EvilZone

Hacking and Security => Mobile Hacking => : Live Wire May 18, 2012, 09:47:25 PM

: Phone hacking - A technical definition
: Live Wire May 18, 2012, 09:47:25 PM
Whats the deal with this? All you hear about in the news today is "phone hacking". But, after some research, I can't seem to find a real definition of what it actually is. Anyone have any information to clear up this point? Thanks.


PS - A real definition of what it is. Wiretapping, rooting, or what?
: Re: Phone hacking - A technical definition
: techb May 18, 2012, 09:54:45 PM
Most of the "phone hacks" I've seen on the news is people getting in the devices and grabbing all the naked pictures off the phones. The only other reason I see it happening is for session high jacking.
: Re: Phone hacking - A technical definition
: Live Wire May 18, 2012, 10:00:01 PM
Ah. Thanks for clearing that up. lol. You wouldnt happen to know how these attacks were done, other than good old XSS? or is that just about it.
: Re: Phone hacking - A technical definition
: techb May 18, 2012, 10:14:03 PM
I've never done it, and only heard about it.


But here (http://www.dailytech.com/Researchers+Show+How+to+Remotely+Steal+Pics+SMS+Texts+From+iPhone/article17973.htm) is something you might find useful, or at least a starting point.
: Re: Phone hacking - A technical definition
: Kulverstukas May 18, 2012, 10:41:57 PM
iShit been always clusterfucked with malware, no surprise there. Remember that rickroll worm? hilarious.

On topic: "phone hacking" nowadays (smartphone era) refers to breaking the software side of your phone such as jailbreaking, or rooting, or flashing or whatever. When smartphones were just a dream the "phone hacking" was a synonym of "phone phreaking" which was basically hacking phone lines to get free calls, listen in on calls, do pranks stuff, it's where all those boxes (beige box, busy box, red box, orange box etc.) came out - <insert captain crunch reference here>.

So... did I define what it is for ya?
: Re: Phone hacking - A technical definition
: p_2001 May 19, 2012, 04:45:03 AM
phone hacking is more like unlocking bootloader, gain super user access in androids, removing restrictions on permissions and installing uncertified apps.....

symbian v3 = removing cert. restrictions
android = root access..... radio modification. ....... installing other os
ios = jailbraking (as far as I know, maybe some other shit too)
: Re: Phone hacking - A technical definition
: techb May 19, 2012, 04:50:07 AM
OP said hacking, when I think gaining super user I think of rooting. I was under the assumption that OP knew about and what rooting was, so I supplied a more security related answer. Even though gaining root is a hack, I hear the term "rooting" instead of "hacking" associated with any privilege escalations. But all in all, replies supplied are all correct. It all depends on what your wanting to do.


@Kulver:


I built a beige box once, on them old ass phones in my area that people still use, it was fun while it lasted. And actually phreaking, at least the hardware side, got me into hardware even more. The anarchist cookbook was my ref, and at the time I thought it was the shite. Still, Jolly Rogers might help out in the zombie apocalypse.
: Re: Phone hacking - A technical definition
: Kulverstukas May 19, 2012, 10:12:03 AM
I built a beige box once, on them old ass phones in my area that people still use <...>
Awesome :D do you still have it? I'd like to see how it looks!
: Re: Phone hacking - A technical definition
: techb May 19, 2012, 02:26:32 PM
Awesome :D do you still have it? I'd like to see how it looks!

Unfortunately no, twas stripped for parts long ago. It just looked like a black square project box that you would find at radioshack.
: Re: Phone hacking - A technical definition
: Wolf May 19, 2012, 05:39:44 PM
Long time ago on the nokia phones you could copy sim cad information, then put that sim in another phone. So say you wanted to spy on that one druggy who always gave you shit, steal his phone, copy the sim, and get all his texts and calls :)

(Note: this was not as easy as I'm making it sound)

Most of the phone hacking that I know about is actually done with blue tooth tho, especially if they dont have a password, you could go for a file transfer while they have no clue what's going on. You can get their call logs, texts, pics, everything that way. Did it with my Mac one time in Science class back in high school. Found some disturbing things... :D

