telecom-security

PWN is an open security automation framework that aims to stand on the shoulders of security giants, promoting trust and innovation.

Capture 2G/3G/4G/5G air interface network traces - Successor for QCSuper. 📡 A general client for the diagnostic interface of Snapdragon basebands | 🚧 Beta software

Advanced cellular network anomaly detection platform against SS7/Diameter tracking and IMSI Catchers

TELGUARD-X v4.0 is an advanced mobile network penetration testing framework for GTP host discovery, 5G core analysis, API security testing, container detection, JWT/OAuth2 testing, threat intelligence integration, and comprehensive vulnerability assessment with interactive HTML reports.

A comprehensive collection of research papers, technical documents, and security analysis related to telecommunications infrastructure, mobile networks, and network security vulnerabilities.

5G/4G telecom security Linux distro (Ubuntu-based) with 100+ SDR, baseband & RF penetration-testing tools — srsRAN, Open5GS, HackRF, USRP ready.

Educational VoIP security lab on Debian 11 — Asterisk + MagnusBilling. Demonstrates how Caller ID (CLI) is forged over SIP, how to analyze it with Wireshark, and how STIR/SHAKEN, SIP/TLS & anti-fraud controls defend against it. For defensive/research use only.

Curated index of A2P messaging abuse: artificially inflated traffic, SMS pumping, grey routes, sender-ID spoofing, smishing and signalling attacks - the research, standards, datasets and tooling that exist, and the gaps that do not.

Comprehensive defense guide on SS7, 4G/5G signaling, SIP/VoLTE/VoNR, STIR/SHAKEN, and DPI analysis in encrypted traffic (TLS 1.3 / ECH).

Automated static-analysis pipeline for embedded Linux firmware. Systematically extracts and audits credentials, cryptographic keys, password hashes, ELF binary hardening, unsafe C functions, and debug interfaces.

Defensive IMSI-catcher / false-base-station indicator engine for cell-scan data. Companion to lozaning-tel.

A fully-legal private LTE network, zero to dial tone (Open5GS, srsRAN, Kamailio IMS). Educational.

Passive GSM (2G) signal analysis, IMSI catching, and cell-tower geolocation with a HackRF One SDR — using gr-gsm, Wireshark, and the LocationIQ/Unwired Labs API. A hands-on, documentation-only wireless-security research write-up for educational and defensive purposes.

Distinguishing a malicious NAS message replay from legitimate 5G retransmissions by analysing Packet Data Unit sequence counter drift in a captured NAS signalling trace.