I watched your video, and at 3:45, you mention the synchronization settings using the command "sudo ./transceiver -a 240 -r 99 -2". You mentioned that 240 is the ARFCN for your setup. How can I determine the correct ARFCN for my setup? Could you help me understand how to calculate or analyze it? I bought two Motorola phones and really want everything to work out. Thank you very much for your help! Best regards,
You’re syncing it to an existing gsm tower. So you’d have to first survey with the phone using the correct OsmocomBB firmware or use something like grgsm to survey and find an existing network nearby you - that’s the arfcn that you’d need. In my case I synced to a gsm network I created with an SDR.
I have important question, IF all data from phone and cell tower number X is encrypted by A5/3 if a person sniff data and have KC can decrypt target data?cell tower X give same KC code to each connection or for each connection give different KC ?KC can decrypt All algorithm A5/1 2 3?
If we give same data of a GSM tower close to us ,our phone automatically connect to our BTS?if not,how we can do for automatically connect our phone to BTS ?
You’d have to have some kind of backend paid access probably via sip or by something else to accomplish that. I’ve only ever called from my BTS to a real phone on a real network via sip.
CalypsoBTS is specific to the phones, not an SDR. You would want this instead ruclips.net/video/8TTeAiMRR7U/видео.html Or YateBTS which is for thr bladerf and is loaded in DragonOS.
GSM.... you have to go to a museum for that !
I watched your video, and at 3:45, you mention the synchronization settings using the command "sudo ./transceiver -a 240 -r 99 -2".
You mentioned that 240 is the ARFCN for your setup. How can I determine the correct ARFCN for my setup? Could you help me understand how to calculate or analyze it?
I bought two Motorola phones and really want everything to work out.
Thank you very much for your help!
Best regards,
You’re syncing it to an existing gsm tower. So you’d have to first survey with the phone using the correct OsmocomBB firmware or use something like grgsm to survey and find an existing network nearby you - that’s the arfcn that you’d need. In my case I synced to a gsm network I created with an SDR.
oml.c:354 OC=CHANNEL INST=(00,00,07) OPER STATE NULL -> Disabled
oml.c:144 OC=CHANNEL(03) INST=(00,00,07): Tx State Changed Event Report
Shutdown timer expired
"BTS"
I have important question, IF all data from phone and cell tower number X is encrypted by A5/3 if a person sniff data and have KC can decrypt target data?cell tower X give same KC code to each connection or for each connection give different KC ?KC can decrypt All algorithm A5/1 2 3?
That I don’t know, never tried on my little lab.
@@cemaxecuter7783 your lab is little but content is big, content is important
Excellent!
can you do openbsc with motorola phone?
In this video a CalypsoBTS compatible Motorola phone is the bts. Some phone models are listed here
github.com/spm81/CalypsoBTS
Thank you, in fact, I was looking for a way to use this method to contact Hlr and do an SS7 attack
If we give same data of a GSM tower close to us ,our phone automatically connect to our BTS?if not,how we can do for automatically connect our phone to BTS ?
Most likely yes, after properly configuring conf files.
How to send sms to real network ? And we connect to the real network
You’d have to have some kind of backend paid access probably via sip or by something else to accomplish that. I’ve only ever called from my BTS to a real phone on a real network via sip.
❤️
IS IT POSSIBLE TO USE SDR as a transceiver when starting CalypsoBTS.
if yes, which one.
CalypsoBTS is specific to the phones, not an SDR. You would want this instead ruclips.net/video/8TTeAiMRR7U/видео.html
Or YateBTS which is for thr bladerf and is loaded in DragonOS.