How to find a subscriber location within the network.
Category: Security
Thanks to some recent developments, PyHSS has had a major overhaul recently, and is getting better than ever, Some features that are almost ready for public release are: Config File Instead of having everything defined all over the place a single YAML config file is used to define how the HSS should function. SCTP Support […]
Using Wireshark to sniff communication between your computer and Smart Card / SIM Card
A look at the Confidentiality Algorithms used in 3GPP Networks, MILENAGE, XOR & Comp128
A look at APDUs and Interacting with Cards
The basics of Smart Cards & their File System
Getting up close and personal with Smart Card / SIM Cards
Acronyms and cryptography – a look at Subscriber Identifiers in 5G
Categories
SIM Unlock Shims
What do Unlock SIMs sold online actually do and how do they do it?
Using Mkcert to generate valid SSL certificates on your local machine for development
Quick look at cheap “Magic SIM Cards”, what they do, how they do it, and the amazing graphics they use.
Using Transport Layer Security (TLS) to protect SIP traffic from modification / manipulation and guarantee message authenticity.
Categories
VoLTE / IMS – P-CSCF Assignment
How the P-CSCF address is assigned to a UE in Protocol Configuration Options (PCO) during bearer establishment.
Viewing the payload of an Encapsulated Security Payload in Wireshark.
Reverse Engineering the Samsung Sysdump app to unlock IMS Debug and TCPdump functions
Unlocking the built in IMS Debugging tool in Samsung’s Sysdump Utility
Feature Update on PyHSS the Python Home Subscriber Server
Using osmo-sim-auth to query USIM/SIM cards authentication mechanism.
Exploring the how and why of Authentication in LTE & NR networks.
Adventures in getting USIMs to use on private LTE networks.