Authorized SS7 OTP Interception Test
Budget: $750 – $1,500 CAD
I need an SS7-experienced specialist to demonstrate, in a controlled lab-to-live environment, how one-time passwords sent over a mobile network can be intercepted and read. The goal is pure security testing.
You will configure the necessary signaling access, execute the interception of a sample OTP SMS routed through the target mobile operator, and document every step so I can reproduce the process internally. The final package should include:
• a short proof-of-concept video or pcap showing the captured OTP,
• a technical walkthrough describing the SS7 messages used, attack path, and required network conditions, and
• remediation recommendations that the operator can implement immediately.
Please outline the SS7 gateways, HLR/MSC probes, or any specific toolsets you prefer to use (e.g., SigPloit, Wireshark with SS7 plugins, custom scripts). I will supply SIMs and test numbers; you handle the signaling entry and traffic capture.
Confidentiality and strict adherence to the provided authorization are mandatory. Show me previous SS7 or telecom security work—redacted reports are fine—so I know you can deliver quickly and responsibly.
You will configure the necessary signaling access, execute the interception of a sample OTP SMS routed through the target mobile operator, and document every step so I can reproduce the process internally. The final package should include:
• a short proof-of-concept video or pcap showing the captured OTP,
• a technical walkthrough describing the SS7 messages used, attack path, and required network conditions, and
• remediation recommendations that the operator can implement immediately.
Please outline the SS7 gateways, HLR/MSC probes, or any specific toolsets you prefer to use (e.g., SigPloit, Wireshark with SS7 plugins, custom scripts). I will supply SIMs and test numbers; you handle the signaling entry and traffic capture.
Confidentiality and strict adherence to the provided authorization are mandatory. Show me previous SS7 or telecom security work—redacted reports are fine—so I know you can deliver quickly and responsibly.