{"guid":"import-60706e285c5680928f","title":"Using OpenBSC for fuzzing of GSM handsets","subtitle":null,"slug":"26c3-3535-en-using_openbsc_for_fuzzing_of_gsm_handsets","link":"http://events.ccc.de/congress/2009/Fahrplan/events/3535.en.html","description":"With the recent availability of more Free Software for GSM protocols such as OpenBSC, GSM protocol hacking is no longer off-limits. Everyone can play with the lower levels of GSM communications.\n\nIt's time to bring the decades of TCP/IP security research into the GSM world, sending packets incompatible with the state machine, sending wrong length fields and actually go all the way to fuzz the various layers of the GSM protocol stack.\n","original_language":"eng","persons":["Harald Welte"],"tags":["26c3"," Hacking"],"view_count":115,"promoted":false,"date":"2009-12-29T01:00:00.000+01:00","release_date":"2010-01-02T01:00:00.000+01:00","updated_at":"2025-11-19T22:30:05.175+01:00","length":3585,"duration":3585,"thumb_url":"https://static.media.ccc.de/media/congress/2009/26c3-3535-en-using_openbsc_for_fuzzing_of_gsm_handsets.jpg","poster_url":"https://static.media.ccc.de/media/congress/2009/26c3-3535-en-using_openbsc_for_fuzzing_of_gsm_handsets_preview.jpg","timeline_url":"https://static.media.ccc.de/media/congress/2009/import-60706e285c5680928f-timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/congress/2009/import-60706e285c5680928f-thumbnails.vtt","frontend_link":"https://media.ccc.de/v/26c3-3535-en-using_openbsc_for_fuzzing_of_gsm_handsets","url":"https://api.media.ccc.de/public/events/import-60706e285c5680928f","conference_title":"26C3: Here be Dragons","conference_url":"https://api.media.ccc.de/public/conferences/26c3","related":[{"event_id":291,"event_guid":"import-afcc42724f9c8a2c86","weight":1},{"event_id":693,"event_guid":"import-b55a825bce0ede19d7","weight":1},{"event_id":913,"event_guid":"import-a56ca0ff971cff4045","weight":1},{"event_id":1134,"event_guid":"import-1c9d472a2babaafdf2","weight":1},{"event_id":1317,"event_guid":"import-4e688d68d9cb334a9f","weight":2},{"event_id":1358,"event_guid":"import-573de9e545c1cb82dd","weight":1},{"event_id":1360,"event_guid":"import-f9ac90b62273f05d2e","weight":1},{"event_id":1374,"event_guid":"import-742d7fc3268f7c4121","weight":1},{"event_id":1396,"event_guid":"import-75b2d58a4dc12e1a88","weight":2},{"event_id":1405,"event_guid":"import-9a084512d1ad9e7a7a","weight":1},{"event_id":1410,"event_guid":"import-e59a9fc136517bf537","weight":1},{"event_id":1444,"event_guid":"import-01fa9b6c433d8f94ff","weight":2},{"event_id":1479,"event_guid":"import-6973e270e772374508","weight":2},{"event_id":1578,"event_guid":"import-dd7f992024a421b675","weight":2},{"event_id":1688,"event_guid":"import-4cdbb5158fcf67d436","weight":1},{"event_id":1748,"event_guid":"ufJTu-pu8QBUtd-bji9tmw","weight":1},{"event_id":2350,"event_guid":"433e598a-4a96-4be5-90f1-014b4be7b3ec","weight":1},{"event_id":2735,"event_guid":"5c0323b6-c538-4fb6-8d70-d08def6bf865","weight":1},{"event_id":2740,"event_guid":"e3ca5a6f-e9f0-4bd2-8cc6-8ddebfb4b761","weight":1},{"event_id":2778,"event_guid":"3d7c4272-7e31-11e5-b91e-aaaeb62766e3","weight":1},{"event_id":3058,"event_guid":"56846834-12f4-495f-b92f-8cae32b8f1c2","weight":1},{"event_id":3827,"event_guid":"b8db16d9-f418-5571-ace6-e8bcb7a385d5","weight":1},{"event_id":3850,"event_guid":"ae999450-3893-11e7-890f-9f81551c7b53","weight":1},{"event_id":3851,"event_guid":"a2b0d408-3f34-11e7-a2ff-b7e0ed5cc95f","weight":1}],"recordings":[{"size":669,"length":3585,"mime_type":"audio/ogg","language":"eng","filename":"26c3-3535-en-using_openbsc_for_fuzzing_of_gsm_handsets.ogg","state":"downloaded","folder":"ogg","high_quality":true,"width":720,"height":576,"updated_at":"2014-05-10T15:26:48.731+02:00","recording_url":"https://cdn.media.ccc.de/congress/2009/ogg/26c3-3535-en-using_openbsc_for_fuzzing_of_gsm_handsets.ogg","url":"https://api.media.ccc.de/public/recordings/2484","event_url":"https://api.media.ccc.de/public/events/import-60706e285c5680928f","conference_url":"https://api.media.ccc.de/public/conferences/26c3"},{"size":669,"length":3585,"mime_type":"video/mp4","language":"eng","filename":"26c3-3535-en-using_openbsc_for_fuzzing_of_gsm_handsets.mp4","state":"downloaded","folder":"mp4","high_quality":true,"width":720,"height":576,"updated_at":"2016-01-27T11:03:36.980+01:00","recording_url":"https://cdn.media.ccc.de/congress/2009/mp4/26c3-3535-en-using_openbsc_for_fuzzing_of_gsm_handsets.mp4","url":"https://api.media.ccc.de/public/recordings/2483","event_url":"https://api.media.ccc.de/public/events/import-60706e285c5680928f","conference_url":"https://api.media.ccc.de/public/conferences/26c3"},{"size":669,"length":3585,"mime_type":"video/webm","language":"eng","filename":"26c3-3535-en-using_openbsc_for_fuzzing_of_gsm_handsets.webm","state":"downloaded","folder":"webm","high_quality":true,"width":720,"height":576,"updated_at":"2016-01-27T11:03:37.010+01:00","recording_url":"https://cdn.media.ccc.de/congress/2009/webm/26c3-3535-en-using_openbsc_for_fuzzing_of_gsm_handsets.webm","url":"https://api.media.ccc.de/public/recordings/2482","event_url":"https://api.media.ccc.de/public/events/import-60706e285c5680928f","conference_url":"https://api.media.ccc.de/public/conferences/26c3"}]}