News for hackers. Stuff that matters.

A comment on QCSuper: A tool for capturing 2G/3G/4G air traffic on Qualcomm-based phones.

Re:QCSuper: A tool for capturing 2G/3G/4G air traffic on Qua... by rootsudo on Thursday July 11, 2019 @05:38PM (#20416127)
This is nothing new, you could do this before w/ any old CDMA/GSM phone w/ a Qualcomm chipset and getting QPST/QXDM what's cool is using non-qualcomm tools for it! :)

You'd be surprised by putting your phone in listening mode and changing around a few numbers can get you. the SMS paging channel is really cool, and you can turn your phone into a sort of Stringray from Harris Corporation.

More so, alot of this stuff is from the Phreaking Scene, which is, not dead, but very much different then its Mitnick heyday w/ the Oki900 and late 00's with ESN/MEID fun.

Most of the phreaking scene nowadays involves "rom" hacking vs the actual modem of the phone, or unlocking, or probing into the cell phones firmware to grab the 16 byte key that'd unlock the modem for you to play with and do everything from modify the bluetooth serial address, increase tx power, or more.

[ Parent | on HN ]
Re:QCSuper: A tool for capturing 2G/3G/4G air traffic on Qua... by cgb223 on Thursday July 11, 2019 @10:14PM (#20417555)
Where can someone start learning to be a modern phone phreaker
[ Parent | on HN ]
Re:QCSuper: A tool for capturing 2G/3G/4G air traffic on Qua... by derefr on Thursday July 11, 2019 @07:14PM (#20416753)
> Most of the phreaking scene nowadays involves...

That sounds like it's mostly just client-side attacks to get client-side effects (essentially, bypassing the DRM of the baseband.) Is there any modern phreaking that involves tower/node-side attacks, with the goal of achieving the same sorts of effects as classical phreaking (e.g. "free cell data")?

[ Parent | on HN ]
Re:QCSuper: A tool for capturing 2G/3G/4G air traffic on Qua... by philprx on Thursday July 11, 2019 @07:17PM (#20416769)
SS7, LTE Diameter attacks.

At first looks unreachable, then you see many ways to get there...

Another way is mobile radio side signaling manipulation (NAS mostly)

[ Parent | on HN ]
Re:QCSuper: A tool for capturing 2G/3G/4G air traffic on Qua... by rando444 on Friday July 12, 2019 @07:22AM (#20419842)
To get your phone to act as a stingray, wouldn't this require two antennas?

(one to receive and another to broadcast)

[ Parent | on HN ]
Re:QCSuper: A tool for capturing 2G/3G/4G air traffic on Qua... by gormandizer on Friday July 12, 2019 @10:05AM (#20420808)
True but is QPST/QXDM readily available? Isn't it a windows only solution? This is appears to be python based, so much more portable.
[ Parent | on HN ]