[LIBRARY]DynRIL 1.0.103 reads CellID (LAC+CID) notifications - Windows Mobile Development and Hacking General

One of the popular requirements for telephony applications is the possibility of reading the Cell ID (LAC and CID).
Since no info is available on how to achieve that on Windows Mobile, we've decided to help the developer community and implement the feature in this latest release of DynRIL.
To start, have a look on the samples included with DynRIL. This new release comes with a C# sample (that displays the LAC and the CID). Also now you can receive notifications when a new SMS is received, and you can read the text and the originating number.
As a remark, the Cell ID notification is available for GSM devices, that are using a GSM network. So if your device connects to UMTS, make sure you disable it, and use only GSM, by going to Phone->Options->Band tab->Select your network type->GSM.
Click to expand...
Click to collapse
Source: http://teksoftco.com/index.php?section=press&cat=2009#090611

Related

voice GSM

Hi everybody
I finally got a valid handle using lineGetID opening the "Cellular Line" device.
I also mastered the wavein/wavout APIs.
What is the configuration that I should set for the various communication structures (DCB, COMSTAT, COMMTIMEOUTS)?
Right now I'm trying to implement a normal voice GSM modem, so I will be able to talk to users with analog telephones. I have i-mate jam with WM2003 (and TAPI 2.0).
Thanks ahead
Kobi
I solved the problem, but I think there left some more...
Hi everybody
I just thought about an idea of getting this information from the CPROG.EXE. I opened the cellular line device, in a OWNER || MONITOR state and I didn't kill CPROG.EXE. Then I used the lineGetID to retrieve the IO handle and get the communication structures, which I displayed using several message boxes.
Now, I have a question that I can't solve in such a way.
Are there any special things about implementing a GSM voice modem communication, i.e. special data frames I should send/receive the encoded voice, special protocol messages? Where can I find this information?
Thanks ahead
Kobi
Can I access the voice streams during conversation?
Hi everybody
I discovered that whenever a call is established, automatically I can make talks with my i-mate jam, without any code which implements queues between the microphone/speaker and the line.
Can I manage alone the streams of voice from the mic/speaker to/from line, or at least can I access these data blocks (in order to encrypt/decrypt it) ???
Thanks ahead
Kobi
Re: Can I access the voice streams during conversation?
you cannot. When the call is in progress your mic/speaker is directly connected to GSM chip by a hardware. Audio does not go through windows.
Little more question
Hi mamaich
First of all, thank you for your answer.
Second, I still have a question about it:
Does this direct hardware connection exist in all smartphones or just in the smartphone I'm using? (and generally how I can know it? does this feature have a name?)
Thanks ahead
Kobi
more informations
Hi mamaich,
Do you mind pointing me to appropriate documentation backing up the fact that a windows application has no control over the transmited voice once the communication is established ? It's not by lack of trust, I had reached the same conclusion but I need documentation backing me up on this for the company I work for (and that's how I found your post
I am currently working on an application that acts as a voice filter for GSM voice communications. Some codecs require that the communication suffer no loss, no noise nor desynch (that is, it must be able to recover from an error). So far I've come up with several mechanisms to resynch or recover from a "bad state", but they are theorical and I can't figure out how to implement them since they need to act at the transmission level.
Any documentation ? Anything backing up the fact that it is, or not, doable ?
Thanks a lot, feel free to mail me
Re: Can I access the voice streams during conversation?
mamaich said:
you cannot. When the call is in progress your mic/speaker is directly connected to GSM chip by a hardware. Audio does not go through windows.
Click to expand...
Click to collapse
You can still access the sound to encrypt decrypt...
What you are trying to do exists for WM5... www.securegsm.com
That can only access the sound comming and going because it runs at each end. The microphone and speakers work fine and programs that use them can send the data they collect over a call as data to be replayed at the other end. This dose not mean that securegsm (or any program I have seen) can access the streams that normal voice calls use. Many (including myself http://forum.xda-developers.com/viewtopic.php?t=9761&highlight=wave+tapi ) have showed evidence of this lack of functionality in one way or another in other threads. I think the only way to reslove this so that this question stops coming up is for someone to pull apart a device and show what each pin dose on the chips in question. Until then maybe we need a sticky called "answering machines for ppc".
The only proof I would be willing to accept that this can be done would be a working program that can play a message over a call to a person at the other end who is not running any other software ( and not using the system speaker ). Other evidence that the device cannot do this kind of thing can be seen in the inability to generate custom tones. The only tones that work are the standard predefined ones used in linegeneratetone.
do a search for "voice mail" or answering machine or something
those threads have piles of info about the gsm module and windows not being intergrated and voice mail and so gsm voiceover is not possible
It's nearly off topic but can anyone tell me where I can get information about the functions stored in a dll file?
I need to collect some information (e.g. the state of the telephone or the gsm unit). In the easiest way is to call an API function and read a structure filled by the function, isn't it?
But where can I find information about which function is stored in which dll file or which functions exist, respectively?
Thanks in advance.
Monty

