RF-exploring

Osmocom-bb (IMSI catcher) + Prebuilt VM

UPDATE IN PROGRESS ! nov 12 2020

In this post we will see how to make a base station with two motorola compatible phones C 115/118/123 and two cables usb serial jack 2.5mm PL2303

OS: kali rolling 2018.1

VMware or virtualbox : with the VM you can jump directly to running without install software Prebuilt VM (2018.1): HERE Virtual Machine (v2) Don’t double click on the kali-linux-2018.1-vbox-amd64.ova file but it is Kali-Linux-2018.1-vbox-amd64-disk001.vmdk which had to be selected manually in vbox hd I have made the mistake to let the blank kali vm in the zip sorry i must change that there is to much people who as asking me You will have osmocombb at the root folder then. For data support HERE CalypsoBTS GPRS Testing For installation simplified HERE Ansible installation (don’t know if it works now)

Latest ISO with Calypso BTS Working 11/11/2020 (OS UBUNTU 18.04.5)

 

#!/bin/bash
sudo su
cd
nano /etc/apt/sources.list

echo deb http://old.kali.org/kali sana main non-free contrib > /etc/apt/sources.list.d/sana.list
apt install gcc-4.9 g++-4.9
rm /etc/apt/sources.list.d/sana.list


apt-get update && apt-get upgrade 
apt-get install build-essential libgmp-dev libx11-6 libx11-dev flex libncurses5 libncurses5-dev libncursesw6 libpcsclite-dev zlib1g-dev libmpfr4 libmpc3 lemon aptitude libtinfo-dev libtool shtool autoconf git-core pkg-config make libmpfr-dev libmpc-dev libtalloc-dev libfftw3-dev libgnutls28-dev libssl1.0-dev libtool-bin libxml2-dev sofia-sip-bin libsofia-sip-ua-dev sofia-sip-bin libncursesw5-dev  bison libgmp3-dev alsa-oss cmake
update-alternatives --install /usr/bin/gcc gcc /usr/bin/gcc-4.9 49 --slave /usr/bin/g++ g++ /usr/bin/g++-4.9
update-alternatives --install /usr/bin/gcc gcc /usr/bin/gcc-9 90 --slave /usr/bin/g++ g++ /usr/bin/g++-9
update-alternatives --config gcc
#choose 4.9
apt remove texinfo 
wget http://ftp.gnu.org/gnu/texinfo/texinfo-4.13.tar.gz # gzip -dc < texinfo-4.13.tar.gz | tar -xf - 
cd texinfo-4.13 
./configure 
make 
make instal
git clone https://github.com/axilirator/gnu-arm-installer.git gnuarm 
cd gnuarm
#Run the scripts:
./download.sh 
./build.sh 
export PATH=$PATH:/root/gnuarm/install/bin
echo "Now you have cross-compiler ready"

