Project

General

Profile

Mobile Network Assessment Tools » History » Version 16

Linus, 12/23/2013 05:19 PM

1 1 Linus
h2. Overview
2 1 Linus
3 1 Linus
This is a collection of tools for the assessment of mobile network security.
4 1 Linus
It includes:
5 3 Linus
6 8 Karsten
* *[[GSMmap-apk]]*
7 8 Karsten
Android application that collects 2G and 3G network traces from Samsung Galaxy phones
8 8 Karsten
9 3 Linus
* *[[xgoldscanner]]*
10 8 Karsten
Linux application that collects 2G and 3G network traces from Samsung Galaxy phones
11 2 Linus
12 10 Karsten
* *[[CatcherCatcher]]*
13 8 Karsten
Collect evidence of 2G fake base station activity (requires Osmocom phone)
14 1 Linus
15 1 Linus
16 14 Karsten
The tools are included in the *[[GSMmap-live]]* system, which auto-submits data for analysis at "GSMmap.org":https://GSMmap.org
17 13 Karsten
Also on the live system lives:
18 1 Linus
19 13 Karsten
* "*SIMtester*":https://opensource.srlabs.de/projects/simtester/wiki
20 13 Karsten
Finds configuration bugs in SIM cards
21 1 Linus
22 14 Karsten
A public mailing list for discussions and occasional announcements is found "here":https://lists.srlabs.de/cgi-bin/mailman/listinfo/gsmmap
23 2 Linus
24 1 Linus
*****
25 1 Linus
26 6 Linus
27 2 Linus
28 2 Linus
*****
29 1 Linus
30 10 Karsten
h2. CatcherCatcher
31 2 Linus
32 14 Karsten
The CatcherCatcher tool detects mobile network irregularities hinting at fake base station activity.
33 2 Linus
34 14 Karsten
h3. Requirements
35 2 Linus
36 2 Linus
* Osmocom phone
37 14 Karsten
* Osmocom cable
38 14 Karsten
* Linux computer
39 1 Linus
40 1 Linus
h3. Download:
41 1 Linus
42 14 Karsten
* Source Code TODO
43 14 Karsten
* Live System TODO
44 1 Linus
45 1 Linus
h3. Instructions
46 2 Linus
47 14 Karsten
# Download TODO
48 14 Karsten
# unpack TODO
49 11 Karsten
# run: TODO call
50 1 Linus
* TODO command line parameters
51 2 Linus
52 1 Linus
h3. Mailing list
53 1 Linus
54 2 Linus
A public mailing list discussion is "here":https://lists.srlabs.de/cgi-bin/mailman/listinfo/catchercatcher
55 1 Linus
56 2 Linus
*****
57 1 Linus
58 1 Linus
h2. GSMmap-apk
59 2 Linus
60 1 Linus
Actively collect 2G and 3G traces using Samsung Android phones.
61 1 Linus
62 1 Linus
h3. Requirements:
63 1 Linus
64 2 Linus
* Samsung Galaxy S2 / S3 phone
65 1 Linus
66 1 Linus
h3. Download:
67 1 Linus
68 14 Karsten
* Pre-compiled .apk TODO
69 14 Karsten
* Source Code TODO
70 1 Linus
71 6 Linus
h3. Disclaimer
72 6 Linus
73 14 Karsten
The tests include an active part. First, your phone will place outgoing calls to a dedicated number. This number will always be busy and never answer in order to rule out voice charges as best as we can.
74 6 Linus
75 14 Karsten
Second, your phone will send SMS short messages via an invalid SMS-C to an invalid number.
76 2 Linus
77 14 Karsten
During our tests (in Europe) we have not encounter any network that would charge for these transactions. However, we can not rule out that you may be charged in specific settings.
78 2 Linus
79 14 Karsten
To control for involuntary charges, we strongly advise the use of a dedicated pre-paid SIM card for these tests.
80 1 Linus
81 3 Linus
h3. Instructions
82 5 Ben
83 14 Karsten
# Install application from Google Play app store TODO
84 2 Linus
# Run
85 2 Linus
86 1 Linus
h3. Mailing list
87 2 Linus
88 3 Linus
A public mailing list for discussions is "here":https://lists.srlabs.de/cgi-bin/mailman/listinfo/gsmmap
89 3 Linus
90 2 Linus
*****
91 1 Linus
92 1 Linus
h2. GSMmap-live
93 1 Linus
94 14 Karsten
This live Linux system is equipped with all the assessment tools listed above. It furthermore includes TODO
95 14 Karsten
The live system facilitates their use and automatically uploads logs to GSMmap.org.
96 2 Linus
97 14 Karsten
h3. Requirements
98 2 Linus
99 14 Karsten
* Computer capable of running 64bit Linus
100 14 Karsten
* For each test: Requirements listed in the respective tool wiki pages
101 6 Linus
102 14 Karsten
h3. Download
103 6 Linus
104 14 Karsten
* Live system image TODO
105 6 Linus
106 14 Karsten
107 6 Linus
h3. Disclaimer
108 6 Linus
109 14 Karsten
The tests include an active part. First, your phone will place outgoing calls to a dedicated number. This number will always be busy and never answer in order to rule out voice charges as best as we can.
110 6 Linus
111 14 Karsten
Second, your phone will send SMS short messages via an invalid SMS-C to an invalid number.
112 6 Linus
113 14 Karsten
During our tests (in Europe) we have not encounter any network that would charge for these transactions. However, we can not rule out that you may be charged in specific settings.
114 6 Linus
115 14 Karsten
To control for involuntary charges, we strongly advise the use of a dedicated pre-paid SIM card for these tests.
116 2 Linus
117 2 Linus
h3. Instructions
118 2 Linus
119 14 Karsten
# Download TODO
120 2 Linus
# Unpack: <pre>tar xvzf gsmmap-live.img.tar.gz</pre>
121 1 Linus
# Write to stick <pre>dd if=gsmmap-live.img of=/dev/[USB-stick] [bs=1M]</pre>
122 2 Linus
# Boot from stick
123 2 Linus
124 3 Linus
h3. Mailing list
125 3 Linus
126 3 Linus
A public mailing list for discussions is "here":https://lists.srlabs.de/cgi-bin/mailman/listinfo/gsmmap
127 14 Karsten
128 14 Karsten
Please file bugs and support requests through the "issue tracker":https://opensource.srlabs.de/projects/mobile-network-assessment-tools/issues/new as they may be of little relevance to the majority of the mailing list subscribers.