Live 3 daysIntermediate Kit included

Mobile Hacking with SDR (2G to 5G)

Three days assessing mobile devices and networks with software-defined radio. We demonstrate attacks in practice, mostly on user equipment but also on the core network, across phones, IoT modules, connected cars and infrastructure.

You will leave able to
  • Tell 2G, 3G, 4G and 5G apart and their security mechanisms
  • Downgrade security mechanisms and run protocol attacks
  • Set up a 2G, 3G, 4G and 5G network on a bench
  • Hunt for vulnerabilities in basebands
  • Attack core networks from the outside and the inside
  • Get the first reflexes to attack embedded and IoT systems
Who it is for
  • Mobile and telecom security teams
  • Device and module makers
  • Red teamers extending into mobile
  • Researchers on private networks

Three days, day by day.

Theory then assignments on a real network you stand up yourself.

Day 1

Networks, setup and SIM cards

2G to 5G protocols and attack surfaceBase stations with SDRFaraday cage isolationSIMUSIM and ISIM cardsLTE eNodeB
Days 2 and 3

Attacks and going further on 5G

Interception and impersonationCracking callsDowngrading devicesFuzzing GSM and LTE stacksM2M core attacks5G-NR and NewCore

What every attendee takes home.

Attendees keep the kit, the tooling and the captures.

Hardware kit
bladeRF 2.0 micro xA4, kept by the attendee
Docker container
Toolchain, scripts and captures preloaded
Slides and tools
Full deck and the tools used in class
Captures
Real network captures cleared for teaching

Prerequisites.

A laptop running Linux

8 GB of RAM minimum

Programming and Linux

Knowledge of Linux and a language such as C, C++, C# or Python is needed

Radio knowledge is a plus

Not mandatory

Your trainer.

Sébastien Dudek
Sébastien Dudek
Founder, trainer since 2009, author of RF Swift

Published research on 5G security, Open RAN, baseband fuzzing, interception and mapping, and power-line communication in electric vehicles and charging stations. Practical work across Wi-Fi, RFID and other wireless systems.

Publications →

Current Status

Not Enrolled

Price

Closed

Get Started

Run it privately for your team.

Quoted per group, not per seat, and the content adapts to your stack. Remote live, on your site, or at our offices near Paris.

Request a quote +33 1 73 13 82 77 contact@penthertz.com