Day wise Training Plan

• DAY 1 - Foundational & Practical Training
  • Theory & Fundamental
    • 5G Network Architecture Overview
    • Deep Dive into TS 33.117
    • Telecom Network Architectures & Protocols
    • Key RAN Components & interfaces
    • Lab Setup & Hands-on Explanation
  • RAN Security & Penetration Testing
    • Scanning Techniques
    • Mass Scanning
    • Passive Reconnaissance
    • UE Environment Mapping
    • Tools: nmap, massscaner,zenmap
    • Network Topology Discovery
  • RAN Security Assessment (Grey &white box)
    • Grey Box Testing
    • Exploiting Public CVEs & Known Vulnerabilities
    • Hard Testing Against Exposed Attack Surfaces
    • Comprehensive Enumeration & Analysis
    • Attack Surface Mapping:
    • Vulnerability Discovery
    • Exploiting UE & gNB Vulnerabilities
• DAY 2Advanced Security & Exploitation (White Box Testing)
  • Model-Based Security Testing Core Network Attacks - Understanding Threat Vectors: Identifying threats in the core network.
    • Service-Based Architecture (SBA) Risks: Examining weaknesses in mod telecom architecture.
    • Configuration Manipulation & Password Attacks in CN: Exploiting weak configurations
  • Hands-on Security Testing
    • Intercepting Packets in CN: Analyzing network traffic for vulnerabilities.
    • HTTP/2 Traffic Analysis & API Endpoint Targeting: Finding security flaws in communications
    • Reverse Engineering HTTP/2 Transactions: Identifying weak implementation
    • Blue CN Model (Intentionally Vulnerable CN for Exploit Research): Safe environment for testing exploits
    • Understanding OAS (Open API Security): Examining telecom API security mechanisms
  • CN Side Testing & Exploitation
    • Discovery & Initial Recon: Identifying core network vulnerabilities
    • Scanning Techniques for Weakness Identification: Using specialized tools flaws
    • Enumeration for Exploitable Services: Mapping out vulnerable services.
• DAY 3
  • JWT-based Exploit Scenarios: Attacks leveraging JWT vulnerabilities
  • HTTP/2 Injection (Downgrading of HTTP): Exploiting HTTP/2 weaknesses
  • Advanced Telecom Attacks
    • SMF (Session Management Function) Attack Scenarios: Exploiting session management vulnerabilities
    • AMF (Access & Mobility Function) Authentication Attacks: Unauthorized and authentication bypass
    • TCP Flooding for Session Disruption: Conducting denial-of-service attacks
    • Unauthorized Authentication Exploits: Gaining access through misconfigurations.

Case Studies & Group Exercise

• Real-world telecom breach analysis and incident response strategies
• Simulation exercise: Conducting a full incident response and forensic analysis within a telecom environment
• Session Hijacking & DoS Flooding: Interfering with active network session
• Fuzzing (Second-Layer Security Testing): Advanced testing techniques for protocol security
• Additional Topics Covered Core Concepts & Introduction
• Current Core Evolution: Understanding the transition from traditional co API-driven core networks
• AI Integration in Core: Exploring AI-based security mechanisms for privat networks