RE: Questions on GSM Penetration test

From: Lubomir.Nistor@star-21.de
Date: Fri Jan 25 2002 - 01:32:52 PST

  • Next message: James Shanahan: "SSh brute forcer"

    I really doubt that there is any company like this.. as not many people on this planet know how exactly GSM network works, and those people are building it..
    
    Penetration test of GSM net should be done as a normal pen-test, but I suppose insider attack is where can be done a lot.
    outside attacks have to do something with radio engineering and basestation-phone communication (DoS, wiretaping, ..)
    
    inside attacks are more interesting, as you can access devices via IP :) no radio :)
    and do some serious (mis)configuration. 
    
    
    Although I haven't done any GSM pentests, but i know some radio networks basics...
    
    Lubo
    
    PS: if anybody got some docs about how GSM radio communication works pls send me a copy (not general descr, but specific protocol descr, fields descr, timing etc..)
    PS2: sources of firmware helps as well..
    
    -----Original Message-----
    From: ricci_ieong [mailto:ricci_ieongat_private]
    Sent: Donnerstag, 24. Januar 2002 04:10
    To: pen-testat_private
    Subject: Questions on GSM Penetration test
    
    
    Hello All,
    
    	I would like to know if there is any company offering penetration test
    services onto GSM network not the IP network. How to perform that type of
    test? Which company can offer that service?
    
    	Thanks.
    
    Ricci
    
    
    
    _________________________________________________________
    
    Do You Yahoo!?
    
    Get your free @yahoo.com address at http://mail.yahoo.com
    
    
    
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
    Service. For more information on SecurityFocus' SIA service which
    automatically alerts you to the latest security vulnerabilities please see:
    https://alerts.securityfocus.com/
    
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
    Service. For more information on SecurityFocus' SIA service which
    automatically alerts you to the latest security vulnerabilities please see:
    https://alerts.securityfocus.com/
    



    This archive was generated by hypermail 2b30 : Fri Jan 25 2002 - 09:28:22 PST