5G-EmPOWER — MEC & RAN Programmability Security Platform

5G-EmPOWER is an open multi-access edge computing (MEC) runtime for programmable wireless networks. Within TelcoChisel, 5G-EmPOWER enables security testing of RAN-level programmability APIs, network slice enforcement boundaries, and MEC application isolation across heterogeneous access technologies.

Key Capabilities & Security Vectors

• RAN Programmability API Attacks: Test REST APIs controlling eNodeB/gNodeB scheduling, handover decisions, and resource block allocation for unauthorized manipulation.
• Network Slice Boundary Escape: Audit slice isolation by attempting cross-slice API calls and resource exhaustion across tenant boundaries.
• MEC Application Sandboxing: Test container escape vectors and API privilege escalation in edge-deployed security functions.
• Multi-RAT Handover Exploitation: Analyze security implications of forced handovers between 5G NR, LTE, and Wi-Fi access points.

TelcoChisel Execution Cheatsheet

1. Start EmPOWER Runtime

# Launch the MEC runtime with default configuration
cd /opt/5g-empower && empower-runtime --config /etc/empower/config.yaml

2. List Connected Virtual Base Stations

# Query active VBS instances via REST API
curl -u admin:admin http://127.0.0.1:8888/api/v1/vbses

3. Enumerate Active Network Slices

# List configured slices and their tenant bindings
curl -u admin:admin http://127.0.0.1:8888/api/v1/slices

Practice in TelcoSec Academy

👉 Launch MEC Security Lab on App.TelcoSec.Net