Project

General

Profile

Edit History

Mobile Network Assessment Tools » History » Version 3

Linus, 12/19/2013 03:32 PM

1 1 Linus 
h2. Overview
2 





    3
    
    
    
This is a collection of tools for the assessment of mobile network security.





    4
    
    
    
It includes:





    5
    3
    Linus
    





    6
    
    
    
* *[[SIMtester]]*





    7
    1
    Linus
    
Find signature & encryption give-away bugs as well es unprotected or hidden TARs





    8
    3
    Linus
    





    9
    
    
    
* *[[xgoldscanner]]*





    10
    
    
    
Actively collect 2G and 3G logs from Samsung Galaxy phones to your computer (Linux application)





    11
    
    
    





    12
    
    
    
* *[[catcher catcher]]*





    13
    2
    Linus
    
Detect fake 2G base stations





    14
    
    
    





    15
    3
    Linus
    
* *[[GSMmap-apk]]*





    16
    
    
    
Actively collect 2G and 3G logs using Samsung Galaxy phones (Android application)





    17
    1
    Linus
    





    18
    3
    Linus
    
All command-line tools are provided in the *GSMmap-live* system, which auto-submits data to "GSMmap.org":https://GSMmap.org





    19
    
    
    





    20
    1
    Linus
    
*****





    21
    2
    Linus
    





    22
    
    
    
h2. SIMtester





    23
    1
    Linus
    





    24
    
    
    
Assess SIM card security in 3 dimensions:





    25
    
    
    





    26
    2
    Linus
    
* *Cryptanalytic attack surface*





    27
    
    
    
Collect signature giveaways





    28
    
    
    
Collect encryption giveaways





    29
    3
    Linus
    





    30
    2
    Linus
    
* *Security level*





    31
    
    
    
Detect "unprotected" TARs accepting unauthenticated commands (MSL=0)





    32
    3
    Linus
    





    33
    1
    Linus
    
* *Spec. compliance*





    34
    
    
    
Create a comprehensive overview of all available TARs





    35
    2
    Linus
    





    36
    
    
    
h3. Requirements:





    37
    
    
    





    38
    
    
    
* PC/SC reader –or–





    39
    
    
    
* Osmocom phone





    40
    
    
    
* SOFTWARE JAVA? todo





    41
    
    
    





    42
    
    
    
h3. Download





    43
    1
    Linus
    





    44
    3
    Linus
    
Pre-compiled .jar TODO





    45
    
    
    
Source Code TODO





    46
    
    
    
Live System TODO





    47
    1
    Linus
    





    48
    
    
    
h3. Instructions





    49
    2
    Linus
    





    50
    
    
    
# Download





    51
    
    
    
# unpack





    52
    
    
    
# run: TODO call





    53
    
    
    
* TODO command line parameters





    54
    1
    Linus
    





    55
    3
    Linus
    
h3. Mailing list





    56
    
    
    





    57
    
    
    
A public mailing list for announcements and discussion can be found TODO  "here":http://lists.srlabs.de/cgi-bin/mailman/listinfo/a51 .





    58
    
    
    
Please fill bugs and support requests through the "issue tracker TODO ":http://opensource.srlabs.de/projects/a51-decrypt/issues/new as they may be of little relevance to the majority of the mailing list subscribers.





    59
    
    
    





    60
    
    
    





    61
    2
    Linus
    
*****





    62
    
    
    





    63
    
    
    
h2. xgoldscanner





    64
    1
    Linus
    





    65
    2
    Linus
    
Actively collect 2G and 3G traces using Samsung Android phones.





    66
    3
    Linus
    
Log files can be analyzed with Tobias Engel's "xgoldmon":https://github.com/2b-as/xgoldmon tool, which heavily inspired the development of xgoldscanner.





    67
    2
    Linus
    





    68
    
    
    
h3. Requirements:





    69
    
    
    





    70
    
    
    
* Samsung Galaxy S2 / S3  phone





    71
    
    
    
* Micro-USB cable





    72
    
    
    
* Linux Computer





    73
    
    
    





    74
    1
    Linus
    
h3. Download:





    75
    2
    Linus
    





    76
    1
    Linus
    
* Source Code (bash)





    77
    
    
    
* Live System





    78
    
    
    





    79
    
    
    
h3. Instructions





    80
    
    
    





    81
    
    
    
# Download





    82
    2
    Linus
    
# unpack





    83
    
    
    
# run: TODO call





    84
    
    
    
* TODO command line parameters





    85
    
    
    





    86
    
    
    
h3. Advanced usage





    87
    
    
    





    88
    3
    Linus
    
Use Tobias Engel's "xgoldmon":https://github.com/2b-as/xgoldmon tool to analyze log files.