cd
git clone git://git.osmocom.org/libosmocore.git # cd libosmocore 
autoreconf -i 
./configure 
make 
make install 
ldconfig 
cd
git clone git://git.osmocom.org/libosmo-dsp.git 
cd libosmo-dsp 
autoreconf -i 
./configure 
make 
make install 
cd
git clone https://github.com/osmocom/osmocom-bb trx 
cd trx
git checkout jolly/testing 
cd src 
nano target/firmware/Makefile
sed -i 's/#CFLAGS += -DCONFIG_TX_ENABLE/CFLAGS += -DCONFIG_TX_ENABLE' /root/trxtarget/firmware/Makefile >
make HOST_layer23_CONFARGS=--enable-transceiver 
cd
git clone https://github.com/bastienbaranoff/imsi-catcher
# Asterisk version (1.8.13.1) :
curl https://downloads.asterisk.org/pub/telephony/asterisk/old-releases/asterisk-1.8.13.1.tar.gz --output asterisk-1.8.13.1.tar.gz
md5sum asterisk-1.8.13.1.tar.gz
gzip -dc < asterisk-1.8.13.1.tar.gz | tar -xf - 
cd /root/asterisk-1.8.13.1 
make 
update-alternatives --config gcc
#choose 4.9
make
nano /root/asterisk-1.8.13.1/include/asterisk/buildopts.h
#change the two lines asterisk BUILD_OPT_SUM by
#define AST_BUILDOPT_SUM "1e69660cf7e374b86dd67bd01e180953"
sed -i 's/SSLv3_client_method/SSLv23_client_method' /root/asterisk-1.8.13.1/main/tcptls.c
./configure  
make 
make install
ldconfig
apt-get update 
apt install asn1c libdbd-sqlite3
git clone git://git.osmocom.org/libosmocore
git clone git://git.osmocom.org/libosmo-abis
git clone git://git.osmocom.org/libosmo-dsp
git clone git://git.osmocom.org/libosmo-netif
git clone git://git.osmocom.org/osmo-ggsn 
git clone git://git.osmocom.org/osmo-sgsn 
git clone git://git.osmocom.org/osmo-bts 
git clone git://git.osmocom.org/osmo-trx 
git clone git://git.osmocom.org/osmo-pcu 
git clone git://git.osmocom.org/openbsc
cdlibosmo-abis
./configure  
make -j($nproc)
make install 
ldconfig
cd libosmo-dsp
./configure  
make -j($nproc)
make install 
ldconfig
cd
cd libosmocore
./configure  
make -j($nproc)
make install 
ldconfig
cd
cd libosmo-netif
./configure  
make -j($nproc)
make install 
ldconfig
cd
cd osmo-ggsn
autoreconf -fi
./configure --enable-gtp-linux 
make -j($nproc)
make install
ldconfigcd
cd osmo-sgsn
./configure  
make -j($nproc)
make install 
ldconfig
cd
cd osmo-bts
git checkout 1.0.1
./configure --enable-trx
make -j($nproc)
make install 
cp /usr/local/bin/osmo-bts-trx /usr/local/bin/osmo-bts-calypso
ldconfig
cd
cd osmo-bts
./configure --enable-trx
make -j($nproc)
make install 
ldconfig
cd
cd osmo-trx
autoreconf -fi
./configure --with-lms --with--uhd
make -j($nproc)
make install
ldconfig
cd
cd osmo-pcu
autoreconf -fi
./configure 
make -j($nproc)
make install
ldconfig
cd
cd openbsc/openbsc
autoreconf -fi
./configure 
make -j($nproc)
make install
ldconfig
cd
git clone https://github.com/bbaranoff/osmonitb nitb 
cd nitb
chmod +x tun.sh
cp -r /root/imsi-catcer/asterisk/. /etc/asterisk/.
#Download open-core-amr
wget https://freefr.dl.sourceforge.net/project/opencore-amr/fdk-aac/fdk-aac-2.0.1.tar.gz
tar zxvf fdk-aac-2.0.1.tar.gz
cd fdk-aac-2.0.1.tar.gz
./configure 
make
sudo make install 
sudo ldconfig
#mISDN
rm -Rf /lib/modules/$(uname -r)/kernel/drivers/isdn/hardware/mISDN 
rm -Rf /lib/modules/$(uname -r)/kernel/drivers/isdn/mISDN/ 
depmod -a 
apt-get install git build-essential libtool autoconf automake linux-headers-5.4.0-52-kali2-all-amd64 
git clone https://github.com/ISDN4LINUX/mISDN 
git clone https://github.com/ISDN4LINUX/mISDNuser 
#As of Debian 8.5, there is an automake version mismatch, fix it via:
cd mISDN
aclocal; automake --add-missing 
./configure
make modules 
make modules_install 
depmod -a 
cd
cd mISDNuser
make 
./configure
make 
make install 
cd example
make 
cd 
git clone https://github.com/fairwaves/lcr 
cd lcr 
autoreconf -i 
./configure --with-sip --with-gsm-bs --with-gsm-ms --with-asterisk 
make 
make install 
ldconfig 
cp chan_lcr.so /usr/lib/asterisk/modules/ 
cp -r /root/imsi-catcher/. /usr/local/etc/lcr/.
#Change in /etc/asterisk/sip.conf with your sip provider login and pass (ex diamondcard)
apt-get install alsa-oss 
modprobe snd_pcm_oss 
modprobe snd_mixer_oss 
modprobe mISDN_core
modprobe mISDN_dsp

RUNNING !!!

First search strong rssi

# cd trx/src/ # sudo host/osmocon/osmocon -m c123xor -p /dev/ttyUSB0 -c target/firmware/board/compal_e88/rssi.highram.bin

Ctrl-C remove and put the battery

Shell #1

# cd trx/src/ #. /host/osmocon/osmocon -m c123xor -p /dev/ttyUSB0 -s /tmp/osmocom_l2 -c target/firmware/board/compal_e88/trx.highram.bin -r 99

Shell #2

# cd trx/src # ./host/osmocon/osmocon -m c123xor -p /dev/ttyUSB1 -s /tmp/osmocom_l2.2 -c target/firmware/board/compal_e88/trx.highram.bin -r 99

Shell #3

# cd trx/src/host/layer23/src/transceiver/ # sudo ./transceiver -a [YOUR ARFCN FOUND WITH RSSI] -2 -r 99

shell #4

# cd osmonitb # ./second_dhclient.sh eth0

Replace eth0 with your network interface

# ./tun.sh # ./osmo-all start

Check with

# ./osmo-all status

And stop with

# ./osmo-all stop

Shell #4

# osmo-nitb -c ~/.osmocom/open-bsc.cfg -l ~/.osmocom/hlr.sqlite3 -P -m -C --debug=DRLL:DCC:DMM:DRR:DRSL:DNM 

Shell #5

# lcr start

Shell #6

# osmo-bts-trx -c ~/.osmocom/osmo-bts.cfg -r 99

Shell #7

# asterisk # asterisk -rvvvvvv

if you use FTDI cable you have to modify osmocon command by

known problems. In some situations (like, apparently, using FTDI serial cables), you might need the -m c123 mode for your MotorolaC123 instead of the normal -m c123xor see THIS

To make your imsi catcher work you have to change Location Area Code LAC in ~/.osmocom/open-bsc.cfg to fit with a LAC near you you can find it in RSSI app

Exit mobile version