portapack-mayhem / mayhem-firmware

Custom firmware for the HackRF+PortaPack H1/H2
GNU General Public License v3.0
3.3k stars 539 forks source link

GSM scanner #73

Closed marcoSanti closed 10 months ago

marcoSanti commented 4 years ago

Could it be possible to implement a gsm scanner for bts signals (like what the grgsm_scanner from the gs gsm suite, does) to get a list of all BTS stations available. It would be nice if it could work for generations from 1G to 4G LTE. What this app should do is to show a list (ordered by tx channel) of all the transmitting BTS in the current zone.

--- Want to back this issue? **[Post a bounty on it!](https://www.bountysource.com/issues/92194916-gsm-scanner?utm_campaign=plugin&utm_content=tracker%2F182166508&utm_medium=issues&utm_source=github)** We accept bounties via [Bountysource](https://www.bountysource.com/?utm_campaign=plugin&utm_content=tracker%2F182166508&utm_medium=issues&utm_source=github).
eried commented 4 years ago

Can you show how do you do it with that scanner?

marcoSanti commented 4 years ago

Yes, so basically you launch the app and you get something like this: 455378_1_En_8_Fig11_HTML It would be nice to have shown as a list the ARFCN field and the rx power (and by clicking on on each of the entry on the list, to show the other fields). The code is from this repo (https://github.com/ptrkrysik/gr-gsm/) Unfortunately I have zero experience in programming in c++ and I am a total noob in python, so porting feature is still impossible for myself (i have knowledge in many other languages, but not thoose ones), otherwise i would have tried for myself. Hope to have explained myself, Tku

eried commented 4 years ago

I dont think anyone here is/considers himself an expert in C++ besides what we were forced on Uni (lol). Sounds like a nice app to build but there is a lot of bugs and small inconsistencies to clean still so I dont see this being attempted by anyone but you 🤣

have you tried it with the hackrf? or just bladerf?

marcoSanti commented 4 years ago

I have not tried it with bladerf since i do not have one! the photo i posted is from a video i found: unfortunately this morning my pc updated anth grgsm sopped working... I am still trying to fix it.. Btw the scanner app works perfectly with the hackrf since it only listens to the bts. you need a bladerf if you want to create a rogue bts, which i won't suggest doing since it is absolutely illegal (at least in Italy)...

smannchen commented 4 years ago

GSM has just about been completely phased out in the US. LTE cell scanner seems more promising, however I doubt it will ever be implemented in the portapack. Here's a link to the software for pc though. https://github.com/JiaoXianjun/LTE-Cell-Scanner

marcoSanti commented 4 years ago

Yeah i know, but phones should be supporting it for a while... in any case i do not think I will be able to port the code you linked into portapack😅

eried commented 10 months ago

I am closing suggestions without much discussion to keep issues clean. Feel free to re-open if there is a valid reason

funder7 commented 5 days ago

Hello, I might try to do this if you're still interested. I never used both tools, but it's something that I'm interested to use in the next future, and it would be great to have such features in a portable device.

At first glance, grgsm_scanner is written in python, so I guess it cannot be used as-is. LTE-Cell-Scanner on the other hand, is written in C++ and already supporting the HackRF, so a port should be easier.

2G and 3G Networks are still in use here in Europe, so I wouldn't exclude them (or consider 3G at least).

Let me know!