INITIALIZING_ACCESS_PROTOCOL...
A specialized collective of telecommunications engineers and security researchers dedicated to securing the world's most critical mobile network infrastructure.
TelcoSec was established to address the critical gap in high-fidelity, engineering-grade telecommunications security tooling. With over 15 years of combined experience inside Mobile Network Operator (MNO) environments and telecom vendor testing facilities, our team sits at the intersection of legacy signaling stacks and modern cybersecurity.
Mobile networks span a layered architecture — radio access networks, physical SIM cards, and core signaling protocols — each with distinct attack surfaces. Mastering them requires deep competence in standards from the 3rd Generation Partnership Project (3GPP), the GSM Association (GSMA), and the IETF.
Our collective translates these intricate standards into open, accessible telecom security tools that help operators and researchers identify protocol weaknesses before malicious actors do.
We conduct advanced packet inspection and vulnerability research across legacy SS7/SIGTRAN layers (MAP, CAP, INAP) and modern IP-based signaling systems (Diameter, GTP, and 5G HTTP/2 Service-Based Architectures), using DNS audit tools like RDNSx to analyze transit layers.
Using Software Defined Radio platforms profiled in our SDR hardware compatibility database and signal processing in GNU Radio, we analyze 4G LTE and 5G NR air interfaces. We instrument baseband firmware via FirmWire baseband emulation, capture GSM control channels with GR-GSM passive monitoring, and conduct 5G NR RAN security research using srsRAN.
We audit IP Multimedia Subsystem nodes, VoLTE/VoNR SIP endpoints, and 5G Service-Based Architecture interfaces against interception, spoofing, and location tracking vectors. 5G core network protocol testing via Open5GS and UE protocol stack capture via Qualcomm diag frame extraction form the backbone of our core network assessment workflow.
We cover the full SIM attack surface: SIM OTA security auditing via SIMtester, SIM card programming and USIM file analysis via pySim, and GSM baseband Um interface research via OsmocomBB. Smartphone cellular protocol monitoring is performed via SCAT diag protocol analysis.
We develop open-source calibration utilities — including GSM base station frequency calibration via Kalibrate — and telecom DNS reconnaissance tooling such as carrier DNS security auditing via RDNSx, to map operator infrastructure before signaling-layer assessments.
Telecommunications security is a high-stakes domain. Misconfigured tools or inaccurate guidance can cause real service disruptions and false security assessments. Every tool, code snippet, and tutorial on TelcoSec Tools undergoes structured peer review by senior mobile security engineers before publication.
We follow the principles of defensive engineering and responsible disclosure. When our research surfaces a vulnerability in a cellular protocol or vendor implementation, we coordinate with affected carriers, hardware vendors, and standards bodies under GSMA CVD before any public release.