Jump to content

3G/4G, cdma and the like


Recommended Posts

Alright I have being googling this every way that I can think of, with essentially no tangible results. WiFi Pineapple may not be the correct fit for this purpose but, I'd really like to think that it is; even so the HAK5 crew has got to have this on their radar...

So here is my dilemma, I am currently in a position where I am going to need a solid method of monitoring 3g/4g traffic for PAN/CHD; a lot of us are! I have to believe that tons of PEN-TESTer's are out there in the same boat looking for the best case scenario solution for doing so - affordably .

With PCI DSS 3.0 on the horizon, this need is going to be huge. I've looked at pwnie express' pwn pad, though it's got my geek levels excited; I haven't seen definitive proof that it is what I am looking for.

My thoughts are that one might be able to connect said Huawei USB adapter, to a pineapple Mark V, and with the right module and drivers be able to perform some recon on these freqs...

Any ideas?

Link to post
Share on other sites

I'm not a pentester, but I try to keep up. With your post, I'm getting nothing, including from google.

What's the big deal regarding PAN/CHD (card holder data - I found that much)?

Are you referring to the problem that suddenly anybody with a phone can basically create an outbound connection to anywhere from the company LAN? What is the card holder data going to tell you that's relevant?

Link to post
Share on other sites

In the payment card world, it's all about securing card holder information and card numbers, and identifying where that information is being stored or transmitted.

I am just trying to come up with some creative ways of verifying that said information is not being transmitted wirelessly over these bands. There are some high commercial products out there, but I could see (at least conceptually) how the pineapple could be a powerful tool for doing this..

I know that I've seen some word about expansions and usb devices, hoping someone to find some people that have started messing with this. Would love to be a part of developing and/or testing such a project.

Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...