← Back to TelcoSec Arsenal
QCSuper
2G / 3G / 4G / 5G BasebandTool for capturing raw cellular network signaling (RRC, NAS, MAC) from Qualcomm baseband chipsets and streaming directly to Wireshark in real-time.
⚡ Quick Telecom Protocol Brief2G / 3G / 4G / 5G Baseband
QCSuper is an open-source Qualcomm Baseband Traffic Sniffer & PCAP Exporter component included in TelcoChisel for telecommunications security auditing. It targets 2G / 3G / 4G / 5G Baseband infrastructure for compliance with 3GPP and GSMA telecom security standards.
Primary Binary:
qcsuperHardware: Rooted Android Phone with Qualcomm SoC / USB ModemQCSuper — Qualcomm Baseband Signaling Sniffer
QCSuper communicates directly with Qualcomm DIAG diagnostic interfaces on rooted mobile devices or cellular USB dongles to capture raw baseband signaling messages before and after encryption layers.
Key Capabilities
- Real-Time Wireshark Live Streaming: Stream 2G/3G/4G/5G Radio Resource Control (RRC) and Non-Access Stratum (NAS) packets directly into Wireshark using GSMTAP encapsulation.
- Layer 3 Signaling Decode: Inspect SIB broadcasts, attach requests, paging messages, and measurement reports sent between the mobile station and carrier base station.
- IMSI Disclosure Detection: Track when carrier towers request identity responses containing unencrypted IMSI numbers over 2G/3G/4G.
Pre-installed TelcoChisel Cheatsheet
1. Launch Live Wireshark Capture via ADB
# Connect rooted Android phone over USB and launch live Wireshark feed
qcsuper --adb --wireshark-live
2. Save Signaling to PCAP for Offline Analysis
# Log raw DIAG frames to PCAP with GSMTAP headers
qcsuper --adb --pcap-dump /tmp/cellular_capture.pcap
Practice in TelcoSec Cloud Academy
To master baseband diagnostic analysis and cellular protocol inspection: 👉 Access the Cellular Baseband Lab at App.TelcoSec.Net
No community field notes posted yet. Be the first telecom engineer to leave feedback!