Mobile network security, from the handset to the core
We attack mobile networks the way a rogue phone or a fake base station would: 2G, 3G, 4G, 5G SA and NSA, OpenRAN and private 5G, from the air interface to the core.
What an attacker could do
We check it before they do, with the same equipment.
Fake base station
Stand up a rogue cell, get devices to attach, then intercept or downgrade them.
Reach the core
From the radio side or an internal foothold, reach core interfaces and management APIs.
Intercept and locate
Read signalling that identifies and tracks a subscriber.
OpenRAN trust
Cross the flat trust between radio and core in a disaggregated network.
What we test
- Handsets, modules and IoT devices on the network
- 2G / 3G / 4G / 5G SA and NSA radio
- The core network and its REST / signalling interfaces
- OpenRAN and private-5G deployments
- The protocol stacks themselves, from the baseband to core signalling: we hunt for the bugs an attacker could use to crash or take over a device or a network function
Trainings on this subject
All trainings
Three days assessing mobile devices and networks with software-defined radio. We demonstrate attacks in practice, mostly on user equipment but also on the core network, across phones, IoT modules, connected cars and infrastructure.
Three days on 5G NSA and SA security: assessing devices, the current and Next-Generation Core Network, and the attack surface OpenRAN brings. Private 5G on unlicensed bands puts campuses and companies on the air, and this course covers the new risks that come with it.
Three days on the weaknesses of operator core networks: the fundamentals, the interfaces and protocols, and what an attacker reaches from an internal pentest or from the outside during a Red Team. It also helps operators build their own measures by understanding the techniques.
Talk to us about your project
We scope the work in a first call, then send a fixed-price proposal: intrusion tests, vulnerability research, fuzzing, test benches, trainings. Offices near Paris, Monday to Friday, 9:00 to 19:00.