[{"data":1,"prerenderedAt":192},["ShallowReactive",2],{"tool-doc-5g-nidd":3},{"_path":4,"_dir":5,"_draft":6,"_partial":6,"_locale":7,"title":8,"description":9,"name":8,"protocol":10,"category":11,"hardware":12,"command":13,"academyLab":14,"body":15,"_type":186,"_id":187,"_source":188,"_file":189,"_stem":190,"_extension":191},"\u002Ftools\u002F5g-nidd","tools",false,"","5G-NIDD","Non-IP Data Delivery testing framework for auditing 5G IoT NB-IoT and LTE-M NIDD bearer establishment, SGW tunneling, and SCEF API security.","5G NR \u002F NB-IoT","IoT Protocol Testing","USRP B210 \u002F LimeSDR","nidd-client --config \u002Fetc\u002Fnidd\u002Fdefault.yaml","https:\u002F\u002Fapp.telcosec.net",{"type":16,"children":17,"toc":175},"root",[18,27,45,52,97,103,110,123,129,138,144,153,159],{"type":19,"tag":20,"props":21,"children":23},"element","h1",{"id":22},"_5g-nidd-non-ip-data-delivery-security-testing",[24],{"type":25,"value":26},"text","5G-NIDD — Non-IP Data Delivery Security Testing",{"type":19,"tag":28,"props":29,"children":30},"p",{},[31,36,38,43],{"type":19,"tag":32,"props":33,"children":34},"strong",{},[35],{"type":25,"value":8},{"type":25,"value":37}," enables security auditing of Non-IP Data Delivery bearers used by NB-IoT and LTE-M cellular IoT devices. Within ",{"type":19,"tag":32,"props":39,"children":40},{},[41],{"type":25,"value":42},"TelcoChisel",{"type":25,"value":44},", the tool is preconfigured to test NIDD bearer establishment via the NEF\u002FSCEF exposure APIs, inspect SGW-level tunneling, and identify authentication bypass vectors in constrained IoT device communication.",{"type":19,"tag":46,"props":47,"children":49},"h2",{"id":48},"key-capabilities-security-vectors",[50],{"type":25,"value":51},"Key Capabilities & Security Vectors",{"type":19,"tag":53,"props":54,"children":55},"ul",{},[56,67,77,87],{"type":19,"tag":57,"props":58,"children":59},"li",{},[60,65],{"type":19,"tag":32,"props":61,"children":62},{},[63],{"type":25,"value":64},"NIDD Bearer Hijacking",{"type":25,"value":66},": Test unauthorized NIDD session establishment by spoofing device identities (IMSI\u002FSUPI) against the SCEF\u002FNEF.",{"type":19,"tag":57,"props":68,"children":69},{},[70,75],{"type":19,"tag":32,"props":71,"children":72},{},[73],{"type":25,"value":74},"SGW Data Injection",{"type":25,"value":76},": Inject crafted non-IP payloads through GTP tunnels targeting the Serving Gateway, bypassing IP-layer firewalls.",{"type":19,"tag":57,"props":78,"children":79},{},[80,85],{"type":19,"tag":32,"props":81,"children":82},{},[83],{"type":25,"value":84},"SCEF\u002FNEF API Fuzzing",{"type":25,"value":86},": Fuzz 3GPP T8 API endpoints for authentication and authorization flaws in IoT device management.",{"type":19,"tag":57,"props":88,"children":89},{},[90,95],{"type":19,"tag":32,"props":91,"children":92},{},[93],{"type":25,"value":94},"Constrained Device Impersonation",{"type":25,"value":96},": Simulate rogue NB-IoT endpoints to test network-side device verification mechanisms.",{"type":19,"tag":46,"props":98,"children":100},{"id":99},"telcochisel-execution-cheatsheet",[101],{"type":25,"value":102},"TelcoChisel Execution Cheatsheet",{"type":19,"tag":104,"props":105,"children":107},"h3",{"id":106},"_1-start-nidd-bearer-test",[108],{"type":25,"value":109},"1. Start NIDD Bearer Test",{"type":19,"tag":111,"props":112,"children":117},"pre",{"className":113,"code":115,"language":116,"meta":7},[114],"language-bash","# Initiate NIDD bearer establishment against test core\nnidd-client --config \u002Fetc\u002Fnidd\u002Fdefault.yaml --mode bearer-test\n","bash",[118],{"type":19,"tag":119,"props":120,"children":121},"code",{"__ignoreMap":7},[122],{"type":25,"value":115},{"type":19,"tag":104,"props":124,"children":126},{"id":125},"_2-scef-api-endpoint-discovery",[127],{"type":25,"value":128},"2. SCEF API Endpoint Discovery",{"type":19,"tag":111,"props":130,"children":133},{"className":131,"code":132,"language":116,"meta":7},[114],"# Enumerate SCEF\u002FNEF T8 API endpoints\ncurl -k https:\u002F\u002F127.0.0.1:8443\u002F3gpp-nidd\u002Fv1\u002F\n",[134],{"type":19,"tag":119,"props":135,"children":136},{"__ignoreMap":7},[137],{"type":25,"value":132},{"type":19,"tag":104,"props":139,"children":141},{"id":140},"_3-non-ip-payload-injection",[142],{"type":25,"value":143},"3. Non-IP Payload Injection",{"type":19,"tag":111,"props":145,"children":148},{"className":146,"code":147,"language":116,"meta":7},[114],"# Send crafted non-IP payload through NIDD bearer\nnidd-client --mode inject --payload \u002Fopt\u002Fnidd\u002Fpayloads\u002Fcoap-malformed.bin\n",[149],{"type":19,"tag":119,"props":150,"children":151},{"__ignoreMap":7},[152],{"type":25,"value":147},{"type":19,"tag":46,"props":154,"children":156},{"id":155},"practice-in-telcosec-academy",[157],{"type":25,"value":158},"Practice in TelcoSec Academy",{"type":19,"tag":28,"props":160,"children":161},{},[162,164],{"type":25,"value":163},"👉 ",{"type":19,"tag":32,"props":165,"children":166},{},[167],{"type":19,"tag":168,"props":169,"children":172},"a",{"href":14,"rel":170},[171],"nofollow",[173],{"type":25,"value":174},"Launch IoT Security Lab on App.TelcoSec.Net",{"title":7,"searchDepth":176,"depth":176,"links":177},2,[178,179,185],{"id":48,"depth":176,"text":51},{"id":99,"depth":176,"text":102,"children":180},[181,183,184],{"id":106,"depth":182,"text":109},3,{"id":125,"depth":182,"text":128},{"id":140,"depth":182,"text":143},{"id":155,"depth":176,"text":158},"markdown","content:tools:5g-nidd.md","content","tools\u002F5g-nidd.md","tools\u002F5g-nidd","md",1792170260644]