Project

General

Profile

Edit History

Mobile Network Assessment Tools » History » Version 4

Linus, 12/19/2013 03:54 PM

1 1 Linus 
h2. Overview
2 





    3
    
    
    
This is a collection of tools for the assessment of mobile network security.





    4
    
    
    
It includes:





    5
    3
    Linus
    





    6
    
    
    
* *[[SIMtester]]*





    7
    1
    Linus
    
Find signature & encryption give-away bugs as well es unprotected or hidden TARs





    8
    3
    Linus
    





    9
    
    
    
* *[[xgoldscanner]]*





    10
    
    
    
Actively collect 2G and 3G logs from Samsung Galaxy phones to your computer (Linux application)





    11
    
    
    





    12
    
    
    
* *[[catcher catcher]]*





    13
    2
    Linus
    
Detect fake 2G base stations





    14
    
    
    





    15
    3
    Linus
    
* *[[GSMmap-apk]]*





    16
    
    
    
Actively collect 2G and 3G logs using Samsung Galaxy phones (Android application)





    17
    1
    Linus
    





    18
    3
    Linus
    
All command-line tools are provided in the *GSMmap-live* system, which auto-submits data to "GSMmap.org":https://GSMmap.org





    19
    
    
    





    20
    1
    Linus
    
*****





    21
    2
    Linus
    





    22
    
    
    
h2. SIMtester





    23
    1
    Linus
    





    24
    
    
    
Assess SIM card security in 3 dimensions:





    25
    
    
    





    26
    2
    Linus
    
* *Cryptanalytic attack surface*





    27
    
    
    
Collect signature giveaways





    28
    
    
    
Collect encryption giveaways





    29
    3
    Linus
    





    30
    2
    Linus
    
* *Security level*





    31
    
    
    
Detect "unprotected" TARs accepting unauthenticated commands (MSL=0)





    32
    3
    Linus
    





    33
    1
    Linus
    
* *Spec. compliance*





    34
    
    
    
Create a comprehensive overview of all available TARs





    35
    2
    Linus
    





    36
    
    
    
h3. Requirements:





    37
    
    
    





    38
    
    
    
* PC/SC reader –or–





    39
    
    
    
* Osmocom phone





    40
    
    
    
* SOFTWARE JAVA? todo





    41
    
    
    





    42
    
    
    
h3. Download





    43
    1
    Linus
    





    44
    3
    Linus
    
Pre-compiled .jar TODO





    45
    
    
    
Source Code TODO





    46
    
    
    
Live System TODO





    47
    1
    Linus
    





    48
    
    
    
h3. Instructions





    49
    2
    Linus
    





    50
    
    
    
# Download





    51
    
    
    
# unpack





    52
    
    
    
# run: TODO call





    53
    
    
    
* TODO command line parameters





    54
    1
    Linus
    





    55
    3
    Linus
    
h3. Mailing list





    56
    
    
    





    57
    
    
    
A public mailing list for announcements and discussion can be found TODO  "here":http://lists.srlabs.de/cgi-bin/mailman/listinfo/a51 .





    58
    
    
    
Please fill bugs and support requests through the "issue tracker TODO ":http://opensource.srlabs.de/projects/a51-decrypt/issues/new as they may be of little relevance to the majority of the mailing list subscribers.





    59
    
    
    





    60
    
    
    





    61
    2
    Linus
    
*****





    62
    
    
    





    63
    
    
    
h2. xgoldscanner





    64
    1
    Linus
    





    65
    2
    Linus
    
Actively collect 2G and 3G traces using Samsung Android phones.





    66
    3
    Linus
    
Log files can be analyzed with Tobias Engel's "xgoldmon":https://github.com/2b-as/xgoldmon tool, which heavily inspired the development of xgoldscanner.





    67
    2
    Linus
    





    68
    
    
    
h3. Requirements:





    69
    
    
    





    70
    
    
    
* Samsung Galaxy S2 / S3  phone





    71
    
    
    
* Micro-USB cable





    72
    
    
    
* Linux Computer





    73
    
    
    





    74
    1
    Linus
    
h3. Download:





    75
    2
    Linus
    





    76
    1
    Linus
    
* Source Code (bash)





    77
    
    
    
* Live System





    78
    
    
    





    79
    
    
    
h3. Instructions





    80
    
    
    





    81
    
    
    
# Download





    82
    2
    Linus
    
# unpack





    83
    4
    Linus
    
# run:  <pre>sudo ./xgoldscanner.sh -n [telephone number, e.g. +491234567]</pre>





    84
    
    
    
Optional parameters:





    85
    
    
    
*  -g  conduct GPRS test





    86
    
    
    
*  -d  display debug messages





    87
    
    
    
*  -o  offline mode [skip log upload for manual submission]





    88
    
    
    
*  -3  conduct 3G tests only [skip 2G tests]





    89
    
    
    
*  -y  assume "yes" to questions and confirmation dialogues [for automated testing]





    90
    
    
    
*  -i  <n> repeat each test <n> times (default is 5)





    91
    2
    Linus
    





    92
    
    
    
h3. Advanced usage





    93
    
    
    





    94
    3
    Linus
    
Use Tobias Engel's "xgoldmon":https://github.com/2b-as/xgoldmon tool to analyze log files.





