ninjhacks/gsmevil

This program capture SMS & IMSI numbers of cellphones around you.

GSMEVIL is python based tool which use for capturing imsi numbers and sms and also you able to customize your capturing and it's make easy to capture sms and imsi numbers for those who not have much knowledge about gsm packets capturing.

Disclaimer :-

This program was made to understand how GSM network works. Not for bad hacking ! We are not responsible for any illegal activity !

Setup

Install GSMEvil :

git clone https://github.com/sharyer/GSMEvil.git
sudo apt-get install python-pyshark

Install Gr GSM : ( For receiving GSM transmissions )

sudo add-apt-repository -y ppa:ptrkrysik/gr-gsm
sudo apt-get update
sudo apt-get install gr-gsm

If gr-gsm failled to setup. Than follow those this : https://github.com/ptrkrysik/gr-gsm/wiki/Installation

Install Kalibrate : ( For finding frequencies )

sudo apt install build-essential libtool automake autoconf librtlsdr-dev libfftw3-dev
git clone https://github.com/steve-m/kalibrate-rtl
cd kalibrate-rtl
./bootstrap && CXXFLAGS='-W -Wall -O3'
./configure
make
sudo make install

Usage

You need gsm frequency on which you capture sms or imsi. By using kalibrate you will get all your near gsm base stations frequencies.

kal -s GSM900

kal: Scanning for GSM-900 base stations.
GSM-900:
	chan: 4 (935.8MHz + 320Hz)	power: 1829406.95
	chan: 11 (937.2MHz + 308Hz)	power: 4540354.88
...

Now you need to capture gsm traffic using gr-gsm on frequency of your any gsm base station which you get from kalibrate.

grgsm_livemon -f <your_frequency>M

Example :

grgsm_livemon -f 935.8M

if you see output that's mean you getting gsm packets than continue other setps else change frequency.

2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b
2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b
2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b
2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b 2b
...

Now every thing is ready you can start now capturing sms or imsi numbers using gsmevil. You able to run imsi catcher and sms sniffer both at same time using 2 seprate terminal for capture imsi numbers and sms both at same time.

cd <your gsmevil folder> #Example cd GSMEvil

Capturing IMSI :

Run this command to quick start imsi capturing.

python ImsiEvil.py 

Options :

python ImsiEvil.py -h
Usage: ImsiEvil.py: [options]

Options:
  -h, --help            show this help message and exit
  -i IFACE, --iface=IFACE Interface (default : lo)
  -p PORT, --port=PORT  Port (default : 4729)
  -m IMSI, --imsi=IMSI  IMSI to track (default : None, Example: 123456789101112)
  -s SAVE, --save=SAVE  Save all imsi numbers to sqlite file. (default : None)

For save all imsi numbers with details in sqlite file.(It's will show you output on screen and also save in file)

python ImsiEvil.py -s example.db

For capture only specific imsi. (It's will show you only your given imsi result)

python ImsiEvil.py -m imsi_here (Example: python ImsiEvil.py -m 123456789101112)

Capturing SMS :

Run this command to quick start sms capturing.

python SmsEvil.py 

Options :

python SmsEvil.py -h
Usage: SmsEvil.py: [options]

Options:
  -h, --help            show this help message and exit
  -i IFACE, --iface=IFACE Interface (default : lo)
  -p PORT, --port=PORT  Port (default : 4729)
  -n NUMBER, --number=NUMBER Phone number (default : None)
  -s SAVE, --save=SAVE  Save all text messages to sqlite file. (default : None)

For save all sms in sqlite file.(It's will show you output on screen and also save in file)

python SmsEvil.py -s example.db

For capture only specific phone number sms. (It's will show you only your given phone number result)

python SmsEvil.py -n phone_number_here (Example: python SmsEvil.py -n 12345678910)

Requirements

linux operating system (kali linux) rtl-sdr (RTL2832U) with antenna (less than 15$) or HackRF

Links

Frequency : https://www.worldtimezone.com/gsm.html or https://en.wikipedia.org/wiki/GSM_frequency_bands Sdr : https://en.wikipedia.org/wiki/Software-defined_radio Sms : https://en.wikipedia.org/wiki/SMS#GSM Imsi : https://fr.wikipedia.org/wiki/International_Mobile_Subscriber_Identity Cell id : https://en.wikipedia.org/wiki/Cell_ID or https://unwiredlabs.com/ GSM : https://en.wikipedia.org/wiki/GSM Frequency Calculator : https://www.cellmapper.net/arfcn GR-GSM : https://github.com/ptrkrysik/gr-gsm

Donations

Bitcoin : 17i3fuRvPB6RyugCwFW79zvGoZdNTjyQxJ

Contact

Website : https://www.ninjhacks.com
Facebook : https://www.facebook.com/ninjhacks
Twitter : https://twitter.com/ninjhacks
Email : [email protected]

gsmevil's Issues

shmget: fonction not implemented

Hi,
I m facing this problem when i launch kal -s GSM900 :

shmget: Fonction not implemented
terminate called after throwing an instance of 'std::runtime_error' what(): circular_buffer: shmget
zsh: abort kal -s GSM900

I'm under nethunter, everything is well installed so i really don't understand

Decoding non english SMS text

I am using GSMEvil to capture SMS. I am getting english text perfectly. However, for non english text and spaces, it is giving garbled content. For eg:
SMS text: 'آنا ھے یانہیں SMS کرو ' (as per wireshark)
is shown as '\xd8\xa2\xd9\x86\xd8\xa7 \xda\xbe\xdb\x92 \xdb\x8c\xd8\xa7\xd9\x86\xdb\x81\xdb\x8c\xda\xba SMS \xda\xa9\xd8\xb1\xd9\x88'
Can you help me to identify encoding and thereby decoding to get non english characters?