Project

General

Profile

Mobile Network Assessment Tools » History » Version 12

Karsten, 12/23/2013 05:06 PM

1 1 Linus
h2. Overview
2 1 Linus
3 1 Linus
This is a collection of tools for the assessment of mobile network security.
4 1 Linus
It includes:
5 3 Linus
6 12 Karsten
* "*SIMtester*":https://opensource.srlabs.de/projects/simtester/wiki
7 8 Karsten
Finds configuration bugs in SIM cards
8 1 Linus
9 8 Karsten
* *[[GSMmap-apk]]*
10 8 Karsten
Android application that collects 2G and 3G network traces from Samsung Galaxy phones
11 8 Karsten
12 3 Linus
* *[[xgoldscanner]]*
13 8 Karsten
Linux application that collects 2G and 3G network traces from Samsung Galaxy phones
14 2 Linus
15 10 Karsten
* *[[CatcherCatcher]]*
16 8 Karsten
Collect evidence of 2G fake base station activity (requires Osmocom phone)
17 1 Linus
18 1 Linus
19 8 Karsten
The tools are included in the *GSMmap-live* system, which auto-submits data for analysis at "GSMmap.org":https://GSMmap.org
20 1 Linus
21 9 Karsten
22 2 Linus
23 2 Linus
*****
24 2 Linus
25 1 Linus
h2. xgoldscanner
26 2 Linus
27 3 Linus
Actively collect 2G and 3G traces using Samsung Android phones.
28 2 Linus
Log files can be analyzed with Tobias Engel's "xgoldmon":https://github.com/2b-as/xgoldmon tool, which heavily inspired the development of xgoldscanner.
29 2 Linus
30 2 Linus
h3. Requirements:
31 2 Linus
32 2 Linus
* Samsung Galaxy S2 / S3  phone
33 2 Linus
* Micro-USB cable
34 2 Linus
* Linux Computer
35 1 Linus
36 2 Linus
h3. Download:
37 1 Linus
38 1 Linus
* Source Code (bash)
39 1 Linus
* Live System
40 6 Linus
41 6 Linus
h3. Disclaimer
42 7 Karsten
43 6 Linus
The active tests include an active part. First, your phone will place outgoing calls
44 6 Linus
to a dedicated number. This number will always be busy and never answer in order
45 6 Linus
to rule out voice charges as best as we can.
46 6 Linus
47 6 Linus
Secondly, your phone will send SMS short messages via an invalid SMS-C to
48 6 Linus
an invalid number.
49 6 Linus
50 6 Linus
During our tests we have not found a European network that charges for these
51 6 Linus
transactions. However, we can not rule out that you may be charged in specific
52 6 Linus
settings.
53 6 Linus
54 6 Linus
To control for involuntary charges, we strongly advise the use of a dedicated
55 6 Linus
pre-paid SIM card for these tests.
56 1 Linus
57 1 Linus
h3. Instructions
58 2 Linus
59 4 Linus
# Download
60 4 Linus
# unpack
61 4 Linus
# run:  <pre>sudo ./xgoldscanner.sh -n [telephone number, e.g. +491234567]</pre>
62 4 Linus
Optional parameters:
63 4 Linus
*  -g  conduct GPRS test
64 4 Linus
*  -d  display debug messages
65 4 Linus
*  -o  offline mode [skip log upload for manual submission]
66 4 Linus
*  -3  conduct 3G tests only [skip 2G tests]
67 2 Linus
*  -y  assume "yes" to questions and confirmation dialogues [for automated testing]
68 2 Linus
*  -i  <n> repeat each test <n> times (default is 5)
69 2 Linus
70 3 Linus
h3. Advanced usage
71 2 Linus
72 3 Linus
Use Tobias Engel's "xgoldmon":https://github.com/2b-as/xgoldmon tool to analyze log files.
73 3 Linus
74 3 Linus
h3. Mailing list
75 3 Linus
76 11 Karsten
A public mailing list for discussions and occasional announcements is found "here":https://lists.srlabs.de/cgi-bin/mailman/listinfo/gsmmap
77 2 Linus
78 2 Linus
*****
79 1 Linus
80 10 Karsten
h2. CatcherCatcher
81 2 Linus
82 2 Linus
Display mobile network irregularities hinting at fake base station activity.
83 2 Linus
84 2 Linus
h3. Requirements:
85 2 Linus
86 2 Linus
* Osmocom phone
87 1 Linus
* Osmocom serial cable
88 1 Linus
* Linux Computer
89 1 Linus
90 1 Linus
h3. Download:
91 1 Linus
92 2 Linus
* Source Code
93 2 Linus
* Live System
94 2 Linus
95 2 Linus
h3. Instructions
