Hacking Whatsapp With SS7 Flaw (Signal System 7) (Tutorial)

Hello, Guys Today I Will Show You How Hack Whatsapp (Penetration Testing)

*WARNING *

1.THIS POST  IS ONLY FOR EDUCATIONAL PURPOSE
2.ALL THE ATTACKS WRITTEN IN THE BLOG ARE PERFORMED BY
  OWN NUMBER OR SYSTEM
3.DON'T USE IN ANY ILLEGAL ACTIVITIES.

(What Is SS7 Flaw Attack. Best Tutorial)

HEY ! FRIENDS LETS START ATTACKING ALL THE APPS WICH WORKS ON
END - TO -END ENCRYPTION METHOD WITHOUT HAVING THE VICTIM PHONE


* Process *

HACKING WITH SIGNAL SYSTEM 7 (SS7)

Both WHATSAPP and TELEGRAM messaging services have an end-to-end encryption for chats in order to protect the privacy of their users and improve their security.

Laptops

Is it enough to keep eyes far from them?

No, according to a recent research conducted by techroods hackers can impersonate victims and reply to both WhatsApp and Telegram chat messages.

Hackers can exploit the SIGNAL SYSTEM 7, aka SS7, which is a set of protocols developed in 1975 that allows the connections of one mobile phone network to another. The information passed from a network to another are needed for routing calls and text messages between several networks.

The SS7 performs out-of-band signaling in support of the call establishment, billing, routing, and information exchange functions of the public switched telephone network (PSTN).WHICH is now also use by BLACK HAT HACKERS  for BOUNCING their networks 

Experts discovered that hackers can exploit a flaw in the SS7 protocol to steal the victim’s identity on the messaging services with just basic skills.

The principal instant messaging services, including WhatsApp and Telegram, rely on the SMS authentication as the primary security verification mechanism, which is routed through SS7 signaling. This means that hackers exploit the SIGNAL SYSTEM 7 to compromise the verification mechanism and take over the victim’s account and impersonate him.

As explained by the experts, the rarest aspect of the story is that hacker does not need high-skills or a special equipment for such attack.

The hackers used a common Linux distro and a publicly available SDK for their tests.

“An intruder doesn’t need special equipment. a hacker used a popular Linux based computer and a publicly available SDK for generating SS7 packets. + After performing an initial attack using SS7 commands, the intruder is able to execute additional attacks using the same methods.” states the paper from Positive Technologies. “For instance, if an intruder manages to determine a subscriber’s location, only one further step is required to intercept SMS messages, commit fraud, etc. + Attacks are based on legitimate SS7 messages. 

HACKING WITH SS7 FLAW

link for ss7 free download:-

SIGNAL SYSTEM 7 FREE DOWNLOAD

Our New website With New UI Come For Great Technical Stuff.

INSTALLATION OF SS7 FOR WINDOWS:-

Note: For SS7 Monitor to work properly, you must install the TX Base and Util software packages available in Dialogic Natural Access Signaling Software Release 0.1 (or higher). Use the Custom installation procedure to install these packages. 

Complete the following steps to install the software under Windows:

 1. After installing the TX Base and Util software packages, log on as a member of the Administrators group.

 2. Download the Dialogic  NaturalAccess SS7 Monitor Software from www.dialogic.com.

 3. Launch Windows  Explorer, and navigate to the location where the software (.msi) file was downloaded.

Click here for more Technical stuff

 4. Click the .msi file to install the software. The Welcome screen appears.

 5. Click Next. 

6. Choose Typical as your Setup Type. This will install SS7Mon package only. 

Note: Do not change the default install location.

7. Click Next.

8. Follow the prompts as the Installation Wizard guides you through the installation process.

9. Reboot Windows before configuring and using the NA SS7 Monitor Software or power off the system if installing TX boards. For additional release information, refer to the release

notes pdf file located in the software release package.

INSTALLATION OF SS7 IN RED HAT LINUX:-

1. Log on as root.

2. Download the Dialogic  NaturalAccess  SS7 Monitor Software from www.dialogic.com. 

3. Unzip and untar the download file by entering the following commands: 

     TYPE:  SETTING :  -     gzip -d filename.tgz

                      tar -xvf filename.tar

where filename is the base portion of the name of the file that you downloaded.

 4. Run the monitor_install script located in the directory in which you opened the tar file, and follow the prompts from the script. 

Note: Do not change the default install location

.

 5. Run one of the following commands to implement the environment changes:

 • . /etc/profile.d/txbase.sh  

Reboot the system. For additional release information, refer to the release_notes.pdf file located in the software release package

CHECK THESETTING:

 BY ENVIRONMENT VARIABLE SETTING 

To set up the system environment correctly, you must add the following system

environment variables in the system login .profile

DIALOGIC_ROOT=/opt/dialogic

 export DIALOGIC_ROOT

 TX_ROOT=$DIALOGIC_ROOT/tx

 export TX_ROOT 

PATH=$TX_ROOT/bin:$PATH export PATH LD_LIBRARY_PATH=$TX_ROOT/lib:$LD_LIBRARY_PATH export LD_LIBRARY_PATH 

Reboot the system to set these environment variables. 

TUTORIAL

FIRST OFF ALL 

  

AFTER INSTALLATION OF SS7 IN YOUR PC 

1) TAKE YOUR ANDRIOD PHONE READY TO ATTACK YOUR TARGET

2) NOW RUN YOUR SS7 FLAW 0.1

3) IN THE LEFT-HAND SIDE U WILL SEE

______________MAP DAILOUGE PARAMETERS_____________________

4) SELECT OPERATION CODE  CLICK AND REMAIN IT AS IT IS...UNGLI MAT KARNA :-)

__________________________MSISND________________________

NUMBER PLAN:-12345678 ITS ONLY AN EXAMPLE 

NUMBER OF ADDRESS: -INTERNATIONAL

LAST OCTET: - LAST OCTET

MSISND ADDRESS :- NUMBER OF THE VICTIM ********58

6)

________________________________________________________________________________________________________SHORT MESSAGE PRIORT______________________________

SM_RP_PRI: - SELECT TRUE

7)

______________________________________________________________________________

                                      SERVICE CENTRE

NUMBER PLAN: - SELECT 1 OPTION

NATURE OF ADDRESS: -INTERNATIONAL

LAST OCTET: -LAST OCTET

SERVICE CENTRE ADDRESS: - TYPE YOUR VICTIM NUMBER

8)

____________________________________________________________________________

                          GPRS SUPPORT INDICATOR 

GPRS SUPPORT 

INDICATOR: -   SELECT NOT SUPPORTED

                                 SM-RP-MTI

SM-RP-MTI: -SM-RP-MTI

                                 SM-RP-SMEA

SM-RP-SMEA: - SM-RP-SMEA

NOW AT LAST CLICK ON 

    SEND   ............

YOU WILL RECEIVE AN ONE TIME PASSWORD IN SS7 FLAW:-

AT SAME TIME  OPEN FRESH NEW WHATSAPP

 TYPE YOUR VICTIM NUMBER 

ENTER THE OTP YOU RECEIVED 

AND ENJOY:,,,.....

YOUR VICTIM NUMBER IS YOURS