Into the wild: Gaining access to SS7 - Part 1: Finding an access point

Networking
,
13

I see you ended up in accessing a SS7 end point. However, I am not sure CISCO routers are actually SS7 capable (CISCO does not make SS7 equipments).
Furthermore, the next step would be to inject a SS7 message. there are tools available to generate SS7 messages (https://github.com/ernw/ss7MAPer; https://github.com/SigPloiter/SigPloit).
the biggest challenge would be to, once sending a SS7 message, get the response.
This would mean have a legit GT (pointless) or if a message is sent from an access point, know the address of that access point (it’s GT) and have a way to intercept the answer

4 Likes