Project

General

Profile

Mobile Network Assessment Tools » History » Version 2

Linus, 12/19/2013 03:10 PM

1 1 Linus
h2. Overview
2 1 Linus
3 1 Linus
This is a collection of tools for the assessment of mobile network security.
4 1 Linus
It includes:
5 2 Linus
* *SIMtester*
6 2 Linus
Find signature & encryption give-away bugs as well es unprotected or hidden TARs
7 2 Linus
* *xgoldscanner:*
8 2 Linus
Actively collect 2G and 3G data with Samsung Galaxy phones
9 2 Linus
* *cell-logger:*
10 2 Linus
Passively capture 2G data using osmocom phones
11 2 Linus
* *catcher catcher:*
12 2 Linus
Detect fake 2G base stations
13 2 Linus
* *GSMmap-apk:*
14 2 Linus
An Android app to test 2G and 3G networks using Samsung Galaxy phones
15 1 Linus
16 1 Linus
All command-line tools are provided in the *GSMmap-live* system, which auto-submits data to https://GSMmap.org
17 1 Linus
18 2 Linus
*****
19 2 Linus
20 1 Linus
h2. SIMtester
21 1 Linus
22 2 Linus
Assess SIM card security in 3 dimensions:
23 2 Linus
24 2 Linus
* *Cryptanalytic attack surface*
25 2 Linus
Collect signature giveaways
26 2 Linus
Collect encryption giveaways
27 2 Linus
* *Security level*
28 2 Linus
Detect "unprotected" TARs accepting unauthenticated commands (MSL=0)
29 2 Linus
* *Spec. compliance*
30 2 Linus
Create a comprehensive overview of all available TARs
31 2 Linus
32 2 Linus
h3. Requirements:
33 2 Linus
34 2 Linus
* PC/SC reader –or–
35 2 Linus
* Osmocom phone
36 2 Linus
* SOFTWARE JAVA? todo
37 2 Linus
38 2 Linus
h3. Download
39 2 Linus
40 2 Linus
* Pre-compiled .jar
41 2 Linus
* Source Code
42 2 Linus
* Live System
43 2 Linus
44 2 Linus
h3. Instructions
45 2 Linus
46 2 Linus
# Download
47 2 Linus
# unpack
48 2 Linus
# run: TODO call
49 2 Linus
* TODO command line parameters
50 2 Linus
51 2 Linus
*****
52 2 Linus
53 1 Linus
h2. xgoldscanner
54 1 Linus
55 2 Linus
Actively collect 2G and 3G traces using Samsung Android phones.
56 2 Linus
57 2 Linus
h3. Requirements:
58 2 Linus
59 2 Linus
* Samsung Galaxy S2 / S3  phone
60 2 Linus
* Micro-USB cable
61 2 Linus
* Linux Computer
62 2 Linus
63 2 Linus
h3. Download:
64 2 Linus
65 2 Linus
* Source Code (bash)
66 2 Linus
* Live System
67 2 Linus
68 2 Linus
h3. Instructions
69 2 Linus
70 2 Linus
# Download
71 2 Linus
# unpack
72 2 Linus
# run: TODO call
73 2 Linus
* TODO command line parameters
74 2 Linus
75 2 Linus
h3. Advanced usage
76 2 Linus
77 2 Linus
Use Tobias Engel's xgoldmon tool to analyze log files.
78 2 Linus
https://github.com/2b-as/xgoldmon
79 2 Linus
80 2 Linus
*****
81 2 Linus
82 1 Linus
h2. catcher catcher
83 1 Linus
84 2 Linus
Display mobile network irregularities hinting at fake base station activity.
85 2 Linus
86 2 Linus
h3. Requirements:
87 2 Linus
88 2 Linus
* Osmocom phone
89 2 Linus
* Osmocom serial cable
90 2 Linus
* Linux Computer
91 2 Linus
92 2 Linus
h3. Download:
93 2 Linus
94 2 Linus
* Source Code
95 2 Linus
* Live System
96 2 Linus
97 2 Linus
h3. Instructions
98 2 Linus
99 2 Linus
# Download
100 2 Linus
# unpack
101 2 Linus
# run: TODO call
102 2 Linus
* TODO command line parameters
103 2 Linus
104 2 Linus
*****
105 2 Linus
106 1 Linus
h2. GSMmap-apk
107 1 Linus
108 2 Linus
Actively collect 2G and 3G traces using Samsung Android phones.
109 2 Linus
110 2 Linus
h3. Requirements:
111 2 Linus
112 2 Linus
* Samsung Galaxy S2 / S3 phone
113 2 Linus
114 2 Linus
h3. Download:
115 2 Linus
116 2 Linus
* Pre-compiled .apk
117 2 Linus
* Source Code
118 2 Linus
119 2 Linus
h3. Instructions
120 2 Linus
121 2 Linus
# Install application from App Store
122 2 Linus
# Run
123 2 Linus
124 2 Linus
*****
125 2 Linus
126 1 Linus
h2. GSMmap-live
127 2 Linus
128 2 Linus
This live linux system is equipped with all the assessment tools listed below.
129 2 Linus
It facilitates their use and automatically uploads logs to GSMmap.org
130 2 Linus
131 2 Linus
h3. Requirements:
132 2 Linus
133 2 Linus
* 64bit-compatible Computer
134 2 Linus
* For each test: Requirements listed above
135 2 Linus
136 2 Linus
h3. Download:
137 2 Linus
138 2 Linus
* Live system image
139 2 Linus
* Source Code
140 2 Linus
141 2 Linus
h3. Instructions
142 2 Linus
143 2 Linus
# Download
144 2 Linus
# Unpack: <pre>tar xvzf gsmmap-live.img.tar.gz</pre>
145 2 Linus
# Write to stick <pre>dd if=gsmmap-live.img of=/dev/[USB-stick] [bs=1M]</pre>
146 2 Linus
# Boot from stick