The Anatomy Of GSM Encryption Hack

After Karsten Nohl hacked the GSM encryption, I thought to Digg this a bit in more detail. So i have written this whole guide in favor of it. So lets start.

 

Karsten Nohl, A Germen Hacker have claimed that he have successfully cracked the GSM mobiles security algorithm. That we all know but the question that arises here is what he did to crack the GSM encryption which have been for years, actually from 1987.

 

There was a conference know as 26th Chaos Communication Congress (26C3) , as we all know which is indeed the most respected and one of the most seeable conferences in Europe.

 

 

It takes place from December 27th to December 30th 2009 at the bcc Berliner Congress Center in Berlin, Germany. which is quite recent and what was special this time on it was the GSM encryption crack details which were going to be demoed in the conference.

 

The 26C3s slogan is "Here Be Dragons".

 

As a matter of fact i was not there in the conference and thus missed all the stuff going on there. but some of my twitter friends helped me out with this. When twitters started to tweet with the hash tag of #26C3 all was going clear about it...

 

Basics

 

Ok lets began with the basic of the attack and what can be done with, what we need, what he cracked etc

 

Karsten Nohl GSM Crack 26C3

Here is the presentation or you can say the slides, which Nohl presented during the 26C3 which gives all the detail regarding the whole GSM encryption hack.

 

“… the GSM call has to be identified and recorded from the radio interface. […] we strongly suspect the team developing the intercept approach has underestimated its practical complexity.

A hacker would need a radio receiver system and the signal processing software necessary to process the raw radio data.”

–GSMA, Aug.„09

What a Hacker Need

As written in the document a hacker would need a radio receive system and also a signal processing software which is necessary to produce the raw data to decrypt it.

 

 

A Radio Receiver System    -

 

 

 

 

 

A Signal processing software  -

 

 

Ok this might explain you a bit about what a hacked need. Actually its not the kind of hack which you can perform with a laptop. you would need to decrypt which the Nohl have used the rainbow tables which were not explained in the previous hacks between 1995 to 2008 which were not quite successful.

 

There are various different setting you would need to do in the radio and OpenBTS. and other configuration, mods. Its pretty complicated stuff there.

 

Rainbow Tables

The main reason why this crack with A5/1 attacks were not done in the previous years is because of the rainbow tables which the Nohl introduced in the cracking procedure.

 

Previously the crack used some big system to decrypt but it was too expensive that it any hacked would not be able to crack it and that's why the hack was also not released in the internet.

 

 

But there come Nohl with his rainbow tables. They planned to do a workshop today, where you could bring your GSM data and they wanted to try to decrypt it. However, due to legal reasons they had to cancel it.

 

http://events.ccc.de/congress/2009/wiki/The_demonstration_is

 

The next step would be for someone to package the attack in the form of a script-kiddie-usable utility that would perform interception/decryption using an off-the-shelf GSM USB modem.

 

That seems to be how these things go; they'll drag their feet as long as possible, until the public pressure becomes unbearable.

 

So i guess most of you have to wait for the script-kiddies bundle to release so you can use it.

 

Get a working copy of the table generator rainbow tables by either :

A) Downloading binaries

1. Linux 32bit

2. Linux 64bit

3. windows 32bit

4. windows 64bit

revision 58 from October 25 2009

Or

B) Compiling The Program

 

Then, Running The Program

 

 

Stuff We Got For You

For more information i have made a list of papers, sildes, links, and videos of 26C3 presentation on the 26C3 for you.

 

Slides - Karsten Nohl GSM Crack 26C3

 

Videos - There are different sources of the videos. so i have written all the sources with the torrents.

 

1. 26c3-3654-en-gsm_srsly.mp4

2. 26c3-3654-en-gsm_srsly.mp4.md5

3. 26c3-3654-en-gsm_srsly.mp4.torrent

 

GSM: SRSLY? Part 1 - Part 2 - Part 3

 

Links -

1. http://rnmshot.dvrdns.org/

2. ftp://ftp.ccc.de/congress/26C3/mp4/

3. http://85.214.20.203/26C3/GSM/

4. http://reflextor.com/torrents/

5. http://reflextor.com/trac/a51

 

 

Happy Hacking @hackerthedude

Read More

Mininova : Is No More Our Old Mininova Limits To Content Distribution

Its really a sad that Mininova is no more the old mininova in which we can download everything we need . I think it was the best Bit torrent website ever after The pirate bay.

