[{"data":1,"prerenderedAt":330},["ShallowReactive",2],{"tool-doc-ueransim":3,"content-query-odYGHxM5Ro":200},{"_path":4,"_dir":5,"_draft":6,"_partial":6,"_locale":7,"title":8,"description":9,"name":8,"protocol":10,"category":11,"hardware":12,"command":13,"academyLab":14,"body":15,"_type":194,"_id":195,"_source":196,"_file":197,"_stem":198,"_extension":199},"\u002Ftools\u002Fueransim","tools",false,"","UERANSIM","State-of-the-art open source 5G NR User Equipment (UE) and gNodeB (gNB) simulator for testing 5G Standalone SA Core networks.","5G NR","Radio Access Network & UE Emulation","USRP B210 \u002F LimeSDR \u002F Pure Software Emulation","nr-gnb -c \u002Fetc\u002Fueransim\u002Fgnb.yaml","https:\u002F\u002Fapp.telcosec.net",{"type":16,"children":17,"toc":183},"root",[18,27,45,52,106,112,119,131,137,146,152,161,167],{"type":19,"tag":20,"props":21,"children":23},"element","h1",{"id":22},"ueransim-5g-nr-ue-gnodeb-emulator",[24],{"type":25,"value":26},"text","UERANSIM — 5G NR UE & gNodeB Emulator",{"type":19,"tag":28,"props":29,"children":30},"p",{},[31,36,38,43],{"type":19,"tag":32,"props":33,"children":34},"strong",{},[35],{"type":25,"value":8},{"type":25,"value":37}," is a high-performance open-source 5G SA Radio Access Network (RAN) and User Equipment (UE) simulator. In ",{"type":19,"tag":32,"props":39,"children":40},{},[41],{"type":25,"value":42},"TelcoChisel",{"type":25,"value":44},", UERANSIM allows security researchers to simulate hundreds of rogue 5G UEs and fake gNodeBs without requiring physical RF hardware.",{"type":19,"tag":46,"props":47,"children":49},"h2",{"id":48},"key-security-audit-capabilities",[50],{"type":25,"value":51},"Key Security Audit Capabilities",{"type":19,"tag":53,"props":54,"children":55},"ul",{},[56,67,77,96],{"type":19,"tag":57,"props":58,"children":59},"li",{},[60,65],{"type":19,"tag":32,"props":61,"children":62},{},[63],{"type":25,"value":64},"Simulated 5G UE Registration & NAS Security",{"type":25,"value":66},": Test 5G-GUTI allocation, AKA authentication, and NAS-5GS security mode command enforcement.",{"type":19,"tag":57,"props":68,"children":69},{},[70,75],{"type":19,"tag":32,"props":71,"children":72},{},[73],{"type":25,"value":74},"Rogue gNodeB Injection",{"type":25,"value":76},": Establish unauthorized SCTP associations to test AMF admission control and NGAP malformed message handling.",{"type":19,"tag":57,"props":78,"children":79},{},[80,85,87,94],{"type":19,"tag":32,"props":81,"children":82},{},[83],{"type":25,"value":84},"5G PDU Session Establishment & Traffic Hijacking",{"type":25,"value":86},": Create ",{"type":19,"tag":88,"props":89,"children":91},"code",{"className":90},[],[92],{"type":25,"value":93},"uesimtun0",{"type":25,"value":95}," virtual network interfaces to send arbitrary TCP\u002FUDP packets through 5G UPF data plane tunnels.",{"type":19,"tag":57,"props":97,"children":98},{},[99,104],{"type":19,"tag":32,"props":100,"children":101},{},[102],{"type":25,"value":103},"Multi-UE Denial-of-Service Fuzzing",{"type":25,"value":105},": Spin up concurrent simulated UEs to stress-test 5G Core registration throttling and resource exhaustion.",{"type":19,"tag":46,"props":107,"children":109},{"id":108},"telcochisel-cheatsheet",[110],{"type":25,"value":111},"TelcoChisel Cheatsheet",{"type":19,"tag":113,"props":114,"children":116},"h3",{"id":115},"_1-start-simulated-5g-gnodeb",[117],{"type":25,"value":118},"1. Start Simulated 5G gNodeB",{"type":19,"tag":120,"props":121,"children":126},"pre",{"className":122,"code":124,"language":125,"meta":7},[123],"language-bash","# Start gNodeB connecting to local AMF at 127.0.0.1\nsudo nr-gnb -c \u002Fetc\u002Fueransim\u002Fopen5gs-gnb.yaml\n","bash",[127],{"type":19,"tag":88,"props":128,"children":129},{"__ignoreMap":7},[130],{"type":25,"value":124},{"type":19,"tag":113,"props":132,"children":134},{"id":133},"_2-connect-simulated-5g-ue",[135],{"type":25,"value":136},"2. Connect Simulated 5G UE",{"type":19,"tag":120,"props":138,"children":141},{"className":139,"code":140,"language":125,"meta":7},[123],"# Launch UE with pre-configured SUPI, Key, and OPc\nsudo nr-ue -c \u002Fetc\u002Fueransim\u002Fopen5gs-ue.yaml\n",[142],{"type":19,"tag":88,"props":143,"children":144},{"__ignoreMap":7},[145],{"type":25,"value":140},{"type":19,"tag":113,"props":147,"children":149},{"id":148},"_3-verify-5g-tunnel-data-plane-pdu-session",[150],{"type":25,"value":151},"3. Verify 5G Tunnel Data Plane (PDU