Mobile Interconnect Threats: How Next-Gen Products May be Already Outdated
summary
Audit of SS7/Sigtran stacks finds concrete faults: IP fragmentation and SCTP segmentation evade detection, SCCP global-title offsets and length fields allow stack-pointer corruption, TCAP/ASN.1 misuse leads to opcode-index and buffer-overflow exploits, and a kernel-module reassembly bug yields arbitrary writes. Multiple proof-of-concepts convert these into remote code execution on signaling appliances and even kernel RCE. A packet-generation tool called porn ss7 is built to craft malformed MAP/TCAP/SCCP/SCTP sequences and demonstrates successful crashes and exploits, showing next‑gen products can already be outdated.
AI-written summary · about
chapters (6)
- 0:00Start
- 1:06Overview
- 2:02Interconnect 101
- 11:11Ip and Sctp
- 20:09Sccp Segmenting and Reassembly
- 25:11Key Takeaways
related talks
26mBack to the Future. Cross-Protocol Attacks in the Era of 5G
55mHidden Agendas: Bypassing GSMA Recommendations On SS7 Networks
44mExposing Critical Threats In Millions Of Connected Devices
40mOver the Air, Under the Radar: Attacking and Securing the Pixel Modem
01h 01mCellular Exploitation on a Global Scale: The Rise and Fall of the Control Protocol
48mSATCOM Terminals: Hacking by Air, Sea, and Land
52mCellular Exploitation on a Global Scale: The Rise and Fall of the Control Protocol
40mWeaponizing Mobile Infrastructure: Are Politically Motivated Cyber Attacks a Threat to Democracy?