Re: SMS Spoofing : Changing the "From" part

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

q_rx - 06 Jan 2006 03:31 GMT

SMS SPOOFING. SUCCESSFUL!!

Is it possible to send some1 a spoofed SMS so that they think that it has bee
sent from some1 else

For example like a fake email. Could u telnet to 1 of these sites on the net tha
allow you to send free SMS's and then construct ur own header for the sms packet
By construction the header u can alter the senders number and i know there ar
fields in the header to allow for the recieving of reports on delievery

now, i know how to do it ;) i think i want to create a website. so anyone can use it
but of course not for any bad things

but i'm out off money to do it so. i need some donation. anyone who want t
donate me some money, i will give him to access the sms spoofing service for free!!

if u dont trust me, contact me on msn msger. give me your friend and your own phon
number. i will demo it to you. u will receive a sms from the friend that u hav gave to me..
try it!!

contact me at q_rx@hotmail.com

it work for any coverage n around the world!!!! please support me!!

--
q_rx

Reply to this Message

John Henderson - 06 Jan 2006 06:38 GMT

> SMS SPOOFING. SUCCESSFUL!!!
>
[quoted text clipped - 25 lines]
> it work for any coverage n around the world!!!! please support
> me!!!

Let's do the test in public. Send an SMS to +61403908467, and
make that the originator's address too.

I'll report the results here in 24 hours time.

John

Reply to this Message

John Henderson - 07 Jan 2006 06:45 GMT

I wrote:

> Let's do the test in public. Send an SMS to +61403908467, and
> make that the originator's address too.
>
> I'll report the results here in 24 hours time.

This device has been powered up with good signal for the past 24
hours. Apart from my own test message, nothing has been
received by it in this time.

I would be very surprised if any SMSC would permit lodgement of
messages with user-editable type 91 hexadecimal "type of
number" originators' addresses. Type D0 hex (alphanumeric)
addresses might be a different matter, but the GSM 03.40 length
restriction on these would prevent forging the above address by
such means.

John

Reply to this Message

John Henderson - 08 Jan 2006 11:36 GMT

> SMS SPOOFING. SUCCESSFUL!!!
>
> Is it possible to send some1 a spoofed SMS so that they think
> that it has been sent from some1 else.

By the way, you can do this if you've got physical access to a
phone's serial port (by cable, IrDA, or paired Bluetooth
connection).

Assuming that phone supports "AT" commands in PDU-mode, you
simply construct a suitable mobile-terminate PDU, and set
<stat>=0 (received, unread messages) or <stat>=1 (received,
read) in your AT+CMGW command.

The message can be from any address (and type of address) you
like, purporting to be through any SMSC, with any valid SMSC
date-time stamp and timezone, and say anything you like.

It is for this reason that authorities relying on the message
contents of seized phones or SIMs would need to corroborate the
details with the SMSC in question if they don't want to be
laughed out of court.

John

Reply to this Message