[{"data":1,"prerenderedAt":308},["ShallowReactive",2],{"tool-doc-open5gs":3,"content-query-XIbalj6ePt":188},{"_path":4,"_dir":5,"_draft":6,"_partial":6,"_locale":7,"title":8,"description":9,"name":8,"protocol":10,"category":11,"hardware":12,"command":13,"academyLab":14,"body":15,"_type":182,"_id":183,"_source":184,"_file":185,"_stem":186,"_extension":187},"\u002Ftools\u002Fopen5gs","tools",false,"","Open5GS","Open-source implementation of 5G Standalone (SA) Core and 4G EPC network functions in C, supporting 3GPP Release 16\u002F17 SBA architecture.","5G NR \u002F 4G LTE","5G Core Network & Evolved Packet Core","USRP B210 \u002F LimeSDR \u002F BladeRF","open5gs-amfd -c \u002Fetc\u002Fopen5gs\u002Famf.yaml","https:\u002F\u002Fapp.telcosec.net",{"type":16,"children":17,"toc":171},"root",[18,27,41,48,93,99,106,119,125,134,140,149,155],{"type":19,"tag":20,"props":21,"children":23},"element","h1",{"id":22},"open5gs-5g-sa-core-4g-epc-suite",[24],{"type":25,"value":26},"text","Open5GS — 5G SA Core & 4G EPC Suite",{"type":19,"tag":28,"props":29,"children":30},"p",{},[31,33,39],{"type":25,"value":32},"Open5GS is an open-source implementation for 5G Core Network and 4G LTE Evolved Packet Core (EPC). Within ",{"type":19,"tag":34,"props":35,"children":36},"strong",{},[37],{"type":25,"value":38},"TelcoChisel",{"type":25,"value":40},", Open5GS is pre-configured with real-time logging, loopback network interfaces, MongoDB database bindings, and integrated Wireshark dissectors for inspecting 5G Service-Based Architecture (SBA) HTTP\u002F2 JSON REST interfaces.",{"type":19,"tag":42,"props":43,"children":45},"h2",{"id":44},"key-capabilities-attack-surface-testing",[46],{"type":25,"value":47},"Key Capabilities & Attack Surface Testing",{"type":19,"tag":49,"props":50,"children":51},"ul",{},[52,63,73,83],{"type":19,"tag":53,"props":54,"children":55},"li",{},[56,61],{"type":19,"tag":34,"props":57,"children":58},{},[59],{"type":25,"value":60},"5G SBA (Service-Based Architecture) Verification",{"type":25,"value":62},": Test HTTP\u002F2 SBI interfaces across AMF, SMF, NRF, NSSF, AUSF, UDM, and PCF.",{"type":19,"tag":53,"props":64,"children":65},{},[66,71],{"type":19,"tag":34,"props":67,"children":68},{},[69],{"type":25,"value":70},"SUPI \u002F SUCI De-concealment Audits",{"type":25,"value":72},": Validate ECIES Profile A & Profile B key derivation implementations on UDM\u002FAUSF.",{"type":19,"tag":53,"props":74,"children":75},{},[76,81],{"type":19,"tag":34,"props":77,"children":78},{},[79],{"type":25,"value":80},"Rogue gNodeB Authentication",{"type":25,"value":82},": Audit AMF vulnerability against unauthorized N2\u002FN3 connection attempts and SCTP malformed payloads.",{"type":19,"tag":53,"props":84,"children":85},{},[86,91],{"type":19,"tag":34,"props":87,"children":88},{},[89],{"type":25,"value":90},"GTP-U User Plane Penetration",{"type":25,"value":92},": Test UPF TEID allocation, GTP encapsulation injection, and subscriber data leaks.",{"type":19,"tag":42,"props":94,"children":96},{"id":95},"pre-installed-telcochisel-cheatsheet",[97],{"type":25,"value":98},"Pre-installed TelcoChisel Cheatsheet",{"type":19,"tag":100,"props":101,"children":103},"h3",{"id":102},"_1-launch-all-5g-core-network-functions",[104],{"type":25,"value":105},"1. Launch All 5G Core Network Functions",{"type":19,"tag":107,"props":108,"children":113},"pre",{"className":109,"code":111,"language":112,"meta":7},[110],"language-bash","# Start the entire 5G Standalone Core suite\nsudo systemctl start open5gs-nrfd open5gs-amfd open5gs-smfd open5gs-upfd open5gs-udmd open5gs-ausfd open5gs-nssfd open5gs-pcfd open5gs-bsfd open5gs-udrd\n","bash",[114],{"type":19,"tag":115,"props":116,"children":117},"code",{"__ignoreMap":7},[118],{"type":25,"value":111},{"type":19,"tag":100,"props":120,"children":122},{"id":121},"_2-live-sba-packet-capture-http2-sbi",[123],{"type":25,"value":124},"2. Live SBA Packet Capture (HTTP\u002F2 \u002F SBI)",{"type":19,"tag":107,"props":126,"children":129},{"className":127,"code":128,"language":112,"meta":7},[110],"# Capture all internal 5G Service-Based Architecture signaling on loopback\nsudo tshark -i lo -f \"tcp port 7777 or tcp port 8000\" -Y \"http2\" -T fields -e ip.src -e ip.dst -e http2.header.value\n",[130],{"type":19,"tag":115,"props":131,"children":132},{"__ignoreMap":7},[133],{"type":25,"value":128},{"type":19,"tag":100,"props":135,"children":137},{"id":136},"_3-subscriber-database-provisioning",[138],{"type":25,"value":139},"3. Subscriber