This is for the new stuff. At least 4G (not sure about 5G). It analyzes the packets and looks for things like downgrade requests, null ciphers, and towers doinh IMSI identity requests.

See lib/src/analysis/* for the code.

No lookups in incomplete databases to cause false positives. Much better than the previous projects.

Reply to this note

Please Login to reply.

Discussion

I'll post to the Shmoocon talk when it's posted (probably 6-12 months, it was just given last weekend)

Legit. 🤝