contact@p1sec.com

SS7map: SS7 country risk ratings

Mobile Network Operators rely on a network different from Internet that interconnects operators and other parties, to allow calls to work between operators especially when you are in another country (roaming). This is what is called the “SS7 network” a.k.a....
Read More…

[31C3] SS7map : mapping vulnerability of the international mobile roaming infrastructure at #31C3

Laurent Ghigonis and Alexandre De Oliveira from P1 Security team will be presenting the work done on the global SS7 network at Chaos Computer Conference in Hambourg the 27th Dec 2014. The conference “SS7map : mapping vulnerability of the international mobile roaming...
Read More…

[31C3] SS7map : mapping vulnerability of the international mobile roaming infrastructure at #31C3

Laurent Ghigonis and Alexandre De Oliveira from P1 Security team will be presenting the work done on the global SS7 network at Chaos Computer Conference in Hambourg the 27th Dec 2014. The conference “SS7map : mapping vulnerability of the international mobile roaming...
Read More…

SS7map risk rating calculation

Details about SS7map risk rating calculation are coming soon after our presentation at 31C3 ! You can subscribe here to be notified: http://eepurl.com/baeFU5...
Read More…

SS7map risk rating calculation

Details about SS7map risk rating calculation are coming soon after our presentation at 31C3 ! You can subscribe here to be notified: http://eepurl.com/baeFU5...
Read More…

[Hackito Ergo Sum 2014] Hacking Telco Equipment: The HLR/HSS

P1 Security presented at the Hackito Ergo Sum 2014 conference in Paris (http://2014.hackitoergosum.org/) the weaknesses of Telecom Infrastructure systems, and particularly HLR/HSS equipment. Hacking Telco equipment: The HLR/HSS, by Laurent Ghigonis from P1Security Download slides...
Read More…

[Hackito Ergo Sum 2014] Hacking Telco Equipment: The HLR/HSS

P1 Security presented at the Hackito Ergo Sum 2014 conference in Paris (http://2014.hackitoergosum.org/) the weaknesses of Telecom Infrastructure systems, and particularly HLR/HSS equipment. Hacking Telco equipment: The HLR/HSS, by Laurent Ghigonis from P1Security Download slides...
Read More…

[Hackito Ergo Sum 2014] Worldwide attacks on SS7/SIGTRAN network

We are pleased to announce that P1 Security was present at the Hackito Ergo Sum 2014 conference in Paris (http://2014.hackitoergosum.org/). Worldwide attacks on SS7/SIGTRAN network from P1Security Download slides here. Abstract: Mobile telecommunication networks are complex and...
Read More…

[Hackito Ergo Sum 2014] Worldwide attacks on SS7/SIGTRAN network

We are pleased to announce that P1 Security was present at the Hackito Ergo Sum 2014 conference in Paris (http://2014.hackitoergosum.org/). Worldwide attacks on SS7/SIGTRAN network from P1Security Download slides here. Abstract: Mobile telecommunication networks are complex and...
Read More…

4G Wireshark Dissector based on Samsung USB stick

After having analyzed the Samsung Stick firmware, it was time to make something useful out of it. When first plugged into a linux machine, it appears to be a usb Storage. With the help of usb_modswitch, it is possible to activate the ttyUSB device, as well as the control device....
Read More…

4G Wireshark Dissector based on Samsung USB stick

After having analyzed the Samsung Stick firmware, it was time to make something useful out of it. When first plugged into a linux machine, it appears to be a usb Storage. With the help of usb_modswitch, it is possible to activate the ttyUSB device, as well as the control device....
Read More…

Samsung LTE USB stick GT-B3730/B3740 hacking

Samsung LTE USB stick GT-B3730/B3740 Samsung LTE USB dongles codename Kalmia I acquired a couple of GT-B3740 800Mhz LTE Dongle, and decided to open one of them to find out what the chipset was used in it. The very surprizing part was to see that it had a JTAG connector there and...
Read More…

Samsung LTE USB stick GT-B3730/B3740 hacking

Samsung LTE USB stick GT-B3730/B3740 Samsung LTE USB dongles codename Kalmia I acquired a couple of GT-B3740 800Mhz LTE Dongle, and decided to open one of them to find out what the chipset was used in it. The very surprizing part was to see that it had a JTAG connector there and...
Read More…

Diameter vs SS7 from a security perspective

On a dedicated forum to Diameter, one person asked about the main difference between SS7 and Diameter. While some expert answered on the telecom and protocol aspect, we answered on the security side: From a security standpoint SS7 (and SIGTRAN, its transport over IP) is a legacy...
Read More…

Diameter vs SS7 from a security perspective

On a dedicated forum to Diameter, one person asked about the main difference between SS7 and Diameter. While some expert answered on the telecom and protocol aspect, we answered on the security side: From a security standpoint SS7 (and SIGTRAN, its transport over IP) is a legacy...
Read More…