https://github.com/SigPloiter/SigPloit

SigPloit: Telecom Signaling Exploitation Framework - SS7, GTP, Diameter & SIP
https://github.com/SigPloiter/SigPloit

Last synced: 26 days ago
JSON representation

SigPloit: Telecom Signaling Exploitation Framework - SS7, GTP, Diameter & SIP

• Host: GitHub
• URL: https://github.com/SigPloiter/SigPloit
• Owner: SigPloiter
• License: mit
• Created: 2017-03-30T03:46:03.000Z (over 7 years ago)
• Default Branch: master
• Last Pushed: 2019-12-17T16:51:23.000Z (almost 5 years ago)
• Last Synced: 2024-11-03T04:32:14.260Z (about 1 month ago)
• Language: Java
• Homepage:
• Size: 64.8 MB
• Stars: 88
• Watchers: 2
• Forks: 28
• Open Issues: 48
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

• awesome-rtc-hacking - SigPloit - Tool which covers all used SS7, GTP (3G), Diameter (4G) or even SIP protocols for IMS and VoLTE infrastructures. (Open-source tools)

README

        
# List of Contributors

- Rosalia D'Alessandro

- Ilario Dal Grande

# SigPloit

SigPloit a signaling security testing framework dedicated to Telecom Security professionals and reasearchers to pentest and exploit vulnerabilites in the signaling protocols used in mobile operators regardless of the geneartion being in use.

SigPloit aims to cover all used protocols used in the operators interconnects SS7, GTP (3G), Diameter (4G) or even SIP for IMS and VoLTE infrastructures used in the access layer and SS7 message encapsulation into SIP-T.

Recommendations for each vulnerability will be provided to guide the tester and the operator the steps that should be done to enhance their security posture

SigPloit is developed on several versions

Note: In order to test SS7 attacks, you need to have an SS7 access or you can test in the virtual lab with the provided server sides of the attacks, the used values are provided.

For brief intro on SigPloit and Telecom Architecture in general please click here 

SigPloit is referenced in GSMA document FS.07 "SS7 and Sigtran Network Security"

  Version 1: SS7

  -------------

  SigPloit will initially start with SS7 vulnerabilities providing the messages used to test the below attacking scenarios

  

    A- Location Tracking

    

    B- Call and SMS Interception

    

    C- Fraud

  

  Version 2: GTP

  ------------

  This Version will focus on the data roaming attacks that occur on the IPX/GRX interconnects.

  

  Version 3: Diameter

  -----------------

  This Version will focus on the attacks occurring on the LTE roaming interconnects using Diameter as the signaling protocol.

  

  Version 4: SIP

  ------------

  This is Version will be concerned with SIP as the signaling protocol used in the access layer for voice over LTE(VoLTE) and IMS infrastructure.

  Also, SIP will be used to encapsulate SS7 messages (ISUP) to be relayed over VoIP providers to SS7 networks taking advantage of SIP-T protocol, a protocol extension for SIP to provide intercompatability between VoIP and SS7 networks

  

  Version 5: Reporting

  ------------------

  This last Version will introduce the reporting feature. A comprehensive report with the tests done along with the recommendations provided for each vulnerability that has been exploited.

  

    BETA Version of SigPloit will have the Location Tracking attacks of the SS7 phase 1

## Installation and requirements

The requirements for this project are:

    1) Python 2.7

    2) Java version 1.7 +

    3) sudo apt-get install lksctp-tools

    4) Linux machine

To run use

    cd SigPloit

    

    sudo pip2 install -r requirements.txt

    

    python sigploit.py