BTS_Research

2-5G

https://radioactive.blog/2019/10/17/build_2g_3g_4g_5g_with_sdr/

2G GSM

https://radioactive.blog/2017/01/10/iot-mode-fuzzing-with-openbt/

https://radioactive.blog/2017/11/29/getting_started_with_openbts_range_networks-v5-0/

https://radioactive.blog/2017/12/10/iot-module-fuzzing-with-openbts-part-%e2%91%a1/

https://radioactive.blog/2018/06/30/osmocom-2g_vs_yatebts_vs_openbts%E4%BD%BF%E7%94%A8%E7%AC%94%E8%AE%B0/

https://www.researchgate.net/publication/327971731_Hijack_IoT_devices_GSM_GPRS_MITMwith_SDR

YouTube Demo

https://www.youtube.com/watch?v=sMoDs7TrK54

https://radioactive.blog/2018/02/10/low-cost_imsi_catcher_for_4g_lte_base_on_openlte_and_usrp/

3G

https://radioactive.blog/2017/04/11/getting-started-with-3g-ip-access-nano3gopenbscosmocom-bb-part-1/

https://radioactive.blog/2018/10/25/3g-sdr-system-review-v20181024/

Demo:https://www.youtube.com/watch?v=PFH_-vID3AA

4G

https://radioactive.blog/2016/07/06/how-to-build-4g-lte-base-station-with-gnuradio-bladerf-openlte-part-1/ https://radioactive.blog/2018/02/10/low-cost_imsi_catcher_for_4g_lte_base_on_openlte_and_usrp/

5G & NBIoT

https://radioactive.blog/2020/09/20/build_4g_lte_nbiot_and_5g-nr_with_sdr/