[{"data":1,"prerenderedAt":298},["ShallowReactive",2],{"tool-doc-ss7maper":3,"content-query-2RNOtj0kLf":182},{"_path":4,"_dir":5,"_draft":6,"_partial":6,"_locale":7,"title":8,"description":9,"name":8,"protocol":10,"category":11,"hardware":12,"command":13,"academyLab":14,"body":15,"_type":176,"_id":177,"_source":178,"_file":179,"_stem":180,"_extension":181},"\u002Ftools\u002Fss7maper","tools",false,"","SS7MAPer","Fast SS7 MAP (Mobile Application Part) scanner and network topology mapper for telecommunications security audits.","SS7 \u002F SIGTRAN","SS7 \u002F SIGTRAN Signaling Auditing","None (IP \u002F SCTP Interface)","python3 ss7maper.py --target-gt 123456789","https:\u002F\u002Fapp.telcosec.net",{"type":16,"children":17,"toc":166},"root",[18,27,38,45,104,110,117,129,135,144,150],{"type":19,"tag":20,"props":21,"children":23},"element","h1",{"id":22},"ss7maper-ss7-map-reconnaissance-network-scanner",[24],{"type":25,"value":26},"text","SS7MAPer — SS7 MAP Reconnaissance & Network Scanner",{"type":19,"tag":28,"props":29,"children":30},"p",{},[31,36],{"type":19,"tag":32,"props":33,"children":34},"strong",{},[35],{"type":25,"value":8},{"type":25,"value":37}," is an automated reconnaissance and network topology mapping engine for telecom SS7\u002FSIGTRAN signaling backbones. It probes target carrier Global Titles (GT) and Point Codes (PC) to discover active HLRs, MSCs, VLRs, and SMSCs while testing MAP protocol message filtering rules.",{"type":19,"tag":39,"props":40,"children":42},"h2",{"id":41},"core-telecom-vectors",[43],{"type":25,"value":44},"Core Telecom Vectors",{"type":19,"tag":46,"props":47,"children":48},"ul",{},[49,60,94],{"type":19,"tag":50,"props":51,"children":52},"li",{},[53,58],{"type":19,"tag":32,"props":54,"children":55},{},[56],{"type":25,"value":57},"Global Title Scanning & Resolution",{"type":25,"value":59},": Discover active network nodes across target Mobile Country Codes (MCC) and Mobile Network Codes (MNC).",{"type":19,"tag":50,"props":61,"children":62},{},[63,68,70,77,79,85,86,92],{"type":19,"tag":32,"props":64,"children":65},{},[66],{"type":25,"value":67},"MAP Operation Probing",{"type":25,"value":69},": Test whether target carrier nodes respond to unauthorized MAP messages (",{"type":19,"tag":71,"props":72,"children":74},"code",{"className":73},[],[75],{"type":25,"value":76},"SendRoutingInfo",{"type":25,"value":78},", ",{"type":19,"tag":71,"props":80,"children":82},{"className":81},[],[83],{"type":25,"value":84},"AnyTimeInterrogation",{"type":25,"value":78},{"type":19,"tag":71,"props":87,"children":89},{"className":88},[],[90],{"type":25,"value":91},"ProvideSubscriberInfo",{"type":25,"value":93},").",{"type":19,"tag":50,"props":95,"children":96},{},[97,102],{"type":19,"tag":32,"props":98,"children":99},{},[100],{"type":25,"value":101},"Signaling Firewall Fingerprinting",{"type":25,"value":103},": Identify and classify carrier SMS\u002FMAP firewalls and SMS Routers.",{"type":19,"tag":39,"props":105,"children":107},{"id":106},"cheatsheet",[108],{"type":25,"value":109},"Cheatsheet",{"type":19,"tag":111,"props":112,"children":114},"h3",{"id":113},"_1-scan-carrier-global-title-range",[115],{"type":25,"value":116},"1. Scan Carrier Global Title Range",{"type":19,"tag":118,"props":119,"children":124},"pre",{"className":120,"code":122,"language":123,"meta":7},[121],"language-bash","# Scan a range of GTs to identify active HLR \u002F VLR nodes\npython3 \u002Fopt\u002Fss7maper\u002Fss7maper.py -r 33600000000-33600000100 --op SRI_SM\n","bash",[125],{"type":19,"tag":71,"props":126,"children":127},{"__ignoreMap":7},[128],{"type":25,"value":122},{"type":19,"tag":111,"props":130,"children":132},{"id":131},"_2-fingerprint-hlr-response-behavior",[133],{"type":25,"value":134},"2. Fingerprint HLR Response Behavior",{"type":19,"tag":118,"props":136,"children":139},{"className":137,"code":138,"language":123,"meta":7},[121],"# Send targeted SRI_SM query to check for subscriber IMSI