M3UAScan

M3UAScan 一个用于检测支持Sigtran节点的M3UA协议扫描器 M3UA代表MTP第三层（MTP3）用户适配层，由IETF SIGTRAN工作组在RFC 4666中定义。M3UA使SS7协议的用户部分（例如ISUP、SCCP和TUP）能够通过IP运行，而不是通过ISDN和PSTN等电话设备。建议使用SCTP服务来传输M3UA。 M3UA使用一个复杂的状态机来管理和指示其运行状态。要使M3UA关联或对等完全功能化，必须使用若干M3UA消息（ASP UP、ASP UP确认、ASP Active、ASP Active确认）。 为什么使用M3UAScan...

GTScan

GTScan 专为电信领域设计的Nmap扫描器。随着当前对电信安全的关注，日常IT侧渗透测试中使用的工具也应扩展到电信领域。这便是开发一款类似于Nmap但针对电信网络的扫描器的初衷。 当前的安全互联安全控制措施可能无法抵御情报收集，尽管移动运营商可能部署了短信防火墙/代理、互联防火墙，但其中部分措施仍会泄露可用于进一步信息收集过程的信息。 本项目的动机：首先，为电信渗透测试人员的武器库增添新工具；其次，让移动运营商能够通过信息收集和情报侦察这类基础方法论来测试其安全控制措施的有效性。 工作原理 GTScan 利用空的 TCAP...

LightBasin Hackers Breach at Least 13 Telecom Service Providers Since 2019

A highly sophisticated adversary named LightBasin has been identified as behind a string of attacks targeting the telecom sector with the goal of collecting "highly specific information" from mobile communication infrastructure, such as subscriber information and call metadata. "The nature of the...

GTScan - The Nmap Scanner for Telco

The Nmap Scanner for Telco. With the current focus on telecom security, there used tools in day to day IT side penetration testing should be extended to telecom as well. From here came the motivation for an nmap-like scanner but for telco The current security interconnect security controls might...

M3UAScan - A Scanner for M3UA protocol to detect Sigtran supporting nodes

A Scanner for M3UA protocol to detect Sigtran supporting nodes M3UA stands for MTP Level 3 MTP3 User Adaptation Layer as defined by the IETF SIGTRAN working group in RFC 4666 .M3UA enables the SS7 protocol's User Parts e.g. ISUP, SCCP and TUP to run over IP instead of telephony equipment like ISD...