Good Call Monitor/Logging program and Cell Info

Hi,
Over a period of time, I have been able to solve many problems with my qtek9100. However, these are 2 things, I am still fighting with.
Call Monitor:
I have tried a couple of softwares but none are fully customizable. HudsonMobile Phone Dashboard is good but it allows customizations on total minutes based talk plans. In my country, talk plans are not flat rate /min based. Rate depends which networks I call or where I call. So typically I have to set rules for certain number prefixes to use X rate/min and some to use Y.. so on.
I found a good software for this from Pisiloc software for symbian systems and was happy with it till I used Nokia. But its really getting tough to find one on WM5.
Cell Info
Did someone get this to work so far? I tried the engineering mode and googled around to see what all that information means. However, there's nothing which shows or can be used to find the cell info. Its frustrating to see a nokia show the cell info and this mighty phone not showing it.
Can someone please give me some pointers from here ?
Try phonealarm - has a good call monitor and varying profiles for diff tariffs see here http://www.pocketmax.net/phoneAlarm.htm
Nicetrack might be what you are after to show cell info see here http://forum.xda-developers.com/viewtopic.php?t=46803
meschle said:
Nicetrack might be what you are after to show cell info see here http://forum.xda-developers.com/viewtopic.php?t=46803
Click to expand...
Click to collapse
I hvae tried Nicetrack before. The problem is that you need to collect the cells and name them manually. And cell info that you see are the names you give.
What I was talking about is some software that shows the cell info name from the cell tower. The cell towers of my network have an area name coded with them. This way when I drive, my phone shows me the area I am in, simply by displaying the text from tower its latched to. This is an inbuilt feature in nokias and I know my operator provides it. Just that the wizard doesnt show it. My hunt is still on for such a 3rd party software.
araje said:
meschle said:
Nicetrack might be what you are after to show cell info see here http://forum.xda-developers.com/viewtopic.php?t=46803
Click to expand...
Click to collapse
I hvae tried Nicetrack before. The problem is that you need to collect the cells and name them manually. And cell info that you see are the names you give.
What I was talking about is some software that shows the cell info name from the cell tower. The cell towers of my network have an area name coded with them. This way when I drive, my phone shows me the area I am in, simply by displaying the text from tower its latched to. This is an inbuilt feature in nokias and I know my operator provides it. Just that the wizard doesnt show it. My hunt is still on for such a 3rd party software.
Click to expand...
Click to collapse
It seems to me you're actually looking for a way to read cell broadcast messages. They're available in WM5 as in every phone around (not only Nokia's). Go to Settings->Phone->Other[tab]->Transmission Channels(enable)->Settings then click New and create a new channel with channelID 050
bye
Help on Cell Broadcast
[quote="risidoro]
It seems to me you're actually looking for a way to read cell broadcast messages. They're available in WM5 as in every phone around (not only Nokia's). Go to Settings->Phone->Other[tab]->Transmission Channels(enable)->Settings then click New and create a new channel with channelID 050
bye[/quote]
Hi, thanks for ur reply. I have tried this before. Can you give me a little more help on this feature. Here's what I did
Phone->more[tab]->Broadcast Channels->Settings
Recieve Channel List: unchecked
Language: English
Select items to recieve: (clicked new, channel name: "Info" Channel number 050)
OK
Checked "Info"
OK
So now with this, what should I be seeing and where.
Thanks for ur help in advance
Anup
This might be useful for you - engineer mode - i placed a link from gsmtestmode.exe in the \windows directory and got all kinds of cell info.
see here http://forum.xda-developers.com/viewtopic.php?t=36807
There is a Today plugin titled DKToday, which displays cell strength in a four segment bar graph, operator and cell name. However here in Oz (Australia) the cell name works, but it also comes up as a balloon at the bottom of the screen as a notification (annoying). The software author has been unable to stop the balloon appearing. This is on a K-Jam. Yo need to enable cell broadcasts as stated earlier in the posts.
If a fix is found or a new solution is found it will be popular.

Stupid question? How much of the GSM hardware is exposed to the programmer?

I was thinking I might like to have an application that sits on the WiFi interface -- maybe as a web server -- and reports things like how many text messages and voicemails I have, signal strength, etc. It would also be REALLY cool if I could LISTEN to those voicemails and READ those text messages via this app.
Does anyone know if this kind of access is available?
For the record, I have a Cingular 8525 (HTC TYTN/Hermes 100) running WM5.
Bumping this because I really could use an answer :/
spb have signal str showing software
non of the things you ask about require what i would call
gsm hardware access
to read sms and mails is just a matter of accessing the text in the outlook db files
and read them with a "robot" voice
i'm sure there are already programs which support that
and voicemail as it's only supported on the operators end
so it would just require customization to match how the operator in question handle that and auto call and "press" 1 to hear voicemails and the likes...