exposure\npython3 \u002Fopt\u002Fss7maper\u002Fss7maper.py -t 447700900000 --imsi-probe\n",[140],{"type":19,"tag":71,"props":141,"children":142},{"__ignoreMap":7},[143],{"type":25,"value":138},{"type":19,"tag":39,"props":145,"children":147},{"id":146},"practice-in-telcosec-academy",[148],{"type":25,"value":149},"Practice in TelcoSec Academy",{"type":19,"tag":28,"props":151,"children":152},{},[153,155],{"type":25,"value":154},"👉 ",{"type":19,"tag":32,"props":156,"children":157},{},[158],{"type":19,"tag":159,"props":160,"children":163},"a",{"href":14,"rel":161},[162],"nofollow",[164],{"type":25,"value":165},"Launch SS7 Attack & Reconnaissance Labs on App.TelcoSec.Net",{"title":7,"searchDepth":167,"depth":167,"links":168},2,[169,170,175],{"id":41,"depth":167,"text":44},{"id":106,"depth":167,"text":109,"children":171},[172,174],{"id":113,"depth":173,"text":116},3,{"id":131,"depth":173,"text":134},{"id":146,"depth":167,"text":149},"markdown","content:tools:ss7maper.md","content","tools\u002Fss7maper.md","tools\u002Fss7maper","md",{"_path":4,"_dir":5,"_draft":6,"_partial":6,"_locale":7,"title":8,"description":9,"name":8,"protocol":10,"category":11,"hardware":12,"command":13,"academyLab":14,"body":183,"_type":176,"_id":177,"_source":178,"_file":179,"_stem":180,"_extension":181},{"type":16,"children":184,"toc":290},[185,189,197,201,246,250,254,262,266,274,278],{"type":19,"tag":20,"props":186,"children":187},{"id":22},[188],{"type":25,"value":26},{"type":19,"tag":28,"props":190,"children":191},{},[192,196],{"type":19,"tag":32,"props":193,"children":194},{},[195],{"type":25,"value":8},{"type":25,"value":37},{"type":19,"tag":39,"props":198,"children":199},{"id":41},[200],{"type":25,"value":44},{"type":19,"tag":46,"props":202,"children":203},{},[204,212,238],{"type":19,"tag":50,"props":205,"children":206},{},[207,211],{"type":19,"tag":32,"props":208,"children":209},{},[210],{"type":25,"value":57},{"type":25,"value":59},{"type":19,"tag":50,"props":213,"children":214},{},[215,219,220,225,226,231,232,237],{"type":19,"tag":32,"props":216,"children":217},{},[218],{"type":25,"value":67},{"type":25,"value":69},{"type":19,"tag":71,"props":221,"children":223},{"className":222},[],[224],{"type":25,"value":76},{"type":25,"value":78},{"type":19,"tag":71,"props":227,"children":229},{"className":228},[],[230],{"type":25,"value":84},{"type":25,"value":78},{"type":19,"tag":71,"props":233,"children":235},{"className":234},[],[236],{"type":25,"value":91},{"type":25,"value":93},{"type":19,"tag":50,"props":239,"children":240},{},[241,245],{"type":19,"tag":32,"props":242,"children":243},{},[244],{"type":25,"value":101},{"type":25,"value":103},{"type":19,"tag":39,"props":247,"children":248},{"id":106},[249],{"type":25,"value":109},{"type":19,"tag":111,"props":251,"children":252},{"id":113},[253],{"type":25,"value":116},{"type":19,"tag":118,"props":255,"children":257},{"className":256,"code":122,"language":123,"meta":7},[121],[258],{"type":19,"tag":71,"props":259,"children":260},{"__ignoreMap":7},[261],{"type":25,"value":122},{"type":19,"tag":111,"props":263,"children":264},{"id":131},[265],{"type":25,"value":134},{"type":19,"tag":118,"props":267,"children":269},{"className":268,"code":138,"language":123,"meta":7},[121],[270],{"type":19,"tag":71,"props":271,"children":272},{"__ignoreMap":7},[273],{"type":25,"value":138},{"type":19,"tag":39,"props":275,"children":276},{"id":146},[277],{"type":25,"value":149},{"type":19,"tag":28,"props":279,"children":280},{},[281,282],{"type":25,"value":154},{"type":19,"tag":32,"props":283,"children":284},{},[285],{"type":19,"tag":159,"props":286,"children":288},{"href":14,"rel":287},[162],[289],{"type":25,"value":165},{"title":7,"searchDepth":167,"depth":167,"links":291},[292,293,297],{"id":41,"depth":167,"text":44},{"id":106,"depth":167,"text":109,"children":294},[295,296],{"id":113,"depth":173,"text":116},{"id":131,"depth":173,"text":134},{"id":146,"depth":167,"text":149},1790363499723]