[{"data":1,"prerenderedAt":195},["ShallowReactive",2],{"tool-doc-osmocom-suite":3},{"_path":4,"_dir":5,"_draft":6,"_partial":6,"_locale":7,"title":8,"description":9,"name":8,"protocol":10,"category":11,"hardware":12,"command":13,"academyLab":14,"body":15,"_type":189,"_id":190,"_source":191,"_file":192,"_stem":193,"_extension":194},"\u002Ftools\u002Fosmocom-suite","tools",false,"","Osmocom Suite","Complete open-source 2G\u002F3G cellular infrastructure stack including BTS, BSC, MSC, HLR, SGSN, and STP for GSM network security auditing and IMSI catcher research.","2G GSM \u002F 3G UMTS","GSM Infrastructure","USRP B210 \u002F LimeSDR \u002F Osmocom SIMtrace 2","osmo-nitb -c \u002Fetc\u002Fosmocom\u002Fopenbsc.cfg","https:\u002F\u002Fapp.telcosec.net",{"type":16,"children":17,"toc":178},"root",[18,27,48,55,100,106,113,126,132,141,147,156,162],{"type":19,"tag":20,"props":21,"children":23},"element","h1",{"id":22},"osmocom-suite-gsmumts-infrastructure-security-stack",[24],{"type":25,"value":26},"text","Osmocom Suite — GSM\u002FUMTS Infrastructure Security Stack",{"type":19,"tag":28,"props":29,"children":30},"p",{},[31,33,39,41,46],{"type":25,"value":32},"The ",{"type":19,"tag":34,"props":35,"children":36},"strong",{},[37],{"type":25,"value":38},"Osmocom",{"type":25,"value":40}," (Open Source Mobile Communications) project provides a complete, production-grade implementation of 2G GSM and 3G UMTS cellular network infrastructure. Within ",{"type":19,"tag":34,"props":42,"children":43},{},[44],{"type":25,"value":45},"TelcoChisel",{"type":25,"value":47},", the full Osmocom suite (OsmoBTS, OsmoBSC, OsmoMSC, OsmoHLR, OsmoSGSN, OsmoSTP) is pre-installed and configured for security research including rogue BTS deployment, A5\u002F1 cipher downgrade testing, and SS7\u002FSIGTRAN stack auditing.",{"type":19,"tag":49,"props":50,"children":52},"h2",{"id":51},"key-capabilities-security-vectors",[53],{"type":25,"value":54},"Key Capabilities & Security Vectors",{"type":19,"tag":56,"props":57,"children":58},"ul",{},[59,70,80,90],{"type":19,"tag":60,"props":61,"children":62},"li",{},[63,68],{"type":19,"tag":34,"props":64,"children":65},{},[66],{"type":25,"value":67},"Rogue BTS Deployment",{"type":25,"value":69},": Deploy a complete 2G base station using OsmoBTS + OsmoTRX to test UE camping, IMSI collection, and voice interception.",{"type":19,"tag":60,"props":71,"children":72},{},[73,78],{"type":19,"tag":34,"props":74,"children":75},{},[76],{"type":25,"value":77},"A5 Cipher Downgrade Attacks",{"type":25,"value":79},": Force cipher mode negotiation to A5\u002F0 (no encryption) or A5\u002F1 (known-broken) to intercept GSM voice and SMS traffic.",{"type":19,"tag":60,"props":81,"children":82},{},[83,88],{"type":19,"tag":34,"props":84,"children":85},{},[86],{"type":25,"value":87},"HLR\u002FVLR Subscriber Manipulation",{"type":25,"value":89},": Inject, modify, and delete subscriber records in OsmoHLR to test authentication triplet handling and subscriber identity spoofing.",{"type":19,"tag":60,"props":91,"children":92},{},[93,98],{"type":19,"tag":34,"props":94,"children":95},{},[96],{"type":25,"value":97},"SIGTRAN\u002FSS7 Stack Testing",{"type":25,"value":99},": Use OsmoSTP (Signaling Transfer Point) for M2UA\u002FM3UA\u002FSCCP protocol security analysis.",{"type":19,"tag":49,"props":101,"children":103},{"id":102},"telcochisel-execution-cheatsheet",[104],{"type":25,"value":105},"TelcoChisel Execution Cheatsheet",{"type":19,"tag":107,"props":108,"children":110},"h3",{"id":109},"_1-launch-minimal-gsm-network",[111],{"type":25,"value":112},"1. Launch Minimal GSM Network",{"type":19,"tag":114,"props":115,"children":120},"pre",{"className":116,"code":118,"language":119,"meta":7},[117],"language-bash","# Start the complete GSM core (HLR → MSC → BSC → BTS chain)\nsudo systemctl start osmo-hlr osmo-msc osmo-bsc osmo-bts-trx osmo-trx-uhd\n","bash",[121],{"type":19,"tag":122,"props":123,"children":124},"code",{"__ignoreMap":7},[125],{"type":25,"value":118},{"type":19,"tag":107,"props":127,"children":129},{"id":128},"_2-provision-test-sim-subscriber",[130],{"type":25,"value":131},"2. Provision Test SIM Subscriber",{"type":19,"tag":114,"props":133,"children":136},{"className":134,"code":135,"language":119,"meta":7},[117],"# Add subscriber via OsmoHLR VTY interface\ntelnet 127.0.0.1 4258\n# > enable\n# > subscriber imsi 001010000000001 create\n# > subscriber imsi 001010000000001 update msisdn 555000001\n",[137],{"type":19,"tag":122,"props":138,"children":139},{"__ignoreMap":7},[140],{"type":25,"value":135},{"type":19,"tag":107,"props":142,"children":144},{"id":143},"_3-monitor-gsm-air-interface",[145],{"type":25,"value":146},"3. Monitor GSM Air Interface",{"type":19,"tag":114,"props":148,"children":151},{"className":149,"code":150,"language":119,"meta":7},[117],"# Capture Um interface signaling with Gr-GSM\ngrgsm_livemon -f 935.2e6 | wireshark -k -i -\n",[152],{"type":19,"tag":122,"props":153,"children":154},{"__ignoreMap":7},[155],{"type":25,"value":150},{"type":19,"tag":49,"props":157,"children":159},{"id":158},"practice-in-telcosec-academy",[160],{"type":25,"value":161},"Practice in TelcoSec Academy",{"type":19,"tag":28,"props":163,"children":164},{},[165,167],{"type":25,"value":166},"👉 ",{"type":19,"tag":34,"props":168,"children":169},{},[170],{"type":19,"tag":171,"props":172,"children":175},"a",{"href":14,"rel":173},[174],"nofollow",[176],{"type":25,"value":177},"Launch GSM Infrastructure Lab on App.TelcoSec.Net",{"title":7,"searchDepth":179,"depth":179,"links":180},2,[181,182,188],{"id":51,"depth":179,"text":54},{"id":102,"depth":179,"text":105,"children":183},[184,186,187],{"id":109,"depth":185,"text":112},3,{"id":128,"depth":185,"text":131},{"id":143,"depth":185,"text":146},{"id":158,"depth":179,"text":161},"markdown","content:tools:osmocom-suite.md","content","tools\u002Fosmocom-suite.md","tools\u002Fosmocom-suite","md",1792170262770]