in order to sniff TSM signals we will 为了嗅探TSM信号我们会
need to use our rtl-sdr 需要使用我们的rtl-sdr
or real sex software-defined radio so we 或真正的性软件定义的无线电所以我们
have a USB extender cable we have the 有，我们有一个USB延长线
antenna we have the base of the antenna 天线我们有天线的底部
and the rtl-sdr so we will just connect 和rtl-sdr所以我们将连接
the antenna connect the USB extender 天线连接USB延长器
cable so we have a bit more room when 电缆，所以我们有更多的空间
it's plugged into a computer and then we 它插入电脑，然后我们
will fully extend the antenna and then 将完全延长天线然后
we will shorten the size a bit because 我们会稍微缩短尺寸因为
that gives us optimal reception for GSM 这为我们提供了GSM的 最佳接收
signals around this length and connect 围绕这个长度的信号并连接
it to the base and now we're ready to 到了基地，现在我们已经准备好了
play with our gsm sniffing rtl-sdr we 玩我们的gsm嗅探rtl-sdr我们
also need to use a phone and the USB 还需要使用手机和USB
cable that came with it in this case i'm 在这种情况下随身携带的电缆我是
using a samsung galaxy s6 latest 使用三星galaxys6最新
firmware but you may be able to use 固件， 但您可以使用
other versions or models of samsung just 三星的其他版本或型号
connect to the phone and the other end 连接到手机和另一端
will go on into our computer and that 将继续进入我们的计算机
will be connected to our Kali Linux 将连接到我们的Kali Linux
virtual machine you also need to enforce 您还需要强制执行虚拟机
2g mode on our phone and we will just 在我们的手机2g模式，我们将
turn it on and then we will click 打开然后我们会点击
Network mode under mobile networks and 移动网络和网络模式
select suji only that will force our 选择suji只会强迫我们的
phone to only use 2g which we can then 手机只能使用2g我们可以
try and sniff in this steel frame you 试着用这个钢架嗅闻 你
can see it more clearly how your 可以更清楚地看到你的
configuration should look like next 配置应该像下一个
we'll have to enable service mode on our 我们必须要 在使服务模式，我们的
phone to find out which GSM downlink 手机，找出哪些GSM下行
channel we are using to receive data 我们用来接收数据的频道
form we will just type in the code and 我们只需输入代码即可
hit hash mark and select stack one at 点击哈希标记并选择第一个栈
this screen we can see the country code 这个屏幕我们可以看到国家代码
the global provider the channel that 全球提供者的渠道
we're listening on to receive data and 我们正在倾听接收数据和
silts our IDs which can be used to 泥沙我们的ID可以用于
locate the approximate location of the 找到大概的位置
cell tower now I'm calling myself and 现在我正在称自己和
you can see that frequency hopping was 你可以看到跳频是
briefly on from this screen we generally 我们一般来自这个屏幕
are only really need to know if 只是真的需要知道
frequency hopping is on when we receive 当我们收到时，跳频开启
a call and the arfcn which in this case 一个电话和在这种情况下的arfcn
is 82 or 98 when we are talking to the 当我们和他说话的时候是82或98
USB modem in our phone in the future we 我们手机中的USB调制解调器将来我们
may have to enable USB debugging you can 可能需要启用USB调试可以
do that by going to about device and 做到这一点的将有关设备和
then you will pick software info and 然后你会选择软件信息和
then you will click build number seven 然后你将点击内部版本号7
times I've already done it so I already 我已经完成了所以我已经完成了
have developer mode enabled once it is 已经启用了开发模式，一旦它
enabled new menu will pop up but 启用新菜单会弹出但是
otherwise it will be located here in 否则它将位于此处
this menu you can find USB debugging 这个菜单你可以找到USB调试
which may be useful in the future last 这可能在将来有用
but not least in the future you may also 但也可能是未来你也可能
need to enable tethering to speak with 需要启用网络共享来与之交谈
the USB modem which you can do here 你可以在这里做的USB 调制解调器
thanks for watching stay tuned and 感谢观看敬请期待
subscribe 订阅