Artifacts for SNI5GECT: A Practical Approach to Inject aNRchy into 5G NR

Included Items:

1. The Sni5Gect project source code: Full source code for the framework and its components.

   • .
     ├── cmake
     ├── configs
     ├── credentials
     ├── debian
     ├── images
     ├── lib
     ├── shadower
     │   ├── hdr
     │   ├── modules # Source code of exploit modules
     │   ├── src
     │   │   ├── broadcast_worker.cc # Broadcast Worker implementation
     │   │   ├── gnb_dl_worker.cc    # GNB DL Injector implementation
     │   │   ├── gnb_ul_worker.cc    # GNB UL Worker implementation
     │   │   ├── scheduler.cc        # Distributes received subframes to components
     │   │   ├── syncer.cc           # Syncher implementation
     │   │   ├── ue_dl_worker.cc     # UE DL Worker implementation
     │   │   ├── ue_tracker.cc       # UE Tracker implementation
     │   │   └── wd_worker.cc        # wDissector wrapper
     │   ├── test
     │   └── tools
     ├── srsenb
     ├── srsepc
     ├── srsgnb
     ├── srsue
     ├── test
     └── utils

2. Pre-built Docker container: A ready-to-use Docker image for the Sni5Gect project, containing all required dependencies for evaluation.
3. Offline sniffing example: A sample connection recording for evaluating the sniffing capability of Sni5Gect in an offline setting.
4. Evaluation test data: All evaluation result presented in the paper, including:
   1. DCI sniffing evaluation
   2. Message sniffing evaluation
   3. Uplink message sniffing at different distances
   4. Uplink message sniffing with varying Timing Advance (TA) offsets (Along with connection recordings)
   5. Message injection at different protocol states
   6. Message injection performance at varying distances
   7. Evaluation of message injection attacks, including:
      • Attacks from 5Ghoul
      • Registration Reject downgrade attack
      • Identity Request fingerprinting attack
      • Authentication Replay attack

docker load < sni5gect-artifacts-docker.tar.gz

services:
  artifacts:
    image: artifacts
    build:
      context: .
      dockerfile: Dockerfile
    container_name: artifacts
    privileged: true
    restart: unless-stopped
    entrypoint: /sbin/init
    network_mode: host
    environment:
      - DISPLAY=:99
    volumes:
      - "/dev/:/dev/"
      - "./sni5gect-evaluation-results:/root/evaluation_results"

  mongodb:
    image: mongo:8.0
    container_name: mongodb
    restart: unless-stopped
    volumes:
      - dbdata:/data/db
    network_mode: host
    healthcheck:
      test: ["CMD", "mongosh", "--eval", "db.adminCommand('ping')"]
      interval: 5s
      timeout: 5s
      retries: 3
      start_period: 5s

volumes:
  dbdata: