. Our authority is exercised Primarily by the words that we speak The words that we speak are important in the spiritual realm So even if we're you know, we are just praying Right. We get up early morning. We're getting ready to go to work. You're saying He who dwells in the secret place of the most high shall abide in the shadow of the almighty saying sounds 91 I will say of the lord. He's my refuge and my fortress. What's happening in the spiritual realm God is doing his work Right. God is setting his angels It's not like if we don't say that it doesn't he doesn't set his angels. It's just that We are exercising the authority that god has given us the words that we speak is affecting spiritual realms Right and god begins to work So speak words over your city whenever I see colleges, wherever it is Whenever I see colleges, I just say a small price. Hey god There may be about thousand people in this college That's their lives Let them Come to know you. I know it's it's a hard It's a you know, this this world has so much of temptations. There's so much that is their load, but you touch lives Supernaturally we touch them that they will come to know you that you will raise up The five-fold ministry leaders in these colleges Who will grow up to be pioneers in ministry? Maybe a three minute prayer What are we doing speaking words? You're speaking into the spiritual realm Uh and her authority is exercised through the words that we speak exercising spiritual doors Uh, sorry exercising spiritual authority to open prison doors. Uh, so we talked about this one is Establishing god's presence through praise and worship Declare the finished work of the cross for salvation of the souls in the city, right? So Uh again you on the basis of the cross we can stand we can declare we can speak over cities We can declare people are released from the power of darkness And they are and they are part of god's kingdom. We declare it now I know it's a far short. Sometimes you think hey, I'm praying. Where is the fruit or where? Remember your maybe you are the one who's putting the seeds Or maybe you are watering the seeds that have already been sold Or maybe there'll come a time and somebody else will see the harvest Right and and we learned in You know christian history and missions and we saw that how people laid the foundation People put the seeds Right others watered it what god made it grow And so you think of it that way, right? The your labor is not in vain Right identify and pull down strongholds and areas of demonic Domination And so we looked at that right those demonic dominations could be anything suicide drug addiction pornography prostitution child trafficking Murders and all of these spirits that are working Identify and pull down those strongholds Now some of the strongholds may be very subtle right it could be Uh now especially right you have homosexuality have a and the lesbian that is going on and You know even strongholds that are entering churches strongholds that are entering ministry Sometimes the devil can use money as a stronghold into people's lives Right all of these things you identify And you know you pray over these ask god to release His power his light in these places and finally Destroy the works of the evil spirits that are working in people right, so There'll be sometimes places especially if we go into places like not india where there is intense intense idol worship and Idolatry Usually what we see there is manifestations of evil spirits and spirits They control over people dominate them And so we can pray over all of these and And as we do it right we You know we must remember that as leaders remember that you know, it's not only about my church It's not only about okay my ministry When will my church grow? right remember, uh, you know It's kingdom values kingdom culture.  You know that they're not going to come and Be part of your church. They're in a different city. But what are you doing? your You are sowing into god's kingdom. It is never going to be a waste So remember our works, uh, you know our church and our ministries all of that is important Uh, but it's not the size of the ministry that matters It is what we are doing What seeds and the fruit that we are going to bear? Uh for god's kingdom that is what matters Right. So even as we you know pioneer and we build In our ministries or we're planning to start let these Be the focus Right. Let these pointers Uh be the focus of our ministry and out of all of this flows Uh the ministry Right, right any questions any thoughts? All right. Thank you so much for joining this class. Um, we'll catch up next Week. Have a great week ahead Our bless Bye


The vice president Yemi Osibajo has unveiled the official kit of Team Nigeria for the Tokyo 2020 Olympic Games. Osibajo charged the team to always remember that they were standing on the shoulders of giants as they prepared to depart Nigeria. He urged athletes to portray the Olympian ideals of teamwork, respect and fair play. Professor Osibajo then assured the team of the players and support of all Nigerians as it competes with athletes from other nations. Every one of you participating in the games is opening a page in history for yourselves, for your families, for your communities and of course for our great nation. But you will in this endeavour have the assurance of the prayers and the best wishes of all of us Nigerians. You will also carry with you the encouragement of the great exploits of Nigerian Olympians before you. It is now my exceptional honour and pleasure in the moment to formally hand over the Tokyo 2020 Team Nigeria contingent to the Nigeria Olympic Committee and to unveil also in a moment the official outfit and kit of Team Nigeria. I wish you all safe travel to Japan and a safe return home with plenty of medals. And the federal government for the great support we receive financially as well as facilities and improvements. The insolency Team Nigeria is going to Tokyo as a discipline and patronising and we do nothing to challenge the image of our country. Hello, hope you enjoyed the news. Please do subscribe to our YouTube channel and don't forget to hit the notification button so you get notified about fresh news updates.