[{"data":1,"prerenderedAt":317},["ShallowReactive",2],{"tool-doc-openairinterface":3,"content-query-eSqrUdXA49":193},{"_path":4,"_dir":5,"_draft":6,"_partial":6,"_locale":7,"title":8,"description":9,"name":10,"protocol":11,"category":12,"hardware":13,"command":14,"academyLab":15,"body":16,"_type":187,"_id":188,"_source":189,"_file":190,"_stem":191,"_extension":192},"\u002Ftools\u002Fopenairinterface","tools",false,"","OpenAirInterface","Full 3GPP-compliant 5G NR and 4G LTE software radio stack implementing gNodeB, eNodeB, nrUE, and core network functions for RF security research.","OpenAirInterface (OAI)","5G NR \u002F 4G LTE","SDR Base Station & Core","USRP B210 \u002F X310 \u002F BladeRF","sudo .\u002Fnr-softmodem -O \u002Fopt\u002Foai\u002Ftargets\u002FPROJECTS\u002FGENERIC-NR-LTE\u002FCONF\u002Fgnb.sa.band78.conf","https:\u002F\u002Fapp.telcosec.net",{"type":17,"children":18,"toc":176},"root",[19,28,46,53,98,104,111,124,130,139,145,154,160],{"type":20,"tag":21,"props":22,"children":24},"element","h1",{"id":23},"openairinterface-5glte-software-radio-security-stack",[25],{"type":26,"value":27},"text","OpenAirInterface — 5G\u002FLTE Software Radio Security Stack",{"type":20,"tag":29,"props":30,"children":31},"p",{},[32,37,39,44],{"type":20,"tag":33,"props":34,"children":35},"strong",{},[36],{"type":26,"value":10},{"type":26,"value":38}," is a 3GPP-compliant open-source software radio platform implementing the full 5G NR and 4G LTE protocol stack. Within ",{"type":20,"tag":33,"props":40,"children":41},{},[42],{"type":26,"value":43},"TelcoChisel",{"type":26,"value":45},", OAI provides real over-the-air gNodeB\u002FeNodeB transmission capability for testing rogue base station scenarios, RRC protocol fuzzing, and NAS authentication bypass attacks using SDR hardware.",{"type":20,"tag":47,"props":48,"children":50},"h2",{"id":49},"key-capabilities-security-vectors",[51],{"type":26,"value":52},"Key Capabilities & Security Vectors",{"type":20,"tag":54,"props":55,"children":56},"ul",{},[57,68,78,88],{"type":20,"tag":58,"props":59,"children":60},"li",{},[61,66],{"type":20,"tag":33,"props":62,"children":63},{},[64],{"type":26,"value":65},"Rogue gNodeB \u002F eNodeB Deployment",{"type":26,"value":67},": Stand up unauthorized base stations on target frequency bands to test UE camping and redirection attacks.",{"type":20,"tag":58,"props":69,"children":70},{},[71,76],{"type":20,"tag":33,"props":72,"children":73},{},[74],{"type":26,"value":75},"RRC Protocol Fuzzing",{"type":26,"value":77},": Inject malformed RRC Setup, Reconfiguration, and Security Mode Command messages to crash or exploit UE stacks.",{"type":20,"tag":58,"props":79,"children":80},{},[81,86],{"type":20,"tag":33,"props":82,"children":83},{},[84],{"type":26,"value":85},"NAS Authentication Testing",{"type":26,"value":87},": Test AKA (Authentication and Key Agreement) implementation flaws including SUPI\u002FIMSI exposure via null cipher attacks.",{"type":20,"tag":58,"props":89,"children":90},{},[91,96],{"type":20,"tag":33,"props":92,"children":93},{},[94],{"type":26,"value":95},"Downlink NAS Replay",{"type":26,"value":97},": Capture and replay NAS signaling to test anti-replay counter implementations in commercial UEs.",{"type":20,"tag":47,"props":99,"children":101},{"id":100},"telcochisel-execution-cheatsheet",[102],{"type":26,"value":103},"TelcoChisel Execution Cheatsheet",{"type":20,"tag":105,"props":106,"children":108},"h3",{"id":107},"_1-launch-5g-sa-gnodeb",[109],{"type":26,"value":110},"1. Launch 5G SA gNodeB",{"type":20,"tag":112,"props":113,"children":118},"pre",{"className":114,"code":116,"language":117,"meta":7},[115],"language-bash","# Start 5G NR Standalone gNodeB with USRP B210\ncd \u002Fopt\u002Foai\u002Fcmake_targets\u002Fran_build\u002Fbuild\nsudo .\u002Fnr-softmodem -O \u002Fopt\u002Foai\u002Ftargets\u002FPROJECTS\u002FGENERIC-NR-LTE\u002FCONF\u002Fgnb.sa.band78.conf --sa\n","bash",[119],{"type":20,"tag":120,"props":121,"children":122},"code",{"__ignoreMap":7},[123],{"type":26,"value":116},{"type":20,"tag":105,"props":125,"children":127},{"id":126},"_2-launch-5g-nr-ue-emulator",[128],{"type":26,"value":129},"2. Launch 5G NR UE Emulator",{"type":20,"tag":112,"props":131,"children":134},{"className":132,"code":133,"language":117,"meta":7},[115],"# Start NR UE softmodem for controlled testing\nsudo .