GTScan

GTScan 专为电信领域设计的Nmap扫描器。随着当前对电信安全的关注，日常IT侧渗透测试中使用的工具也应扩展到电信领域。这便是开发一款类似于Nmap但针对电信网络的扫描器的初衷。 当前的安全互联安全控制措施可能无法抵御情报收集，尽管移动运营商可能部署了短信防火墙/代理、互联防火墙，但其中部分措施仍会泄露可用于进一步信息收集过程的信息。 本项目的动机：首先，为电信渗透测试人员的武器库增添新工具；其次，让移动运营商能够通过信息收集和情报侦察这类基础方法论来测试其安全控制措施的有效性。 工作原理 GTScan 利用空的 TCAP...

SigPloit

贡献者列表 Rosalia D'Alessandro Ilario Dal Grande SigPloit SigPloit 是一个信令安全测试框架，专为电信安全专业人士和研究人员设计，用于渗透测试和利用移动运营商使用的信令协议中的漏洞，无论当前使用的是哪一代网络。 SigPloit 旨在覆盖运营商互联中使用的所有协议：SS7、GTP（3G）、Diameter（4G），甚至包括接入层用于 IMS 和 VoLTE 基础设施的 SIP，以及 SS7 消息封装到 SIP-T 中。 针对每个漏洞将提供建议，指导测试人员和运营商采取必要步骤以增强其安全态势。 SigPloit 开发了多个版本。...

sigcorr

SigCorr Detección pasiva de ataques entre protocolos para redes de núcleo móvil SigCorr es la primera herramienta de código abierto que detecta cadenas de ataques entre protocolos que abarcan SS7/MAP, Diameter S6a y GTPv2-C mediante la correlación unificada de identidad del suscriptor...

M3UAScan

M3UAScan 一个用于检测支持Sigtran节点的M3UA协议扫描器 M3UA代表MTP第三层（MTP3）用户适配层，由IETF SIGTRAN工作组在RFC 4666中定义。M3UA使SS7协议的用户部分（例如ISUP、SCCP和TUP）能够通过IP运行，而不是通过ISDN和PSTN等电话设备。建议使用SCTP服务来传输M3UA。 M3UA使用一个复杂的状态机来管理和指示其运行状态。要使M3UA关联或对等完全功能化，必须使用若干M3UA消息（ASP UP、ASP UP确认、ASP Active、ASP Active确认）。 为什么使用M3UAScan...

EUVD-2017-6775

Malware in sbrugna...

EUVD-2014-2320

Malware in sbrugna...

EUVD-2017-6774

Malware in sbrugna...

EUVD-2008-3130

Malware in sbrugna...

Researchers Link New SS7 Encoding Attack to Surveillance Vendor Activity

Researchers identify a new SS7 encoding attack used by a surveillance vendor to bypass security and access mobile subscriber data without detection...

LLMs’ Data-Control Path Insecurity

Back in the 1960s, if you played a 2,600Hz tone into an AT&T pay phone, you could make calls without paying. A phone hacker named John Draper noticed that the plastic whistle that came free in a box of Captain Crunch cereal worked to make the right sound. That became his hacker name, and everyone...

Maybe the Phone System Surveillance Vulnerabilities Will Be Fixed

It seems that the FCC might be fixing the vulnerabilities in SS7 and the Diameter protocol: On March 27 the commission asked telecommunications providers to weigh in and detail what they are doing to prevent SS7 and Diameter vulnerabilities from being misused to track consumers locations. The FCC...

SUSE CVE-2014-2282

The dissectprotocoldataparameter function in epan/dissectors/packet-m3ua.c in the M3UA dissector in Wireshark 1.10.x before 1.10.6 does not properly allocate memory, which allows remote attackers to cause a denial of service application crash via a crafted SS7 MTP3 packet...

ss7.wkbw.com Cross Site Scripting vulnerability OBB-2437305

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Fedora: Security Advisory for libss7 (FEDORA-2021-17bf9d14f8)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for libss7 (FEDORA-2021-c5b708f363)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for libss7 (FEDORA-2021-91d42ce83e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 33 Update: libss7-2.0.1-1.fc33

libss7 is a userspace library that is used for providing SS7 protocol services to applications. It has a working MTP2, MTP3, and ISUP for ITU and ANSI style SS7, however it was written in a manner that will easily allow support for other various national specific variants in the future...

[SECURITY] Fedora 34 Update: libss7-2.0.1-1.fc34

libss7 is a userspace library that is used for providing SS7 protocol services to applications. It has a working MTP2, MTP3, and ISUP for ITU and ANSI style SS7, however it was written in a manner that will easily allow support for other various national specific variants in the future...

Security Vulnerabilities in the RCS Texting Protocol

Interesting research: SRLabs founder Karsten Nohl, a researcher with a track record of exposing security flaws in telephony systems, argues that RCS is in many ways no better than SS7, the decades-old phone system carriers still used for calling and texting, which has long been known to be...

Cyber Security Week in Review (Feb. 8)

Welcome to this week's Cyber Security Week in Review, where Cisco Talos runs down all of the news we think you need to know in the security world. For more news delivered to your inbox every week, sign up for our Threat Source newsletter here. Top headlines this week Attackers continue to utilize...