 

From now on, they are limiting Mininova.org to there Content Distribution service. By doing so, they comply with the ruling of the Court of Utrecht of last August.

 

The people behind mininova says that there were no choice left with them so they have to shut down the mininova trackers and also all the registered users have been unregistered or have been moved to Monova.
First was the pirate bay who lost there trackers and fighting for several years in the court.

Now Mininova is down too.

It looks like many bit torrent sites are being held against the crime of distributing content freely. "Unfortunately the court ruling leaves us no other option than to take our platform offline, except for the Content Distribution service," the admins wrote.

 

"We are still considering an appeal at this moment," the side administrators stated...

 

 

 

This is what you will see when you will visit the mininova.org now. its all gone the movies, software's, games etc. I will always remember the Mininova even when its gone.
BTW there is still the pirate bay and iso hunt left for mininova . well if you are looking for alternatives to the mininova then here is the list --

 

1. Torrentzap

2. Fenopy

3. ExtraTorrent

4. KickassTorrents

5. BTjunkie

5. Monova

7. isoHunt

8. YourBitTorrent

9. The Pirate Bay

10. ShareReactor

*source Torrent freak

With an impressive 175,820,430 visits and close to a billion page views in the last 30 days, Mininova set a record that they will be unable to break in the near future.

We should all thanks to Mininova for its Help to us.
This is me HTD,
In respect to Mininova.

Happy Hacking @hackerthedude

Read More

Peer Block : Safeguard Yourself From Harmful Server’s

Have you ever heard of a software called Peer Guardian . So do you know what it is actually well here is the guide for you guys.

Peer Guardian is Phoenix Labs’ premier IP blocker for Windows.
Peer Guardian integrates support for multiple lists, list editing, automatic updates, and blocking all of IPv4 (TCP, UDP, ICMP, etc), making it the safest and easiest way to protect your privacy on P2P.

Now that was about the old Peer Guardian; But after sometime the developers of this great software realized they could not take this software more, and after the Norton Antivirus Proved it a virus the developers closed the Peer Guardian. 

Now comes our newly born Peer Block . Now lets see what its developers say about it :-

PeerBlock lets you control who your computer "talks to" on the Internet.

By selecting appropriate lists of "known bad" computers, you can block communication with advertising or spyware oriented servers, computers monitoring your p2p activities, computers which have been "hacked", even entire countries!

They can't get in to your computer, and your computer won't try to send them anything either. And best of all, it's free!

 

Over 100,000 downloads served!

Now seeing that its seems to me a promising software…

Screen Shot’s

 

 

 

Download

 

Download

 

Further Reference

Home Page

FAQ

What IS PeerBlock?

How does it do that?

Peer Guardian

 

Happy Hacking @hackerthedude

Read More

uTorrent 2 To Speed Downloading By Fixing ISP Throttling

There is a new buzz on the internet that BitTorrent to speed its downloading by fixing the ISP Throttling . The new version of uTorrent 2 will be optimized by the company in such a way that they are promising a new and rich downloading experience to its users. 

Years before Many ISP’s Have argued with the BitTorrent Inc. on the certain topic that with high number of BitTorrent connections are slowing down other applications and traffic, affecting its users download speed and their product quality.

With this Argument the company Officials Answered,

“ISPs have to invest in making their networks better and faster rather than stifling applications which consumers use and love,”

While encouraging users to switch to non throttling ISPs if possible, or complain to their ISP’s customer services.

What is Throttling ?

Bandwidth throttling is a method of ensuring a bandwidth intensive device, such as a server, will limit ("throttle") the quantity of data it transmits and/or accepts within a specified period of time.

For website servers and web applications, bandwidth throttling helps limit network congestion and server crashes, whereas for ISP's, bandwidth throttling can be used to limit users' speeds across certain applications (such as BitTorrent), or limit upload speeds.

*Source Wikipedia

BitTorrent

CrunchBase Information

BitTorrent

Information provided by CrunchBase

Read More