Using A RTL-SDR To Learn About The GSM Network Around You, Hak5 1621

Hak5 -- Cyber Security Education, Inspiration, News & Community since 2005:
____________________________________________
This time Shannon and Darren explore the available GSM information using some Kali Linux, WireShark and a RTL-SDR. All that and more, this time on Hak5!
~-~~-~~~-~~-~
Please watch: "Bash Bunny Primer - Hak5 2225"
• Bash Bunny Primer - Ha...
~-~~-~~~-~~-~
____________________________________________
Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community - where all hackers belong.

[@3nertia]

I bought an aluminum RTL-SDR on Amazon that came with 3 antennas for $30. You guys are responsible for that purchase; much love

[@MLWALK3R]

Ad Skip: 9:45

[@BladeRunner-td8be]

I watched the whole thing, and I have to say it was worthwhile and fun. Shannon cracked me up at least three times when she mildly shushed her cohort for acting up. This seems like an awful lot of work for very little, but then again, I'm a noob. Thumb up and subscribed. Cheers!

[@checktheevidence]

Very interesting and I like the humour you have put in to this very well-produced video.

[@aGianOstaLgia]

Guys, i love you. So many years , so many good shows. This episode was really nice also. An honest comment follows : i got a big laugh when at 29:31 , with "bigger dongles are better" , mostly the southern accent+theatricality made it happen. Keep it going!

[@ShannonMorse]

lol, sometimes I don't even know....

[@zeekb.7609]

well done. you guys make this much more digestible. I know my (failed) learning on wifi security had me walking away much more by now by my own learning methods. Keep up the good work :)

[@purplemutantas]

If you are going to play SDR, you should have a better antenna. Head over to Ham Radio Outlet in Oakland and pick up a discone antenna. The diamond D130J covers 25-1300 MHz. Even on a tripod inside the studio, it would work better than the crappy antenna that came with the dongle. For a cheaper option there is the MFJ-1868 discone. It's not as heavy duty as a diamond or comet or whatever; but if you are using in the studio primarily, it wont be subject to the elements.

[@adriangall9025]

Thanks Shan and Dare. Good info. I especially liked the way you reminded me of WHY I quit using UNIX/Linux. Even the simplest chores are a PiA !

[@DDBAA24]

Now in retrospect I completely understand why this dynamic duo did not last too much longer literally competing for oxygen and words.. 48 laws of power rule one never outshine the master. Sorry you had to deal with this Darren , That said it's always nice to see people excited to learn , day ones miss you !

[@goku445]

wtf?

[@MasterNoxob]

i just discovered an awesome channel! i wonder which parts of youtube i was wandering, i've never seen this channel...

[@jimjulian4443]

Thanks for the video. Make sure your wifi is off. My laptop was smothered in web activity from unknkown sources. Slowed program till instrumentation went blank and speaker chirped. Used in Ubuntu 14.04 Live dvd, after replacing "Missing" blocks with new counterparts. doubling clicking a "Missing Block" shows the settings made in the VMware Kali version. Works. Slight variations in GNU Radio versions.

[@nozmoking1]

Get to the good stuff! Too much superfluous dialog...

[@tenminutetokyo2643]

These days tech is The World's Biggest Kindergarten.

[@dankmheems290]

If you want someone to type it out for you on your terminal than goto Google and read a text guide and cut and paste like the nub you are.

[@dankmheems290]

Length of the show does not denote how much they make. That is not how marketing works, this isn't frequent flyer miles. They get money for mentioning during a break the product and why they like it. For "hackers" you guys sure are stupid.

[@williamcornell3599]

@@dankmheems290 there was a while when the KZbin algorithm was favoring long videos

[@TheGnarTube]

thanks to hak5 for great vids. using this tonight for my new hackrf

[@hak5]

+f u google Have fun! - Shannon

[@phlynniii]

Also one of the best episodes. Possibilities over possibilities

[@jimedgar6789]

Just found this channel. AWESOME! Smart people that don't make dumb jokes about D&D.

[@phlynniii]

Also one of the best... So many possibilities and much more...

