
Explore GSM and LTE concepts with SDR by building virtual GSM and LTE networks, setting up Lime XDR, programming SIM cards, and capturing GSM and LTE network packets.
Build your base in software defined radio by exploring SDR devices and how to use them to identify vulnerabilities in wireless devices.
Understand the core concept of gsm and lte networks without naming them, and build a virtual gsm network. Prepare blank sim cards, a reader and writer, and a lime device.
Explore Dragon OS as a precompiled sdr toolkit, avoiding manual installation on Ubuntu or calendar x. Download the 3.8 gb iso and run it in VMware or VirtualBox.
Learn to set up dragon os in a virtual machine, install from the iso on ubuntu linux, configure memory and disk, and enable sdr dongle workflows.
Compare LimeSDR with other SDRs across frequency range, bandwidth, sample rate, duplex mode, transmit channels, interfaces, and open-source status. Examine oscillator position and transmit power to understand performance differences.
Explore LimeSDR-USB RF ports and antenna connections across ten ports, including channel one and two, low and high frequency paths, wideband options, and transmit channels, with guidance for practical setup.
Connect LimeSDR-USB with U.FL connectors by attaching each connector to the board, ensuring a firm fit for the output path.
Learn to build a complete GSM network with a script that makes calls and sends SMS, then configure devices and SIM cards for automatic access.
Explore the gsm network architecture by detailing how phones connect through beta (bts) to a base station controller and transceiver station, with media as hotspot and frequency banks guiding transmission.
Create a virtual base transceiver station with OsmoBTS, showing how a base station controller (BSP) configures betas, manages radio tasks, and connects to the GSM network via MSE and MSP.
Configure BSD for a BSC network by setting country and mobile network codes, 1800 frequency band, signaling time slots, then start Osmo service to connect a phone to GSM.
Explore GSM network architecture and the roles of the mobile switching center (MSE), media gateway (MTW), home location register (SLA), and signaling transfer point (SDP) in subscriber mobility and connectivity.
Learn to build a private GSM network by storing subscriber details in OsmoHLR, retrieving MSA numbers, and provisioning two subscribers to enable calls and SMS.
Learn to capture GSM traffic with Wireshark and analyze the packets. Identify text messages and calls, apply GSM filters including GCP for subscriber details, and inspect numbers and messages.
Learn to use a sim reader writer tool that supports reading and writing, including blank sim cards for gsm and lte in three sizes, and connect to sim programming software.
Demonstrate reading and writing SIM cards, configuring 15-digit MSA numbers, the carrier and ISDN numbers, and applying the com-128-3 encryption algorithm for GSM and LTE programming.
Add a new subscriber to the HLR by configuring the IMSI, ISDN number, and authentication 2G with the 128 version three encryption, then verify GSM network connectivity.
Insert the SIM cards and start the GSM network, enabling automatic connections and testing calls and messages between two phones.
The lecture compares GSM and LTE networks, noting that LTE delivers high-speed 4G data while GSM runs on 2G/3G, and introduces the free SRS LTE suite for SIM-based internet access.
Install and compile the srsLTE toolchain on Ubuntu, including Soapy SDR, Lime Suite, SRS GWI, and SRS LP, then configure ipc and enp files and add Wireshark for network analysis.
Analyze captured LTE packets with Wireshark to inspect non-secure http traffic, view get and post data, and understand how network operators can see form submissions, highlighting the need for https.
This fourth installment of the SDR for Ethical Hackers and Security Researchers series focuses on the architecture and operation of GSM and LTE networks within controlled laboratory environments. This course is designed for students, researchers, and cybersecurity professionals who want to understand how cellular networks function at a technical level and how SDR platforms can be used for educational telecom experimentation.
In this course, you will explore the core components of GSM and LTE networks, including BTS, BSC, MSC, HLR, EPC elements, and packet flow structure. Using SDR hardware such as LimeSDR (optional but recommended), you will learn how to set up a private, isolated cellular lab network for research and learning purposes only. A virtual setup option is also available for those without SDR hardware.
You will study SIM provisioning concepts within your own test environment and understand how authentication and identity management work inside cellular systems. Practical labs include controlled call routing within the private lab network, SMS testing between test devices, and packet analysis using tools such as Wireshark to better understand signaling and traffic flow.
All demonstrations are conducted strictly within isolated lab environments and are intended for educational, research, and defensive security purposes only. This course does not teach interception of public cellular networks or unauthorized access to telecom infrastructure. Students are expected to comply with all local telecom regulations and laws.
By the end of this course, you will have a strong technical understanding of GSM and LTE architecture and practical experience building and analyzing private cellular research environments.
Disclaimer:
Important: All exercises and demonstrations in this course are conducted in private lab environments for educational and research purposes only. Students must not attempt to intercept, interfere with, or connect to public GSM or LTE networks. Unauthorized use of cellular networks or SIM cards is illegal and strictly prohibited. This course is intended solely for learning, experimentation, and defensive security practice.