CTF_PLATFORM: Telecom Security Capture The Flag Challenges
The premier Capture The Flag arena for telecommunications security professionals.
Tactical_Battlefield
The TelcoSec CTF is more than a game; it is a high-fidelity simulation of the global telecom threat landscape. Participants are tasked with navigating complex, multi-stage scenarios that reflect real-world attack vectors.
Our challenges bridge the gap between traditional IT security and specialized cellular engineering. Participants must master 3GPP standards, signaling protocol nuances, and radio frequency analysis to succeed in the arena.
From exploiting Signaling System No. 7 (SS7) vulnerabilities to reverse engineering 5G Service Based Architecture (SBA) components, the platform validates the elite technical skills required to secure modern communications infrastructure.
Baseband Fuzzing
Discover Remote Code Execution (RCE) vulnerabilities in simulated UE baseband implementations by crafting malformed RRC and NAS signaling messages.
SIM OS Exploitation
Navigate the security of Java Card OS, exploit SIM Toolkit (STK) commands, and analyze OTA management interfaces for unauthorized credential access.
- ►Signaling & Protocol Manipulation
Hijack GTP-C/U tunnels, perform Diameter redirection, and spoof SS7 MAP messages within a carrier-grade environment.
- ►Radio frequency (RF) Analysis
Analyze IQ captures to identify and exploit vulnerabilities in LTE/5G-NR physical and link layers.
Platform_Architecture
The TelcoSec CTF runs on a dedicated CTFd instance extended with custom telecom challenge types. Unlike generic security CTFs, every challenge is backed by a live virtual network: participants interact with real Open5GS and srsRAN core deployments, actual Diameter routing agents, and emulated SS7 signaling transfer points — not sanitized simulations.
Each participant receives an isolated lab environment provisioned on demand via Kubernetes. The platform supports over-the-air (OTA) fuzzing challenges, where participants deploy custom payloads against a running baseband implementation over a controlled radio interface, validating findings against live protocol state rather than static flags.
Challenge difficulty is tiered from foundational protocol knowledge (understanding 3GPP message formats and ASN.1 encoding) through intermediate exploitation (MAP message injection, Diameter AVP manipulation) to expert-level research tracks involving baseband firmware unpacking, GTP-U session hijacking, and 5G SBA token forgery.
Why Specialize in Telecom CTF?
Traditional security CTF competitions rarely include telecommunications challenges because the knowledge barrier is high: participants must understand 3GPP protocol specifications, SIGTRAN stack mechanics, and radio layer behavior simultaneously. This scarcity means that telecom security professionals have almost no competitive arena for validating and benchmarking their skills.
The TelcoSec CTF fills this gap by providing structured, ranked, and continuously updated challenges across every layer of the cellular stack. Rankings on the platform serve as a verifiable credential within the telecom security community — recognized by MNOs, equipment vendors, and research institutions as evidence of practical protocol exploitation ability.
// JOIN THE CTF ARENA
Access live CTF challenges, ranking boards, and specialized telecom security labs by joining the TelcoSec platform.
ENTER ARENA [→]