    89
    2
    Linus
    





    90
    3
    Linus
    





    91
    
    
    
h3. Mailing list





    92
    
    
    





    93
    
    
    
A public mailing list for announcements and discussion can be found TODO  "here":http://lists.srlabs.de/cgi-bin/mailman/listinfo/a51 .





    94
    
    
    
Please fill bugs and support requests through the "issue tracker TODO ":http://opensource.srlabs.de/projects/a51-decrypt/issues/new as they may be of little relevance to the majority of the mailing list subscribers.





    95
    
    
    





    96
    2
    Linus
    
*****





    97
    
    
    





    98
    1
    Linus
    
h2. catcher catcher





    99
    
    
    





    100
    2
    Linus
    
Display mobile network irregularities hinting at fake base station activity.





    101
    
    
    





    102
    
    
    
h3. Requirements:





    103
    
    
    





    104
    
    
    
* Osmocom phone





    105
    
    
    
* Osmocom serial cable





    106
    1
    Linus
    
* Linux Computer





    107
    
    
    





    108
    
    
    
h3. Download:





    109
    
    
    





    110
    
    
    
* Source Code





    111
    2
    Linus
    
* Live System





    112
    
    
    





    113
    
    
    
h3. Instructions





    114
    
    
    





    115
    
    
    
# Download





    116
    
    
    
# unpack





    117
    
    
    
# run: TODO call





    118
    
    
    
* TODO command line parameters





    119
    
    
    





    120
    3
    Linus
    
h3. Mailing list





    121
    
    
    





    122
    
    
    
A public mailing list for announcements and discussion can be found TODO  "here":http://lists.srlabs.de/cgi-bin/mailman/listinfo/a51 .





    123
    
    
    
Please fill bugs and support requests through the "issue tracker TODO ":http://opensource.srlabs.de/projects/a51-decrypt/issues/new as they may be of little relevance to the majority of the mailing list subscribers.





    124
    
    
    





    125
    1
    Linus
    
*****





    126
    
    
    





    127
    2
    Linus
    
h2. GSMmap-apk





    128
    
    
    





    129
    
    
    
Actively collect 2G and 3G traces using Samsung Android phones.





    130
    
    
    





    131
    1
    Linus
    
h3. Requirements:





    132
    
    
    





    133
    
    
    
* Samsung Galaxy S2 / S3 phone





    134
    
    
    





    135
    
    
    
h3. Download:





    136
    2
    Linus
    





    137
    
    
    
* Pre-compiled .apk





    138
    1
    Linus
    
* Source Code





    139
    
    
    





    140
    2
    Linus
    
h3. Instructions





    141
    
    
    





    142
    
    
    
# Install application from App Store





    143
    
    
    
# Run





    144
    
    
    





    145
    3
    Linus
    
h3. Mailing list





    146
    
    
    





    147
    
    
    
A public mailing list for announcements and discussion can be found TODO  "here":http://lists.srlabs.de/cgi-bin/mailman/listinfo/a51 .





    148
    
    
    
Please fill bugs and support requests through the "issue tracker TODO ":http://opensource.srlabs.de/projects/a51-decrypt/issues/new as they may be of little relevance to the majority of the mailing list subscribers.





    149
    
    
    





    150
    2
    Linus
    
*****





    151
    
    
    





    152
    1
    Linus
    
h2. GSMmap-live





    153
    2
    Linus
    





    154
    3
    Linus
    
This live linux system is equipped with all the assessment tools listed above. It furthermore includes





    155
    
    
    
It facilitates their use and automatically uploads logs to GSMmap.org.





    156
    2
    Linus
    





    157
    1
    Linus
    
h3. Requirements:





    158
    
    
    





    159
    
    
    
* 64bit-compatible Computer





    160
    
    
    
* For each test: Requirements listed above





    161
    
    
    





    162
    2
    Linus
    
h3. Download:





    163
    
    
    





    164
    
    
    
* Live system image





    165
    
    
    
* Source Code





    166
    
    
    





    167
    
    
    
h3. Instructions





    168
    
    
    





    169
    
    
    
# Download





    170
    
    
    
# Unpack: <pre>tar xvzf gsmmap-live.img.tar.gz</pre>





    171
    
    
    
# Write to stick <pre>dd if=gsmmap-live.img of=/dev/[USB-stick] [bs=1M]</pre>





    172
    
    
    
# Boot from stick





    173
    3
    Linus
    





    174
    
    
    
h3. Mailing list





    175
    
    
    





    176
    
    
    
A public mailing list for announcements and discussion can be found TODO  "here":http://lists.srlabs.de/cgi-bin/mailman/listinfo/a51 .





    177
    
    
    
Please fill bugs and support requests through the "issue tracker TODO ":http://opensource.srlabs.de/projects/a51-decrypt/issues/new as they may be of little relevance to the majority of the mailing list subscribers.