Project

General

Profile

Edit History

Wiki » History » Version 2

Alex, 12/23/2014 11:07 PM

1 2 Alex 
h1. SnoopSnitch
2 





    3
    
    
    
SnoopSnitch is an Android app that collects and analyzes mobile radio data to make you aware of your mobile network security and to warn





    4
    
    
    
you about threats like fake base stations (IMSI catchers), user tracking and over-the-air updates. With SnoopSnitch you can use the data collected in the GSM Security Map at gsmmap.org and contribute your own data to GSM Map.





    5
    
    
    





    6
    
    
    
This application currently only works on Android phones with a Qualcomm chipset and a stock Android ROM. It requires root priviliges to capture mobile network data.





    7
    
    
    





    8
    
    
    
h3. Requirements:





    9
    
    
    





    10
    
    
    
* Qualcomm-based Android phone (see list below)





    11
    
    
    
* *stock* Android ROM





    12
    
    
    
Note: Unfortunately, custom Android ROMs like CyanogenMod are *not* supported, as they lack the drivers necessary to collect radio data.





    13
    
    
    
* *Root privileges* on phone





    14
    
    
    





    15
    
    
    
h3. Tested Devices:





    16
    
    
    





    17
    
    
    
The following devices have been verified to work:





    18
    
    
    





    19
    
    
    
* Samsung S3 Neo (GT-I9301I)





    20
    
    
    
* LG G2 (LG-D802)





    21
    
    
    
* Sony Xperia Z1 (C6903)





    22
    
    
    
* Samsung S5 (SM-G900F)





    23
    
    
    
* Motorola Moto E (Moto E)





    24
    
    
    
* Samsung S4





    25
    
    
    





    26
    
    
    
It is very likely that other Qualcomm-based Android phones also work, if they are rooted and have a stock firmware.





    27
    
    
    





    28
    
    
    
h3. Download:





    29
    
    
    





    30
    
    
    
* "Pre-compiled .apk":https://opensource.srlabs.de/attachments/download/???/SnoopSnitch-0.9.0.apk





    31
    
    
    
* "Pre-compiled .apk from Google Play Store":https://play.google.com/store/apps/details?id=de.srlabs.snoopsnitch





    32
    
    
    
* Source Code: <pre>git clone https://opensource.srlabs.de:/git/snoopsnitch.git</pre>





    33
    
    
    





    34
    
    
    
h3. Disclaimer





    35
    
    
    





    36
    
    
    
The tests include an active part. First, your phone will place outgoing calls to a dedicated number. This number will always be busy and never answer in order to rule out voice charges as best as we can.





    37
    
    
    





    38
    
    
    
Second, your phone will send SMS short messages to an invalid number. 





    39
    
    
    





    40
    
    
    
During our tests (in Europe) we have not encounter any network that would charge for these transactions. However, we can not rule out that you may be charged in specific settings.





    41
    
    
    





    42
    
    
    
To control for involuntary charges, we strongly advise the use of a dedicated pre-paid SIM card for these tests.





    43
    
    
    





    44
    
    
    
h3. Instructions





    45
    
    
    





    46
    
    
    
# Make sure you have rooted the phone





    47
    
    
    
# Install application from "Google Play app store":https://play.google.com/store/apps/details?id=de.srlabs.snoopsnitch or below





    48
    
    
    
# Run the app, execute active tests, upload security events and suspicious activity





    49
    
    
    





    50
    
    
    
h3. Mailing list





    51
    
    
    





    52
    
    
    
A public mailing list for discussions is "here":https://lists.srlabs.de/cgi-bin/mailman/listinfo/gsmmap





    53
    
    
    





    54
    
    
    
h3. Version history





    55
    
    
    





    56
    
    
    
Version 0.9.0





    57
    
    
    
* Initial public release