Can anyone develop an SMS application . . .

Hi all.
I was wondering if it is possible to develop an sms application whereby as well as all the usual info you type in eg recipient name, number, message etc, you could have a way to control and set the outgoing 'from' number as well.
This would be handy where some of us are forced to carry two phones around with separate contacts on each.
maybe its not possible but id love to have something like that to simplify life instead of spending multiple messages explaining why id like the reply to a different phone number. ( and no we are not allowed to transfer contacts )
Thanks Guys.
AndyG
Sorry, the from field is not set on the device itself, but set by the network, to do that you would have to do it on the service provider side.
...the only options you can set at the application layer are the ones available through the SmsSendMessage API:
http://msdn2.microsoft.com/en-US/library/aa455068.aspx
To achieve something like this is not possible at application level..what you'll need is to get into a much larger sphere of sim spoofing, which can be carried out, I think, (as I'm a BTS s/w guy,i.e., network software developer) in following two ways:
1. Cloning/spoofing the sim itself using another sim(can be done and is done a lot I think)
2. Hacking into the GSM\Radio image that is loaded into our devices and then hacking the messages exchanged between network and mobile, but this is not possible since we dont have the source code for the radio image
Anyways, if any of these methods are possible, then not just the sms, but ur complete phone functionality will be replicated, i.e., basically u will have two phones with the same number which kinda defeats the purpose of having two phones

[New Version] HushSMS - A "Silent" SMS Tool [New Version v0.6beta]

