Carlos A. Rojas

A javascript-free experience!

Unlocking Read-Only NAND in Sierra Qualcomm 5G Modems

Files:4 Languages:Python

Confirmed

  • For use in the USA with IMEI numbers THAT YOU OWN!
  • Bypass the IMEI lock, allowing override
  • Reliably responds to the "CND" and "MEP" cryptographic challenges
  • Write and encrypt IMEI numbers to the modem's ROM

All Sierra/Qualcomm 5G/4G-LTE modem combos, even those in everyday smartphones, have a hidden "engineering" mode that unlocks a set of secret features. Some hidden features include the ability to disable tower handoff, raise the voltage of the 5G/4G radio (please follow all FCC guidelines and your local radio tech laws), multi-network registration, enabling telnet for remote administration, and, most importantly, IMEI rewriting. This can help to establish a connection to certain networks that enforce device whitelists. Some legitimate programatic text-messaging setups may suddenly fail to work as intended now that major cell carriers are enforcing so-called "gray route" SMS filters. By allowing a different IMEI number to be written to the modem, you can effectively bypass this restriction. The python scripts included in this project allow you to defeat the cryptographic challenges that normally lock these hidden features.

Usage

#Obtain the cryptographic challenges from the modem (using AT commands in a serial console)
AT!OPENLOCK?[OPENLOCK_CHALLENGE_STRING]
AT!CND?[CND_CHALLENGE_STRING]
AT!MEP?[MEP_CHALLENGE_STRING]

#Use the "ModemKeyGenerator.py" script to calculate the appropriate cryptographic response
./ModemKeyGenerator -l [OPENLOCK_CHALLENGE_STRING] -d [MODEM_ID]
./ModemKeyGenerator -c [OPENLOCK_CHALLENGE_STRING] -d [MODEM_ID]
./ModemKeyGenerator -m [OPENLOCK_CHALLENGE_STRING] -d [MODEM_ID]

A VCF File Integrity Checker for Post-NGS Quality Control

Files:1 Languages: Python

Confirmed

  • Standalone Python script for CLI environments
  • Checks a given VCF file for syntactical or general formatting errors
  • Prompts the user when errors are found and can fix said errors if told to do so
  • Works with all standard VCF and gVCF file formats for single or multiple target sequences

Manually verifying the integrity of a VCF file can be a daunting task. This is especially true in cases where many variants are discovered in a target sequence. This easy to use script can help with correcting improperly formatted or syntactically incorrect VCFs to make downstream processing less cumbersome.

Usage

#For Command Line
python SimpleVCFIntegrityChecker.py InputVCFFile.vcf

Applying this file-integrity mindset to operations? See the backup restore drill.

Description and Rule Level Lookup Tool for Wazuh/OSSEC

Files:1 Languages:Python

Confirmed

  • A simple python script for the Wazuh/OSSEC security platform
  • An easy way to lookup a rule description
  • Quick rule severity level lookup
  • Works with standard Wazuh/OSSEC installations >v3.2

Wazuh/OSSEC deployments can get increasingly complex as the security needs of your IT infrastructure increases. As more rules and decoders are added to your security stack, a once trivial description lookup becomes a monumental task. This script aims to save you this headache by allowing you to invoke a simple lookup command that can retrieve the information you need.

Usage

#For Description Lookups
python WazuhXMLCrawler.py [rule ID] "description"

#For Rule Level Lookups
python WazuhXMLCrawler.py [rule ID] "level"

This tool pairs naturally with the disposable web app lab for recognizing attack telemetry.