cellular-security

GTK4 cellular security toolkit for Linux. 63 modules covering 2G GSM, 3G UMTS, 4G LTE and 5G NR - air interface, core network, SIM and identity, RF tracking, and the attack and analysis work around them, in one place. Some modules need specific hardware. THIS IS WIP

Open-source Android cellular anomaly auditor for IMSI-catcher research (no-root)

Zero-Trust Cellular Defense Sub-Service for Android (IMSI-Catcher, 2G SMS Blaster, and 4G aLTEr Detection & Safe Routing)

Automated forensic analysis tool for Rayhunter cellular surveillance detection. Detects IMSI catchers, rogue eNodeBs, and null-cipher attacks.

libosmo-netif 1.8.0 ported to macOS ARM64 (Apple Silicon). Networking layer of the Osmocom cellular stack.

Fork of EFForg/rayhunter for the Orbic RC400L, adding audible alerts and extended-battery support.

A formal protocol specification for applying 5G's existing subscriber identity concealment model to device identity — closing the hardware layer gap that no current cellular anonymization solution addresses.

LTE/4G handover-redirect rogue eNodeB on OpenAirInterface, for detection research

Turn ICdetector exports into verifiable PDF reports, entirely on your phone

libosmo-sigtran native port for macOS ARM64 (Apple Silicon), Osmocom SS7 SCCP + M3UA + SUA + osmo-stp

osmo-mgw native port for macOS ARM64 (Apple Silicon), Osmocom Media Gateway + MGCP

Detect, track, and locate IMSI catchers (Stingrays) with a HackRF One — receive-only RF spectrum analysis, baseline anomaly detection, directional scanning, FSPL-based triangulation, and movement tracking. 100% legal: no transmission.

libosmo-abis native port for macOS ARM64 (Apple Silicon), zero patches, Osmocom Abis interface library

osmo-hlr native port for macOS ARM64 (Apple Silicon), Osmocom Home Location Register + GSUP client + mslookup