±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 32893
New Yesterday: 9 Visitors: 181

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

RSS Feed Widget

±Latest Webinars

IMEI by WiFi router collecting

Discussion of forensic issues related to all types of mobile phones and underlying technologies (GSM, GPRS, UMTS/3G, HSDPA, LTE, Bluetooth etc.)
Subforums: Mobile Telephone Case Law
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
 
  

IMEI by WiFi router collecting

Post Posted: Wed Apr 19, 2017 4:30 pm

This is a theoretical issue and came out of a national forensics training last year. Us was given the challenge to create a solution to bring a smartphone (iOS-based Apple) speaking by beacons with a WiFi to reveal its own IMEI. The goal: In the end the WiFi router knows the IMEI of the - not connected but just talking by beacons smartphone.

Ok. You get the picture.

Actually iOS 10.3.2 beta 3 (14F5080a) does not provide a simple way of getting the IMEI over WiFi.

But, lets start thinking. What is required to bring out the IMEI (inserted but by flight modus silent UICC in-device) by WiFi?

Is there a chance to 'temporarily kind-of-decept' the smartphone to reveal the IMEI? Would e.g. an IMEI lookup-app help?

If you find thinking this issue boring. Just skip and relax your evening by beer & pretzel Smile
If not, post pls - thks  

RolfGutmann
Senior Member
 
 
  

Re: IMEI by WiFi router collecting

Post Posted: Wed Apr 19, 2017 5:29 pm

Easy.

Just use openbts, you will get an IMSI of the device.
Now sniff traffic by an interceptor of mobile network.

IMSI + IMEI pair is sent.

You get IMEI  

droopy
Senior Member
 
 
  

Re: IMEI by WiFi router collecting

Post Posted: Wed Apr 19, 2017 7:14 pm

Are you talking in-live (ephemeral data) or historical data and at which point in the hop are you referring e.g. from first registration or somewhere in between before the end anchor point? For instance, if target is moving when do you expect to join the queue?
_________________
Institute for Digital Forensics (IDF) - www.linkedin.com/groups/2436720
Mobile Telephone Examination Board (MTEB) - www.linkedin.com/groups/141739
Universal Network Investigations - www.linkedin.com/groups/13536130
Mobile Telephone Evidence & Forensics trewmte.blogspot.com 

trewmte
Senior Member
 
 
  

Re: IMEI by WiFi router collecting

Post Posted: Thu Apr 20, 2017 5:50 pm

@droopy - I apologize but wanted to say that the smartphone is in disabled mode due to Mobile Broadband by activated 'Flight modus' which disables by SW the modem.  

RolfGutmann
Senior Member
 
 

Page 1 of 1