96 2 Linus
97 2 Linus
# Download
98 2 Linus
# unpack
99 2 Linus
# run: TODO call
100 2 Linus
* TODO command line parameters
101 3 Linus
102 1 Linus
h3. Mailing list
103 5 Ben
104 11 Karsten
A public mailing list discussion is "here":https://lists.srlabs.de/cgi-bin/mailman/listinfo/catchercatcher
105 1 Linus
106 1 Linus
*****
107 2 Linus
108 2 Linus
h2. GSMmap-apk
109 2 Linus
110 2 Linus
Actively collect 2G and 3G traces using Samsung Android phones.
111 1 Linus
112 1 Linus
h3. Requirements:
113 1 Linus
114 1 Linus
* Samsung Galaxy S2 / S3 phone
115 1 Linus
116 2 Linus
h3. Download:
117 2 Linus
118 1 Linus
* Pre-compiled .apk
119 1 Linus
* Source Code
120 6 Linus
121 6 Linus
h3. Disclaimer
122 6 Linus
123 6 Linus
Our 3G tests include an active part. First, your phone will place outgoing calls
124 6 Linus
to a dedicated number. This number will always be busy and never answer in order
125 6 Linus
to rule out voice charges as best as we can.
126 6 Linus
127 6 Linus
Secondly, your phone will send SMS short messages via an invalid SMS-C to
128 6 Linus
an invalid number.
129 6 Linus
130 6 Linus
During our tests we have not found a European network that charges for these
131 6 Linus
transactions. However, we can not rule out that you may be charged in specific
132 6 Linus
settings.
133 6 Linus
134 6 Linus
To control for involuntary charges, we strongly advise the use of a dedicated
135 6 Linus
pre-paid SIM card for these tests.
136 2 Linus
137 2 Linus
h3. Instructions
138 2 Linus
139 2 Linus
# Install application from App Store
140 1 Linus
# Run
141 2 Linus
142 3 Linus
h3. Mailing list
143 5 Ben
144 11 Karsten
A public mailing list for discussions is "here":https://lists.srlabs.de/cgi-bin/mailman/listinfo/gsmmap
145 2 Linus
146 2 Linus
*****
147 1 Linus
148 2 Linus
h2. GSMmap-live
149 3 Linus
150 3 Linus
This live linux system is equipped with all the assessment tools listed above. It furthermore includes
151 2 Linus
It facilitates their use and automatically uploads logs to GSMmap.org.
152 1 Linus
153 1 Linus
h3. Requirements:
154 1 Linus
155 1 Linus
* 64bit-compatible Computer
156 1 Linus
* For each test: Requirements listed above
157 2 Linus
158 2 Linus
h3. Download:
159 2 Linus
160 1 Linus
* Live system image
161 6 Linus
* Source Code
162 6 Linus
163 6 Linus
h3. Disclaimer
164 6 Linus
165 6 Linus
Our 3G tests include an active part. First, your phone will place outgoing calls
166 6 Linus
to a dedicated number. This number will always be busy and never answer in order
167 6 Linus
to rule out voice charges as best as we can.
168 6 Linus
169 6 Linus
Secondly, your phone will send SMS short messages via an invalid SMS-C to
170 6 Linus
an invalid number.
171 6 Linus
172 6 Linus
During our tests we have not found a European network that charges for these
173 6 Linus
transactions. However, we can not rule out that you may be charged in specific
174 6 Linus
settings.
175 6 Linus
176 6 Linus
To control for involuntary charges, we strongly advise the use of a dedicated
177 2 Linus
pre-paid SIM card for these tests.
178 2 Linus
179 2 Linus
h3. Instructions
180 2 Linus
181 2 Linus
# Download
182 1 Linus
# Unpack: <pre>tar xvzf gsmmap-live.img.tar.gz</pre>
183 2 Linus
# Write to stick <pre>dd if=gsmmap-live.img of=/dev/[USB-stick] [bs=1M]</pre>
184 2 Linus
# Boot from stick
185 3 Linus
186 3 Linus
h3. Mailing list
187 3 Linus
188 11 Karsten
A public mailing list for discussions is "here":https://lists.srlabs.de/cgi-bin/mailman/listinfo/gsmmap
189 1 Linus
Please file bugs and support requests through the "issue tracker TODO ":http://opensource.srlabs.de/projects/a51-decrypt/issues/new as they may be of little relevance to the majority of the mailing list subscribers.