\u002Fnr-uesoftmodem -O \u002Fopt\u002Foai\u002Ftargets\u002FPROJECTS\u002FGENERIC-NR-LTE\u002FCONF\u002Fue.conf --sa --nokrnmod\n",[135],{"type":20,"tag":120,"props":136,"children":137},{"__ignoreMap":7},[138],{"type":26,"value":133},{"type":20,"tag":105,"props":140,"children":142},{"id":141},"_3-capture-over-the-air-nr-signaling",[143],{"type":26,"value":144},"3. Capture Over-the-Air NR Signaling",{"type":20,"tag":112,"props":146,"children":149},{"className":147,"code":148,"language":117,"meta":7},[115],"# Live capture NR-ARFCN signaling via T tracer\nsudo tshark -i oaitun_ue1 -Y \"ngap || nas-5gs\" -T fields -e frame.time -e nas_5gs.mm.message_type\n",[150],{"type":20,"tag":120,"props":151,"children":152},{"__ignoreMap":7},[153],{"type":26,"value":148},{"type":20,"tag":47,"props":155,"children":157},{"id":156},"practice-in-telcosec-academy",[158],{"type":26,"value":159},"Practice in TelcoSec Academy",{"type":20,"tag":29,"props":161,"children":162},{},[163,165],{"type":26,"value":164},"👉 ",{"type":20,"tag":33,"props":166,"children":167},{},[168],{"type":20,"tag":169,"props":170,"children":173},"a",{"href":15,"rel":171},[172],"nofollow",[174],{"type":26,"value":175},"Launch RF Base Station Lab on App.TelcoSec.Net",{"title":7,"searchDepth":177,"depth":177,"links":178},2,[179,180,186],{"id":49,"depth":177,"text":52},{"id":100,"depth":177,"text":103,"children":181},[182,184,185],{"id":107,"depth":183,"text":110},3,{"id":126,"depth":183,"text":129},{"id":141,"depth":183,"text":144},{"id":156,"depth":177,"text":159},"markdown","content:tools:openairinterface.md","content","tools\u002Fopenairinterface.md","tools\u002Fopenairinterface","md",{"_path":4,"_dir":5,"_draft":6,"_partial":6,"_locale":7,"title":8,"description":9,"name":10,"protocol":11,"category":12,"hardware":13,"command":14,"academyLab":15,"body":194,"_type":187,"_id":188,"_source":189,"_file":190,"_stem":191,"_extension":192},{"type":17,"children":195,"toc":308},[196,200,213,217,252,256,260,268,272,280,284,292,296],{"type":20,"tag":21,"props":197,"children":198},{"id":23},[199],{"type":26,"value":27},{"type":20,"tag":29,"props":201,"children":202},{},[203,207,208,212],{"type":20,"tag":33,"props":204,"children":205},{},[206],{"type":26,"value":10},{"type":26,"value":38},{"type":20,"tag":33,"props":209,"children":210},{},[211],{"type":26,"value":43},{"type":26,"value":45},{"type":20,"tag":47,"props":214,"children":215},{"id":49},[216],{"type":26,"value":52},{"type":20,"tag":54,"props":218,"children":219},{},[220,228,236,244],{"type":20,"tag":58,"props":221,"children":222},{},[223,227],{"type":20,"tag":33,"props":224,"children":225},{},[226],{"type":26,"value":65},{"type":26,"value":67},{"type":20,"tag":58,"props":229,"children":230},{},[231,235],{"type":20,"tag":33,"props":232,"children":233},{},[234],{"type":26,"value":75},{"type":26,"value":77},{"type":20,"tag":58,"props":237,"children":238},{},[239,243],{"type":20,"tag":33,"props":240,"children":241},{},[242],{"type":26,"value":85},{"type":26,"value":87},{"type":20,"tag":58,"props":245,"children":246},{},[247,251],{"type":20,"tag":33,"props":248,"children":249},{},[250],{"type":26,"value":95},{"type":26,"value":97},{"type":20,"tag":47,"props":253,"children":254},{"id":100},[255],{"type":26,"value":103},{"type":20,"tag":105,"props":257,"children":258},{"id":107},[259],{"type":26,"value":110},{"type":20,"tag":112,"props":261,"children":263},{"className":262,"code":116,"language":117,"meta":7},[115],[264],{"type":20,"tag":120,"props":265,"children":266},{"__ignoreMap":7},[267],{"type":26,"value":116},{"type":20,"tag":105,"props":269,"children":270},{"id":126},[271],{"type":26,"value":129},{"type":20,"tag":112,"props":273,"children":275},{"className":274,"code":133,"language":117,"meta":7},[115],[276],{"type":20,"tag":120,"props":277,"children":278},{"__ignoreMap":7},[279],{"type":26,"value":133},{"type":20,"tag":105,"props":281,"children":282},{"id":141},[283],{"type":26,"value":144},{"type":20,"tag":112,"props":285,"children":287},{"className":286,"code":148,"language":117,"meta":7},[115],[288],{"type":20,"tag":120,"props":289,"children":290},{"__ignoreMap":7},[291],{"type":26,"value":148},{"type":20,"tag":47,"props":293,"children":294},{"id":156},[295],{"type":26,"value":159},{"type":20,"tag":29,"props":297,"children":298},{},[299,300],{"type":26,"value":164},{"type":20,"tag":33,"props":301,"children":302},{},[303],{"type":20,"tag":169,"props":304,"children":306},{"href":15,"rel":305},[172],[307],{"type":26,"value":175},{"title":7,"searchDepth":177,"depth":177,"links":309},[310,311,316],{"id":49,"depth":177,"text":52},{"id":100,"depth":177,"text":103,"children":312},[313,314,315],{"id":107,"depth":183,"text":110},{"id":126,"depth":183,"text":129},{"id":141,"depth":183,"text":144},{"id":156,"depth":177,"text":159},1790363499962]