SS7 Exploit Assessment
Extended CS/PS Core Network Vulnerability Assessment of Core Networks through International Roaming perspective. Evaluation of every GSMA FASG FS.11 category, in compliance with FS.11. Category 1, 2 & 3 SS7 signaling MAP messages.
-
check_circle
Subscriber Information Leak
-
check_circle
Network / Subscriber DoS
check_circle
Routing Abuse / GT Abuse
check_circle
Subscriber / SMS Spoofing
check_circle
SMS / Voice Interception
check_circle
USSD exploitation
check_circle
SMS Spam & Fraud
-
check_circle
Subscriber Location Leak
Potential Week Elements
Black Box Breach Assessment
Acquisition of a Global Title that is whitelisted in the operators network without establishing roaming agreement.
Grey Box Breach Assessment
Operator provides IPSEC trunk with testing Global Title either through their signaling provider on directly on front facing Signaling Point to emulate INAT traffic.
Diameter Exploit Assessment
Active Diameter signaling scanning of an Operator’s EPC Network from International Roaming perspective. This vulnerability assessment will evaluate FS.19 GSMA Category 0, 1, 2, 3 Diameter signaling messages.
-
check_circle
DRA/DEA Bypass
check_circle
Subscriber Spoofing
check_circle
Subscriber Location Leak
check_circle
Network / Subscriber DoS
check_circle
Network Discovery
check_circle
Data Interception
Potential Week Elements
Black Box Breach Assessment
Acquisition of a Realm that is whitelisted in the operators network without establishing
roaming agreement.
Grey Box Breach Assessment
Operator provides IPSEC trunk with whitelisted Realm either through their signaling provider on directly on front facing Signaling Point to emulate INAT traffic.
IMS VoLTE /VoWiFi Exploit Assessment
Active IMS signaling scanning of an Operator’s IMS VoLTE Access. This Vulnerability Assessment will cover FS.22 VoLTE Security Analysis and Recommendations” GSMA FASG document cases for VoLTE.
-
check_circle
Network Discovery
-
check_circle
Leakage via Injection
check_circle
Subscriber Location Leak
check_circle
Fraud & Spam
check_circle
Subscriber Information Leak
check_circle
SMS/ Voice Spoofing
check_circle
Lawfull Interception Bypass
check_circle
Fraud & Spam
check_circle
Subscriber & Network DoS
check_circle
Database Query Injection
check_circle
Database Query Injection
-
check_circle
Billing Bypass
Potential Week Elements
Black Box Breach Assessment
Acquisition of a VoLTE / VoWiFI capable simcard without operator intervantion
Grey Box Breach Assessment
Acquisition of a VoLTE / VoWiFI capable simcard and remote accessible device via the assistance of the operator
2G /3G /4G /5G Radio Access Network Vulnerability Assessment
In Depth testing of radio access Base stations and controllers
-
check_circle
Subscriber Information Leak & billing bypass
-
check_circle
Radio configurations
check_circle
Subscriber Spoofing
-
check_circle
Injection of S1AP, SIGTRAN messages
WebApp & RestAPI Vulnerability Assesment
Exploitation and identification of week points in web applications for the identification of various vulnerabilities
-
check_circle
IDOR Exploitation
-
check_circle
Access Control Failures
check_circle
Code Injection Variations
check_circle
Insecure Design Flaws
-
check_circle
and many more
Hardware & Firmware Vulnerability Assesment
In depth testing of hardware devices utilized in various industries space
-
check_circle
Automotive Industry & IOT
-
check_circle
Defense & Space
check_circle
Finance & Blockchain
check_circle
Automotive Industry & IOT
-
check_circle
and many more
IOS / Android App Reverse Engineering & Vulnerability Assessment
Disassembly, analysis and injection testing of applications for identification of potential vulnerabilities and week points of integrated APIs
Network Security
In depth exploitation assessment for entry point and exploit identification for data farms, data centers, IOT network and more.
-
check_circle
Dedicated Red Team
-
check_circle
Dedicated Purple Team
-
check_circle
Dedicated Blue Team