Session)",{"type":19,"tag":120,"props":153,"children":156},{"className":154,"code":155,"language":125,"meta":7},[123],"# Ping external target via the simulated 5G tun interface\nping -I uesimtun0 8.8.8.8\n",[157],{"type":19,"tag":88,"props":158,"children":159},{"__ignoreMap":7},[160],{"type":25,"value":155},{"type":19,"tag":46,"props":162,"children":164},{"id":163},"practice-in-telcosec-academy",[165],{"type":25,"value":166},"Practice in TelcoSec Academy",{"type":19,"tag":28,"props":168,"children":169},{},[170,172],{"type":25,"value":171},"👉 ",{"type":19,"tag":32,"props":173,"children":174},{},[175],{"type":19,"tag":176,"props":177,"children":180},"a",{"href":14,"rel":178},[179],"nofollow",[181],{"type":25,"value":182},"Access 5G UE & RAN Emulation Labs at App.TelcoSec.Net",{"title":7,"searchDepth":184,"depth":184,"links":185},2,[186,187,193],{"id":48,"depth":184,"text":51},{"id":108,"depth":184,"text":111,"children":188},[189,191,192],{"id":115,"depth":190,"text":118},3,{"id":133,"depth":190,"text":136},{"id":148,"depth":190,"text":151},{"id":163,"depth":184,"text":166},"markdown","content:tools:ueransim.md","content","tools\u002Fueransim.md","tools\u002Fueransim","md",{"_path":4,"_dir":5,"_draft":6,"_partial":6,"_locale":7,"title":8,"description":9,"name":8,"protocol":10,"category":11,"hardware":12,"command":13,"academyLab":14,"body":201,"_type":194,"_id":195,"_source":196,"_file":197,"_stem":198,"_extension":199},{"type":16,"children":202,"toc":321},[203,207,220,224,265,269,273,281,285,293,297,305,309],{"type":19,"tag":20,"props":204,"children":205},{"id":22},[206],{"type":25,"value":26},{"type":19,"tag":28,"props":208,"children":209},{},[210,214,215,219],{"type":19,"tag":32,"props":211,"children":212},{},[213],{"type":25,"value":8},{"type":25,"value":37},{"type":19,"tag":32,"props":216,"children":217},{},[218],{"type":25,"value":42},{"type":25,"value":44},{"type":19,"tag":46,"props":221,"children":222},{"id":48},[223],{"type":25,"value":51},{"type":19,"tag":53,"props":225,"children":226},{},[227,235,243,257],{"type":19,"tag":57,"props":228,"children":229},{},[230,234],{"type":19,"tag":32,"props":231,"children":232},{},[233],{"type":25,"value":64},{"type":25,"value":66},{"type":19,"tag":57,"props":236,"children":237},{},[238,242],{"type":19,"tag":32,"props":239,"children":240},{},[241],{"type":25,"value":74},{"type":25,"value":76},{"type":19,"tag":57,"props":244,"children":245},{},[246,250,251,256],{"type":19,"tag":32,"props":247,"children":248},{},[249],{"type":25,"value":84},{"type":25,"value":86},{"type":19,"tag":88,"props":252,"children":254},{"className":253},[],[255],{"type":25,"value":93},{"type":25,"value":95},{"type":19,"tag":57,"props":258,"children":259},{},[260,264],{"type":19,"tag":32,"props":261,"children":262},{},[263],{"type":25,"value":103},{"type":25,"value":105},{"type":19,"tag":46,"props":266,"children":267},{"id":108},[268],{"type":25,"value":111},{"type":19,"tag":113,"props":270,"children":271},{"id":115},[272],{"type":25,"value":118},{"type":19,"tag":120,"props":274,"children":276},{"className":275,"code":124,"language":125,"meta":7},[123],[277],{"type":19,"tag":88,"props":278,"children":279},{"__ignoreMap":7},[280],{"type":25,"value":124},{"type":19,"tag":113,"props":282,"children":283},{"id":133},[284],{"type":25,"value":136},{"type":19,"tag":120,"props":286,"children":288},{"className":287,"code":140,"language":125,"meta":7},[123],[289],{"type":19,"tag":88,"props":290,"children":291},{"__ignoreMap":7},[292],{"type":25,"value":140},{"type":19,"tag":113,"props":294,"children":295},{"id":148},[296],{"type":25,"value":151},{"type":19,"tag":120,"props":298,"children":300},{"className":299,"code":155,"language":125,"meta":7},[123],[301],{"type":19,"tag":88,"props":302,"children":303},{"__ignoreMap":7},[304],{"type":25,"value":155},{"type":19,"tag":46,"props":306,"children":307},{"id":163},[308],{"type":25,"value":166},{"type":19,"tag":28,"props":310,"children":311},{},[312,313],{"type":25,"value":171},{"type":19,"tag":32,"props":314,"children":315},{},[316],{"type":19,"tag":176,"props":317,"children":319},{"href":14,"rel":318},[179],[320],{"type":25,"value":182},{"title":7,"searchDepth":184,"depth":184,"links":322},[323,324,329],{"id":48,"depth":184,"text":51},{"id":108,"depth":184,"text":111,"children":325},[326,327,328],{"id":115,"depth":190,"text":118},{"id":133,"depth":190,"text":136},{"id":148,"depth":190,"text":151},{"id":163,"depth":184,"text":166},1790363497930]