Posts
Happy New Year folks.
Got too lazy but I'm back with some even better news. Managed to acquire a more powerful FPGA board from National Instruments among other interesting boards. It is capable of a full GSM spectrum interception, both uplink and downlink.
The interesting bit about this acquisition is that it will enable me pursue GSM interception as I work on real time deciphering of A5/1 and A5/2 which are the de facto algorithms used by MNO's. The other challenge will involve getting GPU's which will enable real time decryption bearing in mind that currently the open source way of doing it using the 2TB Rainbow tables takes about a month or so...not very sure.
Nonetheless, this is an interesting step bearing in mind I haven't even blogged about the experimental stage using the USRP2.
Ill keep you posted on this development. Oh yes, post on airplane tracking using python and Google Earth + USRP2 coming up in the next few days.
Keep hacking..
-ty
Got too lazy but I'm back with some even better news. Managed to acquire a more powerful FPGA board from National Instruments among other interesting boards. It is capable of a full GSM spectrum interception, both uplink and downlink.
The interesting bit about this acquisition is that it will enable me pursue GSM interception as I work on real time deciphering of A5/1 and A5/2 which are the de facto algorithms used by MNO's. The other challenge will involve getting GPU's which will enable real time decryption bearing in mind that currently the open source way of doing it using the 2TB Rainbow tables takes about a month or so...not very sure.
Nonetheless, this is an interesting step bearing in mind I haven't even blogged about the experimental stage using the USRP2.
Ill keep you posted on this development. Oh yes, post on airplane tracking using python and Google Earth + USRP2 coming up in the next few days.
Keep hacking..
-ty
I will like to acquire that device soon...and wow tracking airplanes with python and google Earth...Looking forward to it.
ReplyDeleteHow can I purchase the USRP2 and what are the legal difficulties to it.
Bright... you can get it online http://www.ettus.com would be a great place to start saw the prices back in 2011 and i was blown quite away haha but check em out ... i kind of stuck doing a simpler less costly project but with nearly the same reach on GSM i only bought a c118 motorola phone and what do you know flashed it with a custom firmware called osccommoB (hope i got that right) and got a few interesting results...
DeleteTy I think the GPU way is also the way to go with this in mind:One of the tricks that is used to compute such a large table is by implementing the rainbow table generation and real-time attack on FPGAs. This reduces our time
ReplyDeletedrastically. On a single PC it would take roughly 33,000 years to compute the table or
would take 33,000 PCs one year. With a moderate 4U cluster of 68 FPGAs we can do it
in 3 months. so more FPGAs on that lot and you are going to cut that down by a better 2 weeks but that would need alot o em :-) but hey its worth that.... NIce to see you going even deeper and H.A.M on em still following .... when you out to test gimme a holla would like a front row seat and probably get to learn more tricks on that
Haha Thanks folks, I hardly think anyone reads this stuff. Bright you need to come to this side man, very interesting stuff.
ReplyDeleteNyoike, good to see you also began with OsmocoBB, i personally also started with the Motorola C123 with mode'd firmware. Since then I haven't looked back. Should link up some day and have a hackathon on GSM and HAM radio.
PS: now venturing into NOAA weather satellite image decoding using usrp and Gnuradio. Plus I want to buy a larger antennae, the Arrow for wider spectrum reception. :-)
People do read Ty :-) meanwhile on OsmocoBB I got a lil better when i actually knew what i was doing.... ;-) got alot of things i wanna try before I achieve yo level on NOAA so am trying my best on getting to create an IMSI catcher is it possible to give me our state law (Ke) regarding to Radio/GSM/HAM radio 'security testing' if possible hope you have my gmail wanna find out before i go H.A.M on them so much potential vulnerability P.S will ht you up regarding a little project I have in mind ... meanwhile KEEP WRITING ....info(sec) is power AND I NEED ALL POWER I CAN CONTROL :-)
Delete