sdr-beam — SDR Beamforming & MIMO Security Toolkit

sdr-beam is a software-defined beamforming framework for multi-channel SDR hardware. Within TelcoChisel, it enables security researchers to test beamforming interception techniques, MIMO spatial multiplexing vulnerabilities, and directional signal injection using phased array configurations on USRP X310/N310 hardware.

Key Capabilities & Security Vectors

• Beam Sweeping Interception: Capture and decode 5G NR SSB beam sweep patterns to determine gNodeB beam directions and predict UE-specific beamforming.
• MIMO Spatial Analysis: Analyze multi-layer spatial multiplexing to test eavesdropping feasibility on MIMO-encrypted channels.
• Directional Signal Injection: Focus RF energy on specific UE targets for precision jamming and rogue cell redirection attacks.
• Antenna Array Calibration: Calibrate phased array SDR setups for coherent reception across 4×4 and 8×8 MIMO configurations.

TelcoChisel Execution Cheatsheet

1. Initialize 4×4 MIMO Configuration

# Start beam scanning with 4-channel USRP X310
sdr-beam --config /etc/sdr-beam/4x4-mimo.yaml --mode scan

2. Capture SSB Beam Sweep

# Lock to 5G NR SSB and record beam sweep pattern
sdr-beam --freq 3600e6 --bw 100e6 --mode ssb-sweep --output /tmp/beams.json

3. Generate Beam Pattern Visualization

# Plot antenna radiation pattern from captured data
sdr-beam --mode visualize --input /tmp/beams.json --output /tmp/beam-pattern.png

Practice in TelcoSec Academy

👉 Launch MIMO Beamforming Lab on App.TelcoSec.Net