SysSec-KAIST/LTESniffer

Health v2 · maintenance only

Adoption not part of the score

2219 stars · 235 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

LTESniffer is an open-source LTE downlink/uplink eavesdropper built on FALCON and srsRAN that decodes PDCCH, PDSCH, and PUSCH channels to capture traffic between cell towers and smartphones. It includes a security research API for identity mapping, IMSI collecting, and capability profiling, and cannot decrypt encrypted messages.

Use cases

• sniff LTE traffic between a cell tower and phones
• capture unencrypted LTE control and data channel messages
• research LTE security vulnerabilities with a passive sniffer
• map device identities and collect IMSIs over the air
• profile UE capabilities from cellular traffic
• record and offline-decode LTE IQ samples

When to choose

• you need an open-source passive LTE sniffer for security research
• you want to decode PDSCH/PUSCH traffic that other open-source sniffers cannot
• you have SDR hardware like USRP B-series and need real-time LTE decoding
• you need identity mapping or IMSI collection for cellular privacy research

When to avoid

• you need to decrypt encrypted LTE user data - it cannot do that
• you lack SDR hardware or local legal authorization for LTE sniffing
• you need a production cellular monitoring system rather than a research tool
• you work on non-LTE networks like 5G NR

Facets

cli-tool · maturity active

security networking monitoring developer-tools security networking cpp lte sdr cellular-security eavesdropping pdcch pdsch pusch imsi wireless-sniffer usrp telecommunications research linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="SysSec-KAIST/LTESniffer")