[@TVTacon]

Darn it, why didn't this come out a week and a half ago when I was doing this, would have made life so much easier haha

[@dodge1629]

Back in 2000's I used the Agilent 8960 test set to "simulate" a GSM station with a custom firmware .... I'm sure it also can be used with hackrf one to do something cool!

[@jimedgar6789]

I have always loved this channel. Great information packaged in a relaxed way... and of course Shannon Morse.

[@PeterPan-fl1lp]

Shannon you look super super fun!

[@Jum870416]

It's an amazing video ! Just wondering if you could get TMSI and etc by doing this ?

[@JontheRippa]

Thank you 👍👏👌✌️

[@mikaelblomkvist7486]

just outta curiousity what acer laptop model is that & specs?? I like the sleek & thin design might get one & run Kali on it....

[@Todd82TA]

Hey guys, anyone know where the patch is on rtl-sdr for AIRPROBE working with the 3.7.2+ version of GNURadio? Coulnd't find it... "(

[@ithechnology8]

That was such an awesome episode I am going to try this out :)

[@bart10pont]

does airprobe also run on Ubuntu ?

[@buraknuhemiroglu6033]

so this video was uploaded in 2014, does the problem with oracle virtual box still persist ? i am using oracle virtual box extended and it seems working fine, like it takes all the fm and other things normally.

[@20thcenturyfoxyoutube]

they have tremendous chemistry

[@gokulkannan1845]

The video starts @ 15:00 Thank you.

[@dylangerdaly5922]

You guys should do a segment on decryption of GSM, I believe all you need is the TMSI and KS numbers to decrypt GSM traffic (SMS, Voice, even 3G data... SIP/RTP Traffic)

[@johnnyjohn9961]

any forums or websites i can learn more about it?

[@SuperPedrado]

Hi Shannon and Darren, i would like to know if it is possible to create a gsm network using RTL-SDR instead of USRP??? If so, can you give me an ideia of how to achieve it?

[@mahound9]

Pedrado Jr No, the RTL-SDR can't broadcast. So, you can't have a BTS that sends data. You'll need a full-duplex MIMO capable device at high enough power (~1 watt)...

[@EscapeePrisoner]

When I go to the airprobe site you mention in the video I'm getting a warning saying the certificate has expired. Because this is something I'm still learning about can someone explain why I should trust or not trust going to that site?

[@Dontcopit]

How do you deal with gnuradio 3.7 when trying to configure gsmreceive, as it keeps throwing a gnuradio-core not existant error. Of course this is in the latest version of Ubuntu I am using.

[@memoryic1]

so lets summarize what we 've learned today 1) don't confuse the minus sign (-) with the ampersand (_) 2) don't forget to disconnect the USB from Host on VM if you plan using it 3) If you want the "good stuff" in wireshark, don't forget to apply some pressure on the "start" button . YAY !! Anyways thank you for sharing this video. Introductory but well explained.

[@nethacker91]

+memoryic1 This is an ampersand "&"

[@sonarmb]

holy crap....I joined the Royal Australian Navy in 1981.....you make me feel old.

[@WithIsraeliStand]

If i understand your video correctly you get "meta data", could you use this to locate somebodies position. For example i have 3 pineapples in a triangle, can i get signal strength of every phone in that field?

[@turtleguy8267]

Big fan ! :)😀😃🙂

[@MrACP1911]

I hope I don't get much heat for this question, could you possibly tune to hydrogen emission line, could you possibly use this in conjunction with a feed horn on a for example a 10 foot Sat to do some radio astronomy.

[@goku445]

You absolutely can (7 years later).

[@djdonbentley2141]

their telling you just enough to say, were not telling you really how to do it, but that its interesting to look into

[@djiphantom9730]

hey, interesting video I have a problem. I have kali linux 2 in a VBOX, but I can´t connect the rtl dongle. I get a error Can you help me please

[@rayr268]

Swig ties high level languages into C and C ++. Languages like Python and Ruby.

[@r_davydov]

What music is playing in the background @ 9:44? Artist/name of the track?

[@sumfatt640]

hallo, please what version of rtl sdr is used here, and i didnt get what is the final result after all this video ?

[@earnestredwood4694]

Question is there a Open Source sotfware that I can use to clear my history and or every were I've been on the internet, with out formatting my drive.