(Note: I was given the mac, it was not a first choice. No judging against a free computer)
 
: Re: Phone hacking - A technical definition
: techb May 19, 2012, 05:44:04 PM
Long time ago on the nokia phones you could copy sim cad information, then put that sim in another phone. So say you wanted to spy on that one druggy who always gave you shit, steal his phone, copy the sim, and get all his texts and calls :)

(Note: this was not as easy as I'm making it sound)

Most of the phone hacking that I know about is actually done with blue tooth tho, especially if they dont have a password, you could go for a file transfer while they have no clue what's going on. You can get their call logs, texts, pics, everything that way. Did it with my Mac one time in Science class back in high school. Found some disturbing things... :D


You still can. Things are much easier now though. Equipment. (http://www.adafruit.com/products/101)
: Re: Phone hacking - A technical definition
: Wolf May 19, 2012, 05:48:09 PM
i didn't know about all the fancy tools back then and most phones are phasing out of sim cards. While still possible it was easier back then. The blue tooth hack is very current though. Especially with the tools avalible today.

: Re: Phone hacking - A technical definition
: techb May 19, 2012, 06:05:13 PM
Not necessarily phone related, but on the bluetooth subject, most headsets pass codes are set to 0000 or 1234. So ease dropping on conversations is really easy.


You could use something like CarWhisperer (http://trifinite.org/trifinite_stuff_carwhisperer.html), or roll your own program. Bluetooth is pretty easy code wise, python has a lib (http://code.google.com/p/pybluez/) that could probably do it. And with SL4A in android, I don't see why not dropping the need for a computer.
: Re: Phone hacking - A technical definition
: Kulverstukas May 19, 2012, 08:02:19 PM
That "blue tooth hacking" is called BlueSnarfing, or BlueJacking, both mean the same.

@techb: interesting idea. I might look into this later on :) remind me some time in the future...
EDIT: this might be cheaper and easier? http://dx.com/p/usb-sim-card-reader-6641?item=1
: Re: Phone hacking - A technical definition
: techb May 19, 2012, 08:05:27 PM
That "blue tooth hacking" is called BlueSnarfing, or BlueJacking, both mean the same.

@techb: interesting idea. I might look into this later on :) remind me some time in the future...


I might play around with it myself, just need a headset. Also have other ideas with bluetooth, but that would go off topic WAY too much lol.
: Re: Phone hacking - A technical definition
: p_2001 May 19, 2012, 08:20:59 PM
@techb,

I tried copying sim some time back last year.... it does not work.. .the sim card locks itself if you try to read it a few times...

the new sim cards (2002 or something onwards) are 128 bit encrypted with mechanism put that makes it impossible to copy ...

the old sim cards could be copied though but even that is useless whenever there are 2 sims for same number the network provider knows instantly and can easily track you down..... unless you have copied someones old sim and want to eavesdrop and know the exact time of call it is useless...


hacking phones can be done by uploading edited android/other os apps with your own code added to it...
like take some already cracked app, add some bits to it and then upload it to some warez forum..... most apps have required permissions like accessing internet and all...




: Re: Phone hacking - A technical definition
: Kulverstukas May 19, 2012, 08:54:51 PM
Maybe the cards were PIN protected, like there was a PIN code set on them? it would be logical that it wouldn't allow you to copy data if it had a PIN.
I read a paper somewhere about it, there was a theoretical technique discussed as well, to crack the PIN.
: Re: Phone hacking - A technical definition
: p_2001 May 19, 2012, 09:11:15 PM
PIN is actually generated by user to protect card content like sms and contacts... it is rather easy to break and very much unreliable..... the customer care ppl ask for last 4 digits of sim card number and issue you a PUK code and the algorithm for various carriers are available on net  to generate the codes yourself..

the SIM has more than that..... if you try to read the card without some correct values (whose name I have forgotten) than the card locks or corrupts itself and even a forensic lab will have a hard time.... you would probably need an electron microscope or something lol...