[n1nj4c]

Is there a way to receive messages of someone's mobile number? Other than infecting the phone with rat / backdoor.

[Bish0pQ]

More information please.

Do you have pyhsical access to the target? Since it will be hard to do this (or at least as far as I know).

[n1nj4c]

More information please.

Do you have pyhsical access to the target? Since it will be hard to do this (or at least as far as I know).

No physical access to the target.

[Pikami]

Here's what you can do:

• Infect the victims phone with a spying software (You can use SE, exploit or physical access)
  
• SE victims service provider to block his SIM card and give you a new SIM card with that phone number (Risky and you need ballz)
  
• Create a fake cell tower and intercept victims cell traffic (Equipment costs money)
  
• Hack the phone company (You have to be a 1337 H4X0R)
  

[Bish0pQ]

Here's what you can do:

• SE victims service provider to block his SIM card and give you a new SIM card with that phone number (Risky and you need ballz)
  

Pretty good idea, only thing is that you wouldn't get previous sent messages if that's his goal.
Fake cell tower is also a great idea, but you'd have to be close to the target isn't it? Or could you setup something like that remotely?

[Pikami]

Here's what you can do:

• SE victims service provider to block his SIM card and give you a new SIM card with that phone number (Risky and you need ballz)
  

Pretty good idea, only thing is that you wouldn't get previous sent messages if that's his goal.
Fake cell tower is also a great idea, but you'd have to be close to the target isn't it? Or could you setup something like that remotely?

You can setup a fake cell tower remotely but it would decrease the chances of victim actually connecting to it because telephones always connect to the strongest tower. It's best to be close to your victim. Another thing is that if you want to set it up in a remote location from the victim and still have some sort of chance of him/her connecting, you must have a strong tower witch costs even more money.
The other thing you can do is try to hijack a legitimate cell tower, but that has it's own problems...

[mothered]

One of the better options will be to enable Call Forwarding (SMS Inclusive) either on the phone, or via the carrier to a nominated number.

Given you don't have physical access and Infecting the phone Is not an option for you, both the above will require SE'ing- either to the carrier (provided you have enough credentials to assume your victim's Identity), or to your victim pretending to be a representative of the carrier Itself.

[n1nj4c]

Good info. Rogue cell tower method seem great, although costly and risky, I will probably just use social engineering method and backdoor then. thanks a lot.

[meow]

Your only realistic options if you're choosing to exclude backdoors (which also isn't that realistic unless you know what you're doing, which you don't) are sim swapping and SMS forwarding, both of which require social engineering, however the latter is easier.

If you do decide to take a swing at the SMS forwarding option, make sure you use a google voice number or something similar rather than your own.

[silur]

Use the SS7 exploit.

In case you didn't hear of it, it's similar to the deauth flaw in 802.11, a protocol error that cannot be fixed now because every cell tower in the world needs to be replaced. A vulnerability that will never be patched yaaay

But the sad thing is, it is MOTHAFUCKIN DAMN HARD to exploit. I only did it once, and it took ~3 days, but I succeeded to do it without special hardware.