[@Jacklsovakia1]

Nope. If you're on it, your there forever.

[@highflowhighflow9896]

hmm cant get my head to this , seeing loads of data on the screen but thats usefull? gsm is about audio from human to human were is that ?

[@bierviltbever]

what is the small laptop-like device darren is using?

[@McnightStricker]

kali linux again , wow i do adore kalilinux

[@james10739]

Was this really 5 years ago dang that's crazy

[@d74g0n]

I don't know Linux so well beyond 1 college course on Blackhat in the late 90's. Is there any chance that this would work on debian (I simply ask because it is what is on the BeagleBone Black now a days)

[@user-eh2cq4iz2e]

d74g0n Well, Kali linux runs on debian so basically yes it does work!

[@3nertia]

Almost every damn distro is based on Debian anyway. If it works in a Debian-based distro (Kali, Ubuntu, etc.) chances are it'll work in Debian itself

[@McnightStricker]

sure it does which is the best for kali linux to be working on debian

[@bootsyaaron]

I am using that SDR with a ham it up converter v1.2 to receive HF frequencies.

[@purplemutantas]

How well does the ham it up work?

[@Bob14815]

+purplemutantas great

[@freeari1000]

how to use GSM MAP with RTL-SDR ? can you make some video about it ?

[@deankruger6814]

17:43 what is the last two dependency's needed ?

[@waltk4056]

wonder if qemu-kvm can run kali linux without USB packit drop

[@abdennourbouras6243]

Please help can't get gnuradio-companion version 3.6.x.x. I got Kali linux 2016.2 version wich bring me always 3.7.x.x. is there any method to get the old version please help thnx

[@Retrospelaren]

Hi. Is it the same procedure with the newer Kali 2.0, or is there a step you can skip or do differently? Thanks for all the hard work you put in.

[@jdlane5136]

which VMware software did they use?

[@jvianneyjr]

Hi! Could I count a number of meteor in a meteor shower using that SDR RTL Dongle?

[@Bob14815]

+Jose Vianney www.rtl-sdr.com/building-a-passive-radar-system-with-an-rtl-sdr/

[@jvianneyjr]

+Y4XQU4 Thank you! :)

[@tannewton]

I bet Shannon hacks all day long. I personally think hacking should not be punished as long as no data is stolen. After all, most hackers just want to learn how things work.

[@WixelyHolmes]

Good information smothered in fake enthusiasm

[@hak5]

+Wixely Holmes no "fake enthusiasm" here! We actually enjoy our jobs. :)

[@WixelyHolmes]

I believe you, there are a few moments where you look like you are stuck for words and you fill the gap with inane expressions. But since you actually replied to me and didn't dismiss me as a toll, I'll give you a sub and see how it goes.

[@RoulDukeGonzo]

There is zero chemistry between you guys.

[@guywitharadio6043]

Is there a way to analize Encrypted DMR traffic using this process?

[@iamsemjaza]

Using a HackRF might be "too much fun" since you might also be able to transmit into those frequencies.

[@YoramRotbach]

To be able to build the gsm-receiver do: apt-get install libboost-all-dev

[@kennethcarvalho3684]

So now do you dominate your hubby with all this knowledge 😂🤣🤣

[@aaronnpny]

Did he say we wanted to sniff our own dumps? HA HA HA

[@galaxysam1375]

They look like really healthy hackers!

[@EpicBigfoot]

Now use gr-gsm, its an updated version of airprobe. Grab it from git.

[@ZMXTechnology]

Sub 304993 says hi, keep up the good work too bad GSM has been "turned off" here in Australia. got 3 cells with kalibrate tho?

[@bart10pont]

can you do the same with Ubuntu or Rasbian?

[@WickdPerfekT]

nice vodka in the background lol

[@dokoloko5579]

Anyone know what name of techno music they play in the background at the beginning of the videos?

[@MichaelBeale]

"Sandstorm" - Darude

[@waltk4056]

is hak 5 geting buzzed on packets?

[@brandonedwards7166]

If a frequency is beamed into my house expect me to decode it.

[@email16v]

I have a lot to learn. Thanks

[@Xalphadog69X]

what laptop are you guys using?

