day3_Worldwide_attacks_on_SS7_network_P1security_Hackito_2014
day3_Worldwide_attacks_on_SS7_network_P1security_Hackito_2014
day3_Worldwide_attacks_on_SS7_network_P1security_Hackito_2014
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
Discovery phase<br />
Finding the first targets<br />
• Publicly available informati<strong>on</strong><br />
• Internati<strong>on</strong>al PC lists<br />
• GT prefix / country / operator<br />
• Subscriber MSISDN lists<br />
• Probing from UE<br />
• SS codes: *#61#<br />
• Send SMS to your own SMSC<br />
to find your current MSC<br />
• Changing GT prefix length<br />
• Scan around c<strong>on</strong>firmed targets<br />
P1 Security – <strong>Hackito</strong> Ergo Sum <strong>2014</strong><br />
© <strong>2014</strong> - P1 Security, All Rights Reserved