{"id":13464107,"url":"https://github.com/P1sec/SigFW","last_synced_at":"2025-03-25T10:32:01.246Z","repository":{"id":23200669,"uuid":"93763683","full_name":"P1sec/SigFW","owner":"P1sec","description":"Open Source Signaling Firewall for SS7, Diameter filtering, antispoof and antisniff","archived":false,"fork":false,"pushed_at":"2024-10-14T21:10:09.000Z","size":13568,"stargazers_count":130,"open_issues_count":1,"forks_count":59,"subscribers_count":28,"default_branch":"master","last_synced_at":"2025-03-13T02:35:58.943Z","etag":null,"topics":["diameter","encryption","firewall","security","signalling","sigtran","ss7","telecom"],"latest_commit_sha":null,"homepage":"https://www.blackhat.com/us-17/briefings.html#ss7-attacker-heaven-turns-into-riot-how-to-make-nation-state-and-intelligence-attackers-lives-much-harder-on-mobile-networks","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"agpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/P1sec.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS","dei":null,"publiccode":null,"codemeta":null}},"created_at":"2017-06-08T15:14:53.000Z","updated_at":"2025-02-16T14:45:34.000Z","dependencies_parsed_at":"2025-03-13T02:42:18.594Z","dependency_job_id":null,"html_url":"https://github.com/P1sec/SigFW","commit_stats":null,"previous_names":[],"tags_count":5,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/P1sec%2FSigFW","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/P1sec%2FSigFW/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/P1sec%2FSigFW/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/P1sec%2FSigFW/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/P1sec","download_url":"https://codeload.github.com/P1sec/SigFW/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":245444152,"owners_count":20616331,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["diameter","encryption","firewall","security","signalling","sigtran","ss7","telecom"],"created_at":"2024-07-31T14:00:34.400Z","updated_at":"2025-03-25T10:31:57.783Z","avatar_url":"https://github.com/P1sec.png","language":"Java","funding_links":[],"categories":["Java","Interco"],"sub_categories":["SS7"],"readme":"# SigFW\nOpen Source SS7/Diameter firewall\n\n## SigFW introduction\n* [SigFW BlackHat USA 2017 Presentation](https://github.com/P1sec/SigFW/blob/master/docs/us-17-Kacer-SS7-Attacker-Heaven-Turns-Into-Riot-How-To-Make-Nation-State-And-Intelligence-Attackers-Lives-Much-Harder-On-Mobile-Networks.pdf)\n* [SigFW BlackHat USA 2017 Whitepaper](https://github.com/P1sec/SigFW/blob/master/docs/us-17-Kacer-SS7-Attacker-Heaven-Turns-Into-Riot-How-To-Make-Nation-State-And-Intelligence-Attackers-Lives-Much-Harder-On-Mobile-Networks-wp.pdf)\n* [SigFW BlackHat USA 2017 Talk (youtube)](https://www.youtube.com/watch?v=XiKq2fJBUJI)\n\n## Build instructions\nFor more detailed installation and build instructions refer to this [page](https://github.com/P1sec/SigFW/wiki/Installation-and-Build-Instructions).\n\n### Prerequisities\nInstall Maven\n(Optional) Netbeans IDE for developers\n\n### Clone source code\ngit clone https://github.com/P1Sec/SigFW\n\n### Build SigFW project\n```bash\ncd ./SigFW/sigfw/sigfw.sigfw\nmvn clean install -Dmaven.test.skip=true\n```\n\n### Run SS7FW\n```bash\nmvn exec:java -Dexec.mainClass=\"ss7fw.SS7Firewall\"\nmvn exec:java -Dexec.mainClass=\"ss7fw.SS7ClientLiveInput\"\nmvn exec:java -Dexec.mainClass=\"ss7fw.SS7Server\"\n```\n\n### Replay traffic from pcap\n```bash\ncd ./input\nmkfifo pipe\ntshark -T ek -x -j \"\" -r ./input/sigtran.pcap \u003e sigtran.json\ncat ./input/sigtran.json \u003e pipe\n```\n\n![](https://github.com/P1sec/SigFW/blob/master/docs/running_from_netbeans.gif)\n\n\n### Run DiameterFW\n```bash\nmvn exec:java -Dexec.mainClass=\"diameterfw.DiameterFirewall\"\nmvn exec:java -Dexec.mainClass=\"diameterfw.DiameterClientLiveInput\"\nmvn exec:java -Dexec.mainClass=\"diameterfw.DiameterServer\"\n```\n\n### Replay traffic from pcap\n```bash\ncd ./input\nmkfifo pipe\ntshark -T ek -x -j \"\" -r ./input/diameter.pcap \u003e diameter.json\ncat ./input/diameter.json \u003e pipe\n```\n\n### Security\nFor both SS7FW and DiameterFW before using.\n\nrealm.properties: Change the username, password for firewall API\n\nsigfw.json: Generate new Public, Private Keys. Change the mThreat salt\n\nJetty: Change the certificate\n\n### To test the encryption, signatures\nInstead of SS7Firewall run SS7FirewallFirstInstance and SS7FirewallSecondInstance\n\nInstead of DiameterFirewall run DiameterFirewallFirstInstance and DiameterFirewallSecondInstance\n\n## Limitations\nProgram is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY.\n\n## License\nSigFW is licensed under dual license policy. The default license is the Free Open Source GNU Affero GPL v3.0. Alternatively a commercial license can be obtained from P1 Security S.A.S.\n\n## Attribution\nFor the list of contributors, see the AUTHORS file.\n\nOriginal work was created by Martin Kacer, Philippe Langlois\n\nCopyright 2020, P1 Security S.A.S and individual contributors\n\nWe would like to thanks for everyone supporting this project.\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FP1sec%2FSigFW","html_url":"https://awesome.ecosyste.ms/projects/github.com%2FP1sec%2FSigFW","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FP1sec%2FSigFW/lists"}