Database Provisioning",{"type":19,"tag":107,"props":141,"children":144},{"className":142,"code":143,"language":112,"meta":7},[110],"# Access the web administration portal (pre-installed on port 3000)\nopen-browser http:\u002F\u002F127.0.0.1:3000\n# Default Credentials: admin \u002F 1423\n",[145],{"type":19,"tag":115,"props":146,"children":147},{"__ignoreMap":7},[148],{"type":25,"value":143},{"type":19,"tag":42,"props":150,"children":152},{"id":151},"practice-in-telcosec-cloud-academy",[153],{"type":25,"value":154},"Practice in TelcoSec Cloud Academy",{"type":19,"tag":28,"props":156,"children":157},{},[158,160],{"type":25,"value":159},"To practice compromising, intercepting, and hardening 5G Core network functions in isolated cloud virtual machines with real simulated UEs and gNodeBs:\n👉 ",{"type":19,"tag":34,"props":161,"children":162},{},[163],{"type":19,"tag":164,"props":165,"children":168},"a",{"href":14,"rel":166},[167],"nofollow",[169],{"type":25,"value":170},"Access the 5G Core Red Team Lab at App.TelcoSec.Net",{"title":7,"searchDepth":172,"depth":172,"links":173},2,[174,175,181],{"id":44,"depth":172,"text":47},{"id":95,"depth":172,"text":98,"children":176},[177,179,180],{"id":102,"depth":178,"text":105},3,{"id":121,"depth":178,"text":124},{"id":136,"depth":178,"text":139},{"id":151,"depth":172,"text":154},"markdown","content:tools:open5gs.md","content","tools\u002Fopen5gs.md","tools\u002Fopen5gs","md",{"_path":4,"_dir":5,"_draft":6,"_partial":6,"_locale":7,"title":8,"description":9,"name":8,"protocol":10,"category":11,"hardware":12,"command":13,"academyLab":14,"body":189,"_type":182,"_id":183,"_source":184,"_file":185,"_stem":186,"_extension":187},{"type":16,"children":190,"toc":299},[191,195,204,208,243,247,251,259,263,271,275,283,287],{"type":19,"tag":20,"props":192,"children":193},{"id":22},[194],{"type":25,"value":26},{"type":19,"tag":28,"props":196,"children":197},{},[198,199,203],{"type":25,"value":32},{"type":19,"tag":34,"props":200,"children":201},{},[202],{"type":25,"value":38},{"type":25,"value":40},{"type":19,"tag":42,"props":205,"children":206},{"id":44},[207],{"type":25,"value":47},{"type":19,"tag":49,"props":209,"children":210},{},[211,219,227,235],{"type":19,"tag":53,"props":212,"children":213},{},[214,218],{"type":19,"tag":34,"props":215,"children":216},{},[217],{"type":25,"value":60},{"type":25,"value":62},{"type":19,"tag":53,"props":220,"children":221},{},[222,226],{"type":19,"tag":34,"props":223,"children":224},{},[225],{"type":25,"value":70},{"type":25,"value":72},{"type":19,"tag":53,"props":228,"children":229},{},[230,234],{"type":19,"tag":34,"props":231,"children":232},{},[233],{"type":25,"value":80},{"type":25,"value":82},{"type":19,"tag":53,"props":236,"children":237},{},[238,242],{"type":19,"tag":34,"props":239,"children":240},{},[241],{"type":25,"value":90},{"type":25,"value":92},{"type":19,"tag":42,"props":244,"children":245},{"id":95},[246],{"type":25,"value":98},{"type":19,"tag":100,"props":248,"children":249},{"id":102},[250],{"type":25,"value":105},{"type":19,"tag":107,"props":252,"children":254},{"className":253,"code":111,"language":112,"meta":7},[110],[255],{"type":19,"tag":115,"props":256,"children":257},{"__ignoreMap":7},[258],{"type":25,"value":111},{"type":19,"tag":100,"props":260,"children":261},{"id":121},[262],{"type":25,"value":124},{"type":19,"tag":107,"props":264,"children":266},{"className":265,"code":128,"language":112,"meta":7},[110],[267],{"type":19,"tag":115,"props":268,"children":269},{"__ignoreMap":7},[270],{"type":25,"value":128},{"type":19,"tag":100,"props":272,"children":273},{"id":136},[274],{"type":25,"value":139},{"type":19,"tag":107,"props":276,"children":278},{"className":277,"code":143,"language":112,"meta":7},[110],[279],{"type":19,"tag":115,"props":280,"children":281},{"__ignoreMap":7},[282],{"type":25,"value":143},{"type":19,"tag":42,"props":284,"children":285},{"id":151},[286],{"type":25,"value":154},{"type":19,"tag":28,"props":288,"children":289},{},[290,291],{"type":25,"value":159},{"type":19,"tag":34,"props":292,"children":293},{},[294],{"type":19,"tag":164,"props":295,"children":297},{"href":14,"rel":296},[167],[298],{"type":25,"value":170},{"title":7,"searchDepth":172,"depth":172,"links":300},[301,302,307],{"id":44,"depth":172,"text":47},{"id":95,"depth":172,"text":98,"children":303},[304,305,306],{"id":102,"depth":178,"text":105},{"id":121,"depth":178,"text":124},{"id":136,"depth":178,"text":139},{"id":151,"depth":172,"text":154},1790363497546]