[{"data":1,"prerenderedAt":269},["ShallowReactive",2],{"tool-doc-kraken":3,"content-query-osUfeYFmRl":166},{"_path":4,"_dir":5,"_draft":6,"_partial":6,"_locale":7,"title":8,"description":9,"name":8,"protocol":10,"category":11,"hardware":12,"command":13,"academyLab":14,"body":15,"_type":160,"_id":161,"_source":162,"_file":163,"_stem":164,"_extension":165},"\u002Ftools\u002Fkraken","tools",false,"","Kraken","Fast GSM A5\u002F1 encryption cracking tool utilizing rainbow tables to reverse-engineer 2G cellular bursts in sub-second timeframes.","GSM 2G \u002F A5\u002F1","RF & Baseband Reverse Engineering","HackRF One \u002F RTL-SDR \u002F USRP + SSD Storage","kraken \u002Fopt\u002Fkraken\u002Ftables\u002F","https:\u002F\u002Fapp.telcosec.net",{"type":16,"children":17,"toc":150},"root",[18,27,45,52,87,93,100,113,119,128,134],{"type":19,"tag":20,"props":21,"children":23},"element","h1",{"id":22},"kraken-gsm-a51-real-time-cipher-cracker",[24],{"type":25,"value":26},"text","Kraken — GSM A5\u002F1 Real-Time Cipher Cracker",{"type":19,"tag":28,"props":29,"children":30},"p",{},[31,36,38,43],{"type":19,"tag":32,"props":33,"children":34},"strong",{},[35],{"type":25,"value":8},{"type":25,"value":37}," is the famous open-source tool for finding 64-bit GSM A5\u002F1 session encryption keys (Kc) in real time using pre-computed Berlin Rainbow Tables. Within ",{"type":19,"tag":32,"props":39,"children":40},{},[41],{"type":25,"value":42},"TelcoChisel",{"type":25,"value":44},", Kraken is integrated alongside OsmocomBB and gr-gsm for analyzing 2G radio burst captures.",{"type":19,"tag":46,"props":47,"children":49},"h2",{"id":48},"key-telecom-security-capabilities",[50],{"type":25,"value":51},"Key Telecom Security Capabilities",{"type":19,"tag":53,"props":54,"children":55},"ul",{},[56,67,77],{"type":19,"tag":57,"props":58,"children":59},"li",{},[60,65],{"type":19,"tag":32,"props":61,"children":62},{},[63],{"type":25,"value":64},"A5\u002F1 Keystream Cracking",{"type":25,"value":66},": Reverse 114-bit keystreams extracted from encrypted GSM CCH (Control Channel) and TCH (Traffic Channel) bursts.",{"type":19,"tag":57,"props":68,"children":69},{},[70,75],{"type":19,"tag":32,"props":71,"children":72},{},[73],{"type":25,"value":74},"Interception Pipeline Integration",{"type":25,"value":76},": Feeds decrypted session keys directly into Wireshark \u002F gr-gsm for real-time voice and SMS decoding.",{"type":19,"tag":57,"props":78,"children":79},{},[80,85],{"type":19,"tag":32,"props":81,"children":82},{},[83],{"type":25,"value":84},"Carrier Downward Compatibility Audits",{"type":25,"value":86},": Demonstrate why 2G legacy fallbacks remain critical attack surfaces on modern multi-mode smartphones.",{"type":19,"tag":46,"props":88,"children":90},{"id":89},"cheatsheet",[91],{"type":25,"value":92},"Cheatsheet",{"type":19,"tag":94,"props":95,"children":97},"h3",{"id":96},"_1-launch-kraken-with-rainbow-tables",[98],{"type":25,"value":99},"1. Launch Kraken with Rainbow Tables",{"type":19,"tag":101,"props":102,"children":107},"pre",{"className":103,"code":105,"language":106,"meta":7},[104],"language-bash","# Point Kraken to SSD-mounted A5\u002F1 rainbow tables\ncd \u002Fopt\u002Fkraken && sudo .\u002Fkraken \u002Fmedia\u002Ffast_ssd\u002Fkraken_tables\u002F\n","bash",[108],{"type":19,"tag":109,"props":110,"children":111},"code",{"__ignoreMap":7},[112],{"type":25,"value":105},{"type":19,"tag":94,"props":114,"children":116},{"id":115},"_2-crack-keystream-sample",[117],{"type":25,"value":118},"2. Crack Keystream Sample",{"type":19,"tag":101,"props":120,"children":123},{"className":121,"code":122,"language":106,"meta":7},[104],"# Query Kraken with 114-bit keystream from gr-gsm\n.