| ... | ... | @@ -39,13 +39,23 @@ Implementation Status: |
|
|
|
|
|
|
|
3 = deprecated
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
On the above image: OsmocomBB + OpenBTS(with smqueue) running to create a fake BTS(IMSI catcher) with some IMSIs captured
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
On the above image: you can visibly see the that no neighboring cells are found as our BTS at the time of testing did not have this facilitated
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
On the above image: Our Phone details, when connected to the IMSI catcher
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
On the above image:Sample of an SMS sent to the target phone from the BTS without causing alarm
|
|
|
|
|
|
|
|
|
|
|
|
* OsmocomBB BTS 'clones' an actual BTS hence the consistency is variable with a legit BTS ID:2.
|
|
|
|
* OsmocomBB BTS doesnt allow TMSI allocation this is a red flag that can be used to tell if one is camped to a fake BTS ID:4.
|
| ... | ... | |
