Understanding IMSI: Key Role in Cellular Networks and Security Measures

About IMSI

IMSI stands for International Mobile Subscriber Identity, which is a unique identifier used to distinguish different users within a cellular network. It is non-repetitive within the resident cellular network. The IMSI can be used to query user information in the Home Location Register (HLR) and Visitor Location Register (VLR). To prevent eavesdroppers from identifying and tracking specific users, sometimes communication between the phone and the network uses a randomly generated Temporary Mobile Subscriber Identity (TMSI) instead of the IMSI.

Of course, please provide the original heading so I can assist you with the translation and inclusion of “IMSI.”

IMSI />

As shown in the image, the IMSI consists of MCC (Mobile Country Code), MNC (Mobile Network Code), and MSIN (Mobile Station Identification Number), and is generally 15 digits.

Preparation

Required Hardware

HackRF one

A computer (Kali Linux, other distributions also work)

Installing IMSI-catcher, gr-gsm, GNU Radio, and others

You can refer to the installation here as the steps are basically the same.

IMSI />

Create a file config.conf in /root/.gnuradio and paste the following content:

Finally, install kalibrate-hackrf (optional, if not installing, skip to below)

Determining the Frequency

If you have installed kalibrate-hackrf:

Code Language: JavaScriptCopy

cd kalibrate-hackrfcd src./kal -s GSM900 -g 40 -l 40

Wait for a moment and the following situation appears as shown in the image below

Of course, please provide the original heading so I can assist you with the translation and inclusion of “IMSI.”

Open gr-gsm_livemon, select one of the frequencies just obtained and fine-tune until the terminal displays data.

Code Language: JavaScriptCopy

grgsm_livemon

Of course, please provide the original heading so I can assist you with the translation and inclusion of “IMSI.”

The data appears as shown in the image below

Of course, please provide the original heading so I can assist you with the translation and inclusion of “IMSI.”

If kalibrate-hackrf is not installed, you can only fine-tune using the frequency given at the beginning.

Obtaining IMSI

Switch directory

Code Language: JavaScriptCopy

cd IMSI-catcher/

Change permissions

Code Language: JavaScriptCopy

chmod u+x simple_IMSI-catcher.py

Run

Code Language: JavaScriptCopy

./simple_IMSI-catcher.py

Wait a moment and the information will be displayed

Of course, please provide the original heading so I can assist you with the translation and inclusion of “IMSI.”

Open Wireshark to see more detailed information

Code Language: JavaScriptCopy

sudo wireshark -k -Y 'gsmtap && !icmp' -i lo

Note: Base station location can be performed according to LAC and cellId, read the original text to enter the location website