\u002Ffind_kc 00101011100100100010101010010010110001001010100100101100010010101001001011000100101010010010110001001010100100101100\n",[124],{"type":19,"tag":109,"props":125,"children":126},{"__ignoreMap":7},[127],{"type":25,"value":122},{"type":19,"tag":46,"props":129,"children":131},{"id":130},"practice-in-telcosec-academy",[132],{"type":25,"value":133},"Practice in TelcoSec Academy",{"type":19,"tag":28,"props":135,"children":136},{},[137,139],{"type":25,"value":138},"👉 ",{"type":19,"tag":32,"props":140,"children":141},{},[142],{"type":19,"tag":143,"props":144,"children":147},"a",{"href":14,"rel":145},[146],"nofollow",[148],{"type":25,"value":149},"Access GSM & 2G Interception Labs at App.TelcoSec.Net",{"title":7,"searchDepth":151,"depth":151,"links":152},2,[153,154,159],{"id":48,"depth":151,"text":51},{"id":89,"depth":151,"text":92,"children":155},[156,158],{"id":96,"depth":157,"text":99},3,{"id":115,"depth":157,"text":118},{"id":130,"depth":151,"text":133},"markdown","content:tools:kraken.md","content","tools\u002Fkraken.md","tools\u002Fkraken","md",{"_path":4,"_dir":5,"_draft":6,"_partial":6,"_locale":7,"title":8,"description":9,"name":8,"protocol":10,"category":11,"hardware":12,"command":13,"academyLab":14,"body":167,"_type":160,"_id":161,"_source":162,"_file":163,"_stem":164,"_extension":165},{"type":16,"children":168,"toc":261},[169,173,186,190,217,221,225,233,237,245,249],{"type":19,"tag":20,"props":170,"children":171},{"id":22},[172],{"type":25,"value":26},{"type":19,"tag":28,"props":174,"children":175},{},[176,180,181,185],{"type":19,"tag":32,"props":177,"children":178},{},[179],{"type":25,"value":8},{"type":25,"value":37},{"type":19,"tag":32,"props":182,"children":183},{},[184],{"type":25,"value":42},{"type":25,"value":44},{"type":19,"tag":46,"props":187,"children":188},{"id":48},[189],{"type":25,"value":51},{"type":19,"tag":53,"props":191,"children":192},{},[193,201,209],{"type":19,"tag":57,"props":194,"children":195},{},[196,200],{"type":19,"tag":32,"props":197,"children":198},{},[199],{"type":25,"value":64},{"type":25,"value":66},{"type":19,"tag":57,"props":202,"children":203},{},[204,208],{"type":19,"tag":32,"props":205,"children":206},{},[207],{"type":25,"value":74},{"type":25,"value":76},{"type":19,"tag":57,"props":210,"children":211},{},[212,216],{"type":19,"tag":32,"props":213,"children":214},{},[215],{"type":25,"value":84},{"type":25,"value":86},{"type":19,"tag":46,"props":218,"children":219},{"id":89},[220],{"type":25,"value":92},{"type":19,"tag":94,"props":222,"children":223},{"id":96},[224],{"type":25,"value":99},{"type":19,"tag":101,"props":226,"children":228},{"className":227,"code":105,"language":106,"meta":7},[104],[229],{"type":19,"tag":109,"props":230,"children":231},{"__ignoreMap":7},[232],{"type":25,"value":105},{"type":19,"tag":94,"props":234,"children":235},{"id":115},[236],{"type":25,"value":118},{"type":19,"tag":101,"props":238,"children":240},{"className":239,"code":122,"language":106,"meta":7},[104],[241],{"type":19,"tag":109,"props":242,"children":243},{"__ignoreMap":7},[244],{"type":25,"value":122},{"type":19,"tag":46,"props":246,"children":247},{"id":130},[248],{"type":25,"value":133},{"type":19,"tag":28,"props":250,"children":251},{},[252,253],{"type":25,"value":138},{"type":19,"tag":32,"props":254,"children":255},{},[256],{"type":19,"tag":143,"props":257,"children":259},{"href":14,"rel":258},[146],[260],{"type":25,"value":149},{"title":7,"searchDepth":151,"depth":151,"links":262},[263,264,268],{"id":48,"depth":151,"text":51},{"id":89,"depth":151,"text":92,"children":265},[266,267],{"id":96,"depth":157,"text":99},{"id":115,"depth":157,"text":118},{"id":130,"depth":151,"text":133},1790363498932]