SigPloiter / SigPloit

SigPloit: Telecom Signaling Exploitation Framework - SS7, GTP, Diameter & SIP
MIT License
78 stars 23 forks source link

Simulation Mode #230

Open sb2483 opened 3 years ago

sb2483 commented 3 years ago

I am doing a presentation about SMS hijacking and want to do a demo. I found SigPloit and it caught my attention. I have set up a Kali VM with static IP 192.168.56.102 and I have SigPloit running on it. I'd like to understand how to run a simulation to get output similar to the eighth page of the document at http://cysecure.org/560/online/project/sigploit_brianSteiner_joyGeorge_louisEscoto_emmanuelSefa.pdf, i.e., I'd like to simulate the interception of an SMS message. I think something has changed since that PDF file was made though because there doesn't seem to be anything in Testing/Server/Attacks/Interception that creates the Intercepting banner.

I have a second Kali VM with static IP 192.168.56.101 and Sigploit set up and both VMs can ping each other, in case I need a second VM (I got the impression I do from reading https://github.com/SigPloiter/SigPloit/issues/113).

How do I perform a simple simulation of an SMS interception? Thanks for any help.

EmmanuelTom commented 3 years ago

Hello @sb2483 have you use the hackrf hardware?

sb2483 commented 3 years ago

No I haven't but I know what you're talking about. I don't have $300 to drop on it though. Is it needed to run simulation mode?

On Thu, Jul 1, 2021, 9:23 AM Tom @.***> wrote:

Hello @sb2483 https://github.com/sb2483 have you use the hackrf hardware?

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/SigPloiter/SigPloit/issues/230#issuecomment-872291082, or unsubscribe https://github.com/notifications/unsubscribe-auth/AQEDMROJJCGC4KKQFCLUQV3TVR26RANCNFSM47OTWSGQ .

EmmanuelTom commented 3 years ago

I think is because of the absence of the hardware, what do you think?

sb2483 commented 3 years ago

I don't think so but it could be. I can't imagine why hardware would be needed for a simulation, but there's no documentation for how to stimulate a client so I truly have no idea. Some simple instructions for "how to be a client" when a stimulated server is running would be ideal.

On Thu, Jul 1, 2021, 2:43 PM Tom @.***> wrote:

I think is because of the absence of the hardware, what do you think?

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/SigPloiter/SigPloit/issues/230#issuecomment-872503887, or unsubscribe https://github.com/notifications/unsubscribe-auth/AQEDMRKZX6REOQHHPGIPEQLTVTAPVANCNFSM47OTWSGQ .

EmmanuelTom commented 3 years ago

Okay, I have a project am working on also, will keep you posted then.

Meanwhile check out this https://youtu.be/ffmTqM1i_DM He introduced the hardware indicating that it is needed

ShitalBorganve commented 3 years ago

@sb2483 Did the issue resolved..??

sb2483 commented 3 years ago

No, no progress has been made in this issue. To recap, I do have the simulated server running through the UpdateLocation.jar. I see in the parameters there is a "hello world" test message, but I don't know how to "send" it so it shows up in the "intercepted" output on the server.

On Fri, Jul 2, 2021, 7:34 AM ShitalBorganve @.***> wrote:

@sb2483 https://github.com/sb2483 Did the issue resolved..??

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/SigPloiter/SigPloit/issues/230#issuecomment-872964065, or unsubscribe https://github.com/notifications/unsubscribe-auth/AQEDMRIKT4Y5ZQACYSQAXUDTVWW5FANCNFSM47OTWSGQ .

zeroplus4 commented 3 years ago

Hackrfone not working properly, I suggest using live parameters for it

Sent from ProtonMail mobile

-------- Original Message -------- On Jul 1, 2021, 3:23 PM, Tom wrote:

Hello @.***(https://github.com/sb2483) have you use the hackrf hardware?

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub, or unsubscribe.