    95
    2
    Linus
    





    96
    3
    Linus
    





    97
    
    
    
h3. Mailing list





    98
    
    
    





    99
    
    
    
A public mailing list for announcements and discussion can be found TODO  "here":http://lists.srlabs.de/cgi-bin/mailman/listinfo/a51 .





    100
    
    
    
Please fill bugs and support requests through the "issue tracker TODO ":http://opensource.srlabs.de/projects/a51-decrypt/issues/new as they may be of little relevance to the majority of the mailing list subscribers.





    101
    
    
    





    102
    2
    Linus
    
*****





    103
    
    
    





    104
    1
    Linus
    
h2. catcher catcher





    105
    
    
    





    106
    2
    Linus
    
Display mobile network irregularities hinting at fake base station activity.





    107
    
    
    





    108
    
    
    
h3. Requirements:





    109
    
    
    





    110
    
    
    
* Osmocom phone





    111
    
    
    
* Osmocom serial cable





    112
    1
    Linus
    
* Linux Computer





    113
    
    
    





    114
    
    
    
h3. Download:





    115
    
    
    





    116
    
    
    
* Source Code





    117
    2
    Linus
    
* Live System





    118
    
    
    





    119
    
    
    
h3. Instructions





    120
    
    
    





    121
    
    
    
# Download





    122
    
    
    
# unpack





    123
    
    
    
# run: TODO call





    124
    
    
    
* TODO command line parameters





    125
    
    
    





    126
    3
    Linus
    
h3. Mailing list





    127
    
    
    





    128
    
    
    
A public mailing list for announcements and discussion can be found TODO  "here":http://lists.srlabs.de/cgi-bin/mailman/listinfo/a51 .





    129
    
    
    
Please fill bugs and support requests through the "issue tracker TODO ":http://opensource.srlabs.de/projects/a51-decrypt/issues/new as they may be of little relevance to the majority of the mailing list subscribers.





    130
    
    
    





    131
    1
    Linus
    
*****





    132
    
    
    





    133
    2
    Linus
    
h2. GSMmap-apk





    134
    
    
    





    135
    
    
    
Actively collect 2G and 3G traces using Samsung Android phones.





    136
    
    
    





    137
    1
    Linus
    
h3. Requirements:





    138
    
    
    





    139
    
    
    
* Samsung Galaxy S2 / S3 phone





    140
    
    
    





    141
    
    
    
h3. Download:





    142
    2
    Linus
    





    143
    
    
    
* Pre-compiled .apk





    144
    1
    Linus
    
* Source Code





    145
    
    
    





    146
    2
    Linus
    
h3. Instructions





    147
    
    
    





    148
    
    
    
# Install application from App Store





    149
    
    
    
# Run





    150
    
    
    





    151
    3
    Linus
    
h3. Mailing list





    152
    
    
    





    153
    
    
    
A public mailing list for announcements and discussion can be found TODO  "here":http://lists.srlabs.de/cgi-bin/mailman/listinfo/a51 .





    154
    
    
    
Please fill bugs and support requests through the "issue tracker TODO ":http://opensource.srlabs.de/projects/a51-decrypt/issues/new as they may be of little relevance to the majority of the mailing list subscribers.





    155
    
    
    





    156
    2
    Linus
    
*****





    157
    
    
    





    158
    1
    Linus
    
h2. GSMmap-live





    159
    2
    Linus
    





    160
    3
    Linus
    
This live linux system is equipped with all the assessment tools listed above. It furthermore includes





    161
    
    
    
It facilitates their use and automatically uploads logs to GSMmap.org.





    162
    2
    Linus
    





    163
    1
    Linus
    
h3. Requirements:





    164
    
    
    





    165
    
    
    
* 64bit-compatible Computer





    166
    
    
    
* For each test: Requirements listed above





    167
    
    
    





    168
    2
    Linus
    
h3. Download:





    169
    
    
    





    170
    
    
    
* Live system image





    171
    
    
    
* Source Code





    172
    
    
    





    173
    
    
    
h3. Instructions





    174
    
    
    





    175
    
    
    
# Download





    176
    
    
    
# Unpack: <pre>tar xvzf gsmmap-live.img.tar.gz</pre>





    177
    
    
    
# Write to stick <pre>dd if=gsmmap-live.img of=/dev/[USB-stick] [bs=1M]</pre>





    178
    
    
    
# Boot from stick





    179
    3
    Linus
    





    180
    
    
    
h3. Mailing list





    181
    
    
    





    182
    
    
    
A public mailing list for announcements and discussion can be found TODO  "here":http://lists.srlabs.de/cgi-bin/mailman/listinfo/a51 .





    183
    
    
    
Please fill bugs and support requests through the "issue tracker TODO ":http://opensource.srlabs.de/projects/a51-decrypt/issues/new as they may be of little relevance to the majority of the mailing list subscribers.