EFForg / rayhunter

Rust tool to detect cell site simulators on an orbic mobile hotspot
GNU General Public License v3.0
19 stars 2 forks source link

basic heuristics on PCAP #25

Closed cooperq closed 6 months ago

cooperq commented 8 months ago

Start thinking about this. Separate process?
Should be modular, easy to add heuristics can start with snoopsnitch heuristics https://opensource.srlabs.de/projects/snoopsnitch/wiki/IMSI_Catcher_Score but as a hello world could just be "does this packet contain IMSI" or "does this packet downgrade 2G"