Sniffing GSM traffic with hackRF

This post is realted to my previous post, where the tools that should be pre installed are mentioned.


Gqrx which is preinstalled in the live DVD can be used to visualize the frequencies. Here are examples of gqrx  tuned to different frequencies observed from channels captured from hackrf_kalibrate. (see my earlier post)

Tuned to frequency 950.8MHz.

Tuned to 959.6MHz.


Then we need to run the grc script airprobe_rtlsdr.grc which is located at gr-gsm/apps folder found in the pre installed gr-gsm. Here is a screen shot of the flowgraph. I set the default value of gain to 40, which increases the packets captured from wireshark which is later explained.


Here is a screen shot when I run the flow graph.




Then we have to run wireshark from another terminal. Interface is loopback interface (lo).
Use the following command, which runs wireshark as root user with icmp and gsmtap filters.

sudo wireshark -k -Y 'gsmtap && !icmp' -i lo


Here is a screen shot of the packets captured.


Don't forget to read my next post on how to locate BTS .


Thank you!

Basic Reference: https://z4ziggy.wordpress.com/2015/05/17/sniffing-gsm-traffic-with-hackrf/




Comments

  1. hemaMay 12, 2021 at 5:12 AM

    Excellent Blog,I like your blog and It is very informative. Thank you
    Hacking Course Online

    ReplyDelete

Post a Comment

Popular posts from this blog

Save recorded data with hackRF to a .raw file

Image
HackRF receives data at a very high speed. It produces about 1GB data within 40 seconds of recording. These data can be saved to a file, to process later. I use the .raw file format here. The file can be created separately in .raw format and use a flow graph to record data. But the easiest way is to use the following command which creates the file and save data in one command. hackrf_transfer -r .raw -f  433000000 -s 20000000 Further info about hackRF_transfer command:                      about naming a file: You can use CTRL+C to stop recording data. Flow graph method: Waterfall Sink block allows us to see live data being recorded by HackRF and File Sink block saves data to the file named.  
Read more

Listen to FM radio with HackRF and SDR

Here is a block diagram referenced when creating a flow graph to listen to FM radio channels in my area. I will explain what each block does here. Osmocom Source: This block is the one which communicated with hardware. It provides collected data from hackRF to SDR for processing. We further process and play with the data provided from this block. The sample rate and frequency should be set here. Signal Source: Generates wave form. Multiply block: Multiply the two digital signals. WX GUI FFT Sink:   This block visualizes the frequency components of the signal. Collected data from Osmocom source is directed to this block which provides a graphical view of captured signals. Low Pass Filter: A low pass filter generally cuts off the high frequencies provided the cut off frequency value, and filter out the low frequencies. Here we use this block to filter our signal. Cut off frequency is 75000Hz. We set the decimation parameter to reduce the sample rate. (10 million divi...
Read more