[05/27/08] HushSMS - A "Silent" SMS Tool [Version v0.6beta]
HushSMS is a tool to sent a class zero message (aka Flash-SMS) or a stealthy PING message to another cellphone.
The "Silent Ping" enables you to sent a message to another cellphone without the owner getting knowledge about.
The message is discarded on the owners phone and no trace exists. You will get back a message from the operator that your message has been delivered, proving that your message has been received, and thus you can know that the owners phone is switched on.
This is not some kind of hack or whatever. It's a normal function per standard and works on any phone.
Q: Why such a software? A: I regulary need it in my job. Sometimes I have to be sure a specific phone is switched on and I can send information to that phone without it beeing stored (class zero message).
It runs on Windows Mobile 5 and 6 based PocketPCs.
EDIT: A word of warning: If you send a class zero message to a windows mobile device, your number will not be shown. Instead of the senders number, windows mobile will show something like "Network Message".
So in general this tool could be used in a manner it is not intended and designed for. So be responsible!
Usage
-----
Copy the CAB file to your device and double click it.
The program is installed to \Program Files\HushSMS\HushSMS.exe.
There are three functions:
Send a normal SMS
Send a class zero message (Flash-SMS)
Send a stealthy message
- To send a normal sms, leave the checkboxes for "Class 0" and PING unchecked. If you want a receipt enable the "Return Confirmation" checkbox.
- To send a class zero message enable the "Class 0" checkbox and write your message.
- To send a silent PING just enable the "PING" checkbox. There is no need to write something in the Textbox, because the target phone will discard it anyway.
If you enter the number manually you have to enter it in international format (for example starting with +49... for germany).
You can alternately choose the number from your address-book but it has to be in international format also.
The program will pop-up a message box to notify you about the success or failure of the sending process. This message box
might be under an overlaying window if you have other programs open (a file explorer for example).
That's it. Enjoy it, as always it's freeware.
Homepage with download: http://www.silentservices.de/HushSMS.html
EDIT: v0.2
Download @: http://www.silentservices.de/HushSMS-0.2.CAB
EDIT: v0.3 beta 08.04.2008
See post #87: http://forum.xda-developers.com/showpost.php?p=2098699&postcount=87
EDIT: v0.3 beta4 15.04.2008
Changes:
- Smartphone UI
- Added PING2 message option
- Added notification bubble (for PPC only)
- Program now quits after message is sent
- small general improvements
As for the PING2 function: I added this for all the people whose provider will automatically transform Type0 messages to normal SMS. This function uses a different method for sending a "silent ping" which should enable all users to send those messages, even on US carriers. The principle is pretty simple: I'm sending a MWI deactivation, which is not shown to the user, and request a status report. If you receive the status report, you known that the "pinged" phone is active.
See Post #103
EDIT: v0.6beta 27.05.2008
New features:
- Additional MWI Messages (except for voice MWI, most of them will not work on windows obile based target phones)
- Added WAP-Push SI (service indication) and WAP-Push SL (service load messages)
See Post #124
This program doesn't seem to work on US-Carriers (except with the new beta4 which enables another method for the "silent ping")
Edit: I've tested the program on the german eplus network, and found out that class0 messages, as well as type0 (The Ping) are converted to normal messages by the SMSC of eplus.
However, it is working as expected on vodafone.de
Thanks a lot I have been looking for program like this for a long time. Will report any glitches.
useful one, great bro
dont work on Artemis (wm6)
error when sending msg. ..
EDIT: owww i forget about country prefixes (f/e +48) now working fine, thanks
Tested on my tytn and it works perfectly.
Quick question...If I send a class 0 sms to normal cellphone like samsung or nokia will my number be shown.
The only extra feature that would be great would be the ability to send a sms to a friend and make it seem as though it came from another friend.....is it possible to do and if so how difficult would it be to implement something like that?
"Silent Ping" funtion dosn't work.
It seems like a class zero message appears on the Nokia cellphone
Before anyone else says it doesn't work: read the first post, you MUST USE COUNTRY CODE.
Ive tested all the features of the app on my tytn and everything works fine.
I never entered the country code and it still works.
I've tested this app and it does everything it says it does, which is cool. When I choose "Class 0" and sent a text message to myself (wm6 device), it read the message, it was from "Network Administrator", and my phone number was not listed. Also, when I enabled just the ping to send a silent message to my other cellphone which was off, it read that the message was sent. When i turned my other cellphone on, (motorola phone. non windows device), my cellphone number was visible. So this works exactly as c0rnholio states.
tried it on my wizard and nothing happens, international format or not. It says message sent but i never get a ping or anything back even to myself
I tried this on my apache as well and had no success. Maybe I don't know how to enter the phone number properly. I also live inside the US and have Verizon if this helps at all.
fuego3048 said:
I tried this on my apache as well and had no success. Maybe I don't know how to enter the phone number properly. I also live inside the US and have Verizon if this helps at all.
Click to expand...
Click to collapse
AFAIK the APache is a CDMA device. Handling of SMS is sligtly different between CDMA and GSM. This program is written for GSM Networks and due to the lack of a CDMA Network and a device which supports it, I cannot make it compatible. Sorry.
Rcas said:
tried it on my wizard and nothing happens, international format or not. It says message sent but i never get a ping or anything back even to myself
Click to expand...
Click to collapse
It might be that your network opertor is blocking such messages. Have you been able to send class 0 sms in general with other tools?
welkin said:
"Silent Ping" funtion dosn't work.
It seems like a class zero message appears on the Nokia cellphone
Click to expand...
Click to collapse
Interesting. Then your Nokia behaves against the GSM standard. Which one is it?
RPG0 said:
Before anyone else says it doesn't work: read the first post, you MUST USE COUNTRY CODE.
Click to expand...
Click to collapse
I fixed that country code stuff in v0.2, which will be out in a few days. You will the be able to send either in international or national format.
My GF Nokia was able to see my number and save the message I sent with class 0 ticked. Seems my operator does not like Class 0 SMS
KarhU said:
My GF Nokia was able to see my number and save the message I sent with class 0 ticked. Seems my operator does not like Class 0 SMS
Click to expand...
Click to collapse
A class zero message is displayed in general. Also it is right that your number is shown. Some phones are able to save those messages, others are not. So in general everything is fine and your operator supports class zero messages. If you get a class 0 message and to not click on options->save or whatever the procedure is on your phone, the message should be discarded according to the GSM standard.
The number obfuscation only seems to occur on windows mobile based devices. On these, when a class 0 message is comming in the device will not show the senders number but instead show "Network Message" or "Network Administrator". This seems to be a bug in windows mobile and may lead to further attack scenarios because a user may think this message is comming from the network operator. If you send a wap push SI message for example you can embed a link to a webpage, or a link to a cab-file on a webpage. The user might then think this link is from the network operator and click on it. This may lead to mallicious code installation or execution or whatever.
The "Silent Ping" is defined in the GSM standard. It is a kind of message which must be received by the handset and must be directly discarded without user notification. I've tested this with different phones from different manufacturers and it never failed to work, but YMMV.
So your phones behaves in the normal range of operation. Have you tried to send the PING to your nokia? If so, and your nokia shows it, what is displayed?
PING works as advertised - no sign of it at Nokia at all.
works fine on most handsets, but the Nokia display your number.
Nice program
this is somewhat a nice-and-funny program....i like it....though i haven't figured out how the function "Ping" does as i have tried by following the instruction from its official site......weird.....One thing is important to whom may it fail with other functions....pls do remember Enter International Format in a word coutry code....for exampl like me Hong Kong is +852..
cheerz

Categories

Resources