The Specialized Linux Distribution for Telecom Security & 5G Auditing
Purpose-built for cellular network penetration testers, carrier security engineers, and SDR researchers. Pre-loaded with 100+ telecom tools for 5G SA/NSA, 4G LTE, SS7, Diameter, IMS/VoLTE, and eSIM reverse engineering.
Built for Every Telecom Threat Surface
From physical RF air interfaces to international core signaling backbones.
5G SA & Core SBA Security
Audit Service-Based Architecture HTTP/2 JSON APIs, token authorization vulnerabilities (NRF/AMF/SMF), and rogue gNodeB attach mechanisms.
Core Signaling (SS7 & Diameter)
Assess international carrier interconnects (IPX/GRX) for subscriber location tracking, SMS interception, and fraud vectors across MAP & Diameter.
Cellular RF & SDR Over-the-Air
Transmit, capture, and reverse engineer 2G/3G/4G/5G radio signals with pre-tuned drivers for USRP, HackRF, BladeRF, and LimeSDR.
Pre-Installed Telecom Tooling
Zero compilation required. Fully configured with dependencies & documentation.
Open5GS
5G NR / 4G LTEOpen-source 5G SA Core and 4G EPC network functions with real-time SBA HTTP/2 JSON dissectors.
open5gs-amfd -c /etc/open5gs/amf.yamlSigPloit
SS7 / Diameter / GTPComprehensive signaling exploitation framework targeting SS7 (MAP/ISUP), Diameter (S6a), and GTP-C.
sigploitsrsRAN 4G & 5G
5G NR / 4G LTEHigh-performance C++ software radio suite implementing eNodeB, gNodeB, and UE stacks for RF testing.
srsenb /etc/srsran/enb.confgNBSim
5G SA5G SA gNodeB & Multi-UE load generator for fuzzing N2/NG-AP and N3/GTP-U core interfaces.
gnbsim --cfg /etc/gnbsim/default.jsonpySim
SIM / eSIMOsmocom tool suite for inspecting, programming, and auditing SIM, USIM, ISIM, and eSIM profiles.
pySim-shell.py -p 0URH (Universal Radio Hacker)
RF / WirelessWireless signal reverse engineering and protocol demodulation suite with live RF packet replay.
urhDownload the 2026 Telecom Security Handbook
A 60-page guide with step-by-step 5G Core, SS7 interception, and SDR cheatsheets.