IMSI Number

[avinash ravikoushik]

Hi,

Is there a way to extract the IMSI number from the SIM Card / SIM number ? Can it be performed through any apps in android ? In spite of using tools such as Network Cell info lite, I am unable to read the IMSI possibly because the app doesn't have permissions to read the IMSI. I am looking to extract the IMSI of my own phone. I tried searching various ways of IMSI extraction, but all in vain until now. Can anyone please help me with this?

With Regards,

ARK

[Al]

Hi,

Try gmon pro and then look on the radio info section of the settings menu. 

https://play.google.com/store/apps/details?id=de.carknue.gmonpro

Regards,

Al

--
You received this message because you are subscribed to the Google Groups "gr-gsm" group.
To unsubscribe from this group and stop receiving emails from it, send an email to gr-gsm+un...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/gr-gsm/CAEEHemFke%2BeJpAWp8DvWTisY%2BwOsGkRLvHBC%2BgX9e4p5ExWpYg%40mail.gmail.com.

[avinash ravikoushik]

Thanks a lot,

I was able to obtain my cell phone IMSI through the app. However, I am unable to see this IMSI when I parse the data obtained through the corresponding ARFCN after forcing the cell phone to 2G. When I scan the uplink of my cell phone for the mentioned ARFCN in the app, I am able to see the increase in the energy of the signal when I send an SMS and hence I know my downlink is also proper as it corresponds to my uplink. Am I missing something? I am using a BladeRF A4 SDR.

With Regards,

ARK

[Al]

Hi,

You're not missing anything at all. Your IMSI should be protected with a TMSI except on very specific occasions or network error. You may need to monitor for a long time, or even at different locations to see your IMSI. 

One specific time an IMSI will be used to page a GSM handset is when the device is powered off incorrectly and the T3212 timer expires before the device powers on again, and a message is waiting in the meantime. 

You can establish your TMSI by monitoring all paging messages and repeatedly sending yourself messages. If you send 10 messages, and see 10 instances of the same TMSI you know that's your number. You can then monitor this to see when it changes and if the IMSI is sent as a further ID source. 

Regards,

Al

[avinash ravikoushik]

Thanks a lot Al,

I am using the popular "simple_IMSI-catcher.py " python script to parse the data. Using this, you can see various IMSI appearing. Are all of these actually TMSI or IMSI with some encryption?

Is there a similar parsing tool which I can use to compare with this script? 

How can all the paging numbers be monitored ? Can you please help me with some links for understanding the GSM operations that you mentioned such as paging, channel requests etc.  

I was thinking of using the following links, but they seem quite voluminous & I am not sure if it is required at this stage : 

1. https://www.etsi.org/deliver/etsi_ts/145000_145099/145003/14.03.00_60/ts_145003v140300p.pdf

2. https://www.etsi.org/deliver/etsi_ts/145000_145099/145005/15.03.00_60/ts_145005v150300p.pdf

With Regards,

ARK

[Bastien Baranoff]

You have to purpose sniffing IMSI or only need to retrieve it with a bladeRF xA4 there are several way to do this you can :

- do it with pysim and a pcscd compatible reader

- with a Motorola c123 for example compatible with osmocom with mobile app and putting a sim on it

- with sniffing with gr-gsm when the phone attached to the BTS.

- by triggering some events on 3/4G (DoS, redirect...)

Hope this help

Bastien Baranoff 

[avinash ravikoushik]

Thanks a lot,  will try this as well 

Regards,

ARK