
Explore GSM and LTE concepts with SDR by building virtual GSM and LTE networks, setting up Lime XDR, programming SIM cards, and capturing GSM and LTE network packets.
Build your base in software defined radio by exploring SDR devices and how to use them to identify vulnerabilities in wireless devices.
Understand the core concept of gsm and lte networks without naming them, and build a virtual gsm network. Prepare blank sim cards, a reader and writer, and a lime device.
Explore Dragon OS as a precompiled sdr toolkit, avoiding manual installation on Ubuntu or calendar x. Download the 3.8 gb iso and run it in VMware or VirtualBox.
Learn to set up dragon os in a virtual machine, install from the iso on ubuntu linux, configure memory and disk, and enable sdr dongle workflows.
Explore the LimeSDR family, a low-cost open-source software-defined radio platform that supports UMTS, LTE, GSM, LoRa, Bluetooth, Zigbee, RFID, and digital broadcasting with full duplex and precise clock synchronization.
Compare LimeSDR with other SDRs across frequency range, bandwidth, sample rate, duplex mode, transmit channels, interfaces, and open-source status. Examine oscillator position and transmit power to understand performance differences.
Explore LimeSDR-USB RF ports and antenna connections across ten ports, including channel one and two, low and high frequency paths, wideband options, and transmit channels, with guidance for practical setup.
Connect LimeSDR-USB with U.FL connectors by attaching each connector to the board, ensuring a firm fit for the output path.
Set up LimeSDR with Dragon OS and a virtual machine, verify the board with LimeUtil, and review serial numbers, firmware versions, and upcoming firmware updates and timing calibration.
Update the firmware of the lime sdr via the terminal by running line util --update, after confirming internet connectivity. Then run line util --timing to calibrate timings and correct optics.
Learn to build a complete GSM network with a script that makes calls and sends SMS, then configure devices and SIM cards for automatic access.
Explore the gsm network architecture by detailing how phones connect through beta (bts) to a base station controller and transceiver station, with media as hotspot and frequency banks guiding transmission.
Create a virtual base transceiver station with OsmoBTS, showing how a base station controller (BSP) configures betas, manages radio tasks, and connects to the GSM network via MSE and MSP.
Examine the media options for building GSM networks in the SDR world, focusing on Osmo videos and why other options like open medias and YouTube videos are not used.
Connect LimeSDR with OsmoBTS to bring a GSM network on air, using Osmo video and the osmotic library to bridge hardware and software.
Configure BSD for a BSC network by setting country and mobile network codes, 1800 frequency band, signaling time slots, then start Osmo service to connect a phone to GSM.
Explore GSM network architecture and the roles of the mobile switching center (MSE), media gateway (MTW), home location register (SLA), and signaling transfer point (SDP) in subscriber mobility and connectivity.
Learn to build a private GSM network by storing subscriber details in OsmoHLR, retrieving MSA numbers, and provisioning two subscribers to enable calls and SMS.
Learn to capture GSM traffic with Wireshark and analyze the packets. Identify text messages and calls, apply GSM filters including GCP for subscriber details, and inspect numbers and messages.
Learn the sim–network authentication, where a secret key is never exposed or transmitted; the random challenge enables both sides to compute and verify a signed response.
Learn to use a sim reader writer tool that supports reading and writing, including blank sim cards for gsm and lte in three sizes, and connect to sim programming software.
Demonstrate reading and writing SIM cards, configuring 15-digit MSA numbers, the carrier and ISDN numbers, and applying the com-128-3 encryption algorithm for GSM and LTE programming.
Add a new subscriber to the HLR by configuring the IMSI, ISDN number, and authentication 2G with the 128 version three encryption, then verify GSM network connectivity.
Insert the SIM cards and start the GSM network, enabling automatic connections and testing calls and messages between two phones.
The lecture compares GSM and LTE networks, noting that LTE delivers high-speed 4G data while GSM runs on 2G/3G, and introduces the free SRS LTE suite for SIM-based internet access.
Install and compile the srsLTE toolchain on Ubuntu, including Soapy SDR, Lime Suite, SRS GWI, and SRS LP, then configure ipc and enp files and add Wireshark for network analysis.
Install required libraries and tools, configure the SRS LTE settings, start the LTE network, connect it to the internet, and prepare to program the SIM card in the next video.
Program the SIM card for LTE using the GSM tool, load existing data, and enter IMSI, Ki, and OPC consistently in the LTE database, then apply the specified encryption algorithm.
Update the ss database by entering sim card details into the CSP file, including the authentication algorithm, Ki, and OPC, then save to enable the upcoming LTE network test.
Set up and test an lte network by starting the service, loading apc.config, inserting a sim, and verifying a 4g internet connection.
Analyze captured LTE packets with Wireshark to inspect non-secure http traffic, view get and post data, and understand how network operators can see form submissions, highlighting the need for https.
Learn software defined radio basics, frequencies, decoding, sniffing, and transmitting data. Explore advanced SDR topics, satellites, and setting up an SDR server, plus hardware board usage and drone camera sniffing.
Provide an honest review to help us improve this course; download the HTML file from resources, and explore other courses with discounted coupon codes in the bonus section.
This fourth installment of the SDR for Ethical Hackers and Security Researchers series focuses on the architecture and operation of GSM and LTE networks within controlled laboratory environments. This course is designed for students, researchers, and cybersecurity professionals who want to understand how cellular networks function at a technical level and how SDR platforms can be used for educational telecom experimentation.
In this course, you will explore the core components of GSM and LTE networks, including BTS, BSC, MSC, HLR, EPC elements, and packet flow structure. Using SDR hardware such as LimeSDR (optional but recommended), you will learn how to set up a private, isolated cellular lab network for research and learning purposes only. A virtual setup option is also available for those without SDR hardware.
You will study SIM provisioning concepts within your own test environment and understand how authentication and identity management work inside cellular systems. Practical labs include controlled call routing within the private lab network, SMS testing between test devices, and packet analysis using tools such as Wireshark to better understand signaling and traffic flow.
All demonstrations are conducted strictly within isolated lab environments and are intended for educational, research, and defensive security purposes only. This course does not teach interception of public cellular networks or unauthorized access to telecom infrastructure. Students are expected to comply with all local telecom regulations and laws.
By the end of this course, you will have a strong technical understanding of GSM and LTE architecture and practical experience building and analyzing private cellular research environments.
Disclaimer:
Important: All exercises and demonstrations in this course are conducted in private lab environments for educational and research purposes only. Students must not attempt to intercept, interfere with, or connect to public GSM or LTE networks. Unauthorized use of cellular networks or SIM cards is illegal and strictly prohibited. This course is intended solely for learning, experimentation, and defensive security practice.