[@KwithH]

Acer Aspire S7 (2013)

[@jayehughes6340]

Toshiba T1000

[@lausd3562]

What is it with Linux people and wanting to type a lot?

[@galaxysam1375]

Wooow coool wanna see this antenna frequency transmit show us

[@CodyShell]

how do you find the GSM frequency in your area?

[@mahound9]

Cody Shell Look it up. Depending on where you are it will probably be in either (Mhz) 800/900/1700/1800/2100 bands with the other cellular stuff. Usually in between wideband data [big plateaus of even noise] or trunked radio and pagers. (Narrowband, intermittent spikes of data.)

[@CodyShell]

Rene Mahound ended up figuring it out

[@martinpaul3383]

yay

[@TrolleoMcTroll]

Cool video. One of the few tech channels I bother to subscribe to. Wonder what happened to his arm??

[@ShannonMorse]

***** pulled a Darren.

[@rob-karenkennedy-parker3166]

I didnt understand 90 percent of this. Any suggestions on where beginners should begin?

[@iangraham6730]

Rob-karen Kennedy-parker At the beginning my friend 😉

[@mymapsfolder2785]

Had to come in and comment @29:30 BIGGER DONG-LES are better. However I think you meant antennas. 🤣

[@TheWingnut58]

Over half your vid is getting Winblows ready to use Kali.....YAY! SMFH

[@justinroysdon2630]

10:35 ... ok let's get started

[@deankruger6814]

Will a USRP work as a RTL-SDR ?

[@Bob14815]

+Dean Kruger yes

[@kofiowusu6373]

i got this error , please can any body help me to understand what it means root@kofi:/home/kofi/gnuradio/airprobe/airprobe/gsm-receiver/src/python#./go.sh ~/Downloads/capture_941.8M_112.cfile Traceback (most recent call last): File "./gsm_receive.py", line 3, in from gnuradio import gr, gru, blks2

[@jamesfox9497]

You don't have the correct Python modules installed

[@matthewarmour9105]

snr v e r y l o w here!

[@innerfire369]

Please anyone help when i start the "./gsm_receive_rtl.py -s 1e6" after 1-sec i get the "Aborted" message... Can anyone help me with this ? Thanks.

[@dankmheems290]

I'll repost this for those who asked questions and never received responses. "If you want to explore everything related to gnuradio, and otherwise, type "sudo apt-cache search gnuradio*" The asterisk is important.Just typing it now I see a row of libs, gnuradio-dev, gnuradio-doc (help guide), gr-gsm, gr-osmodr. All sorts of things. Once Gnuradio is running you can launch other peoples projects, .grx files, by typing, 'gnuradio-companion filename.grx', It will launch that persons specific (almost engineering like) map they created for Gnuradio. I have osmos and this fm_reciever one that I found on some blog." Learning to map that out myself is going to take some late nights.

[@aaronstone628]

whats that tiny laptop thats next to him?

[@leachim66]

I would like to know this also

[@fivestar2227]

Collecting / viewing useless cellular data seems like a complete waste of time. Listening to trunked police comms, cordless phones, baby monitors, recording car key fobs and garage door opener pulses would be much more fun.

[@niku4uster]

This thing is really old.. can you make a new video with the latest Linux? Some of the commands aren't going through and nothing is given in the description.

[@BigSlimThic]

Dont we have the right to receive any frequency. As long as we dont transmit.

[@davetriplett4779]

Crush on Shannon))) Snubs Crush)))

[@marcovL1970]

Smart girl

[@pilovali]

Can you receive DAB+ radio with it?

[@robert28040]

With RTL dongle? Sure you can. :D

[@TVTacon]

You can use it straight out of the box for that in fact - comes with pretty deceant software for Digital TV/DAB(+)/FM

[@BradWillmanJ]

It's telling me it's unable to find any of the packages...

[@vicofour]

"numpee" haha

[@herbertsusmann986]

Your power is still illegal. It is effective radiated per in the fwd direction. Too much gain in your yagi for that power. Either drop the power or use a yagi with less directivity.

[@lanceseidman]

Let me take you guys to lunch, my treat &,show my BTC Lock system.

[@bigsky1970]

11:30 your filter is too narrow, which is why you're not hearing anything.