Skip to main content
grasp.study
About
Explore
Pricing
Log in
Try it for free
Back to course
👋
Welcome to a Grasp lesson
Create a free account
to keep studying and create your own study path.
4G/5G telecommunication hacking
·
Module 7
Hands-On 4G Attacks
1
Setting Up a Rogue Base Station with srsENB
Configure srsENB to act as a rogue base station by modifying its identity and security parameters.
2
Connecting to a Rogue Base Station
Induce a UE in the test lab to connect to the rogue base station.
3
IMSI Catching: Initial Attach Signal Analysis
Perform an IMSI catch by capturing and analyzing the UE's initial attach signaling.
4
Capturing UE User-Plane Traffic on Rogue Base Stations
Capture user-plane traffic from a UE connected to the rogue base station.
5
Identifying Unencrypted Traffic
Analyze captured traffic to identify unencrypted data like DNS queries or HTTP requests.
Downgrade Attacks: From 4G to 2G
Execute a downgrade attack by advertising a rogue 2G cell to an LTE-capable UE.
Previous module
4G Attack Vectors and Vulnerabilities
Next module
5G Architecture and Security Enhancements