P1security-Attacking GRX v2.pptx

More documents

Recommendations

Info

GTP scanning in GRX • Daniel Mende did it on the Internet, here is • Way too many open GTP service on the Internet • Higher ratio on GRX of course • Easily scanned with GTP Echo Request GRX MNO • UDP ports 2123, 2152, 3386, Super fast positive scanning
GTP in GTP attack • Free Internet surfing • Access directly the GGSN from another GGSN • Not supposed to happen… but happens! • Just use sgsnemu / OpenGGSN to create new interface and route your traffic through it • Sometime, GTP in GTP is not supported by GGSN… at all • Crash and unavailability • Super fast scanning on GRX: covers the whole planet! GRX MNO
Page 1 and 2: Attacking GRX Attacking The GPRS Ro
Page 3 and 4: GPRS uses cases • APN • interne
Page 5 and 6: 2G • IP was new in telco • Bill
Page 7 and 8: 3G • UMTS • No open source hw r
Page 9 and 10: Buy second-hand ! • Second hand h
Page 11 and 12: GPRS hacking from the air • RFC19
Page 13 and 14: GPRS current (recognized) major iss
Page 15 and 16: Here comes GRX • Your national ne
Page 17 and 18: GRX technologies • GTP - GPRS Tun
Page 19 and 20: GPRS Dialogue
Page 21 and 22: And from inside? • From a GPRS se
Page 23 and 24: Triple play, four way • GPRS APNs
Page 25 and 26: Inside the GRX • From DNS leaks t
Page 27: GTP basics • From SGSN (client)
Page 31 and 32: GTP Tunnel disconnection " DoS atta
Page 33 and 34: GRX Subscriber Information Leak •
Page 35 and 36: GGSN DoS attack • Another magic p
Page 37 and 38: A tube in a tube in a tube • Air
Page 39 and 40: Go massive • “A tube in a tube
Page 41 and 42: Here comes India • Admitedly some
Page 43 and 44: Questions? • Now! • Or join us

P1security-Attacking GRX v2.pptx

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?