From: Gleb Paharenko (gpaharenko@gmail.com)
Date: Thu Mar 06 2008 - 04:31:47 EST
Hi.
Is some body has experience in testing MM1,MM7,etc. interfaces of MMSC
and other MMS related infrastructure of GSM operators.
For MM1 I've found the folowing vectors to be checked:
- web interface of MMSC
- web interface of MMS composing and displaying though internet
oparators web-site (even though malformed mms)
- attacks on mobile phone though specially crafted MMS
MM7 have not been researched by me yet, but it seems that all
web-services stuff could be evaluated.
I'm able to create custom MMS and send them (using NowSMS) though gprs modem.
-- Best regards. Gleb Pakharenko. http://gpaharenko.livejournal.com ------------------------------------------------------------------------ This list is sponsored by: Cenzic Need to secure your web apps NOW? Cenzic finds more, "real" vulnerabilities fast. Click to try it, buy it or download a solution FREE today! http://www.cenzic.com/downloads ------------------------------------------------------------------------
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:58:27 EDT