Air-Gapped Persistence & 3GPP Specs
Overview & Purpose
Field assessments frequently occur in classified or air-gapped cellular labs with zero internet access. TelcoChisel provides field utilities including `telcosec-create-usb` for automated creation of bootable flash drives with LUKS-encrypted persistence, `telcosec-download-openapi` for bulk offline caching of 3GPP Rel 15-18 SBA OpenAPI schemas, and pre-tuned Wireshark telecom dissector colorfilters.
Verification Command
Run the following to confirm this configuration is active on your system:
which telcosec-create-usb telcosec-download-openapiConfiguration Details & Steps
TelcoChisel applies these settings automatically at ISO build time. The following steps document each configuration item:
- 1Inspect the bootable USB creation wizard: telcosec-create-usb --help
- 2Fetch and cache official 3GPP SBA OpenAPI specifications: telcosec-download-openapi
- 3Inspect cached 3GPP OpenAPI specifications: ls -la /usr/share/telcosec/openapi/ || ls -la /opt/telcosec/openapi/
- 4Switch Wireshark telecom dissector profiles and color rules: telcosec-profile
Troubleshooting
Frequently Asked Questions
What 3GPP releases does 'telcosec-download-openapi' support?
It pulls official 3GPP 5G Service Based Architecture (SBA) specifications across Release 15, Release 16, Release 17, and Release 18.
How do Wireshark colorfilters improve telecom analysis?
They highlight critical signaling messages (5G NAS Registration/Security, NGAP Initial Context, SCTP ABORT/SHUTDOWN, Diameter Errors, and GTP-C Path Failures) with distinct color palettes.
Can 'telcosec-create-usb' format both UEFI and Legacy BIOS drives?
Yes. It creates a hybrid partition layout containing an EFI System Partition (FAT32) and an ext4/LUKS persistence partition.
Learn Air-Gapped Persistence & 3GPP Specs in TelcoSec Academy
Master real-world implementation, protocol fuzzing, and telecom security engineering in guided browser sandbox labs.