Unified Operator CLI Suite

Tool ConfigurationPre-configured

Overview & Purpose

TelcoChisel provides a centralized operator command-line interface, `telcosec` (also symlinked to `telcochisel`), designed for rapid field diagnostics, hardware enumeration, modular metapackage management (`telcosec pkg`), smartcard and eSIM auditing (`telcosec sim`), cellular core management, and security scanning. Deployable on Linux via APT (`apt install telcosec-cli`), macOS & Linux via Homebrew (`brew install telcosec-tools/tap/telcosec`), or as a lightweight multi-arch container (`docker run --rm ghcr.io/telcosec-tools/telcosec-cli`). Rather than requiring operators to remember dozens of disparate Linux commands and hardware probe syntax, `telcosec` aggregates system status, SDR transceiver detection, 10-tier metapackage operations, pure Go ISO 7816-3 ATR parsing, 5G SA simulation, and security scanning into a single intuitive tool.

Verification Command

Run the following to confirm this configuration is active on your system:

Unified Operator CLI Suite — Verification
telcosec status && telcosec pkg list && telcosec sim status

Configuration Details & Steps

TelcoChisel applies these settings automatically at ISO build time. The following steps document each configuration item:

  1. 1
    Run directly via multi-arch Docker container (GHCR): docker run --rm -it ghcr.io/telcosec-tools/telcosec-cli check docker run --rm -it --privileged --net=host -v /dev:/dev -v /sys:/sys ghcr.io/telcosec-tools/telcosec-cli hardware
  2. 2
    Install on macOS (Apple Silicon/Intel) or Linux via official Homebrew tap: brew tap telcosec-tools/tap brew install telcosec
  3. 3
    Run the comprehensive operator diagnostic overview: telcosec status
  4. 4
    Enumerate all connected SDR transceivers and smartcard interfaces: telcosec hardware
  5. 5
    Inspect and manage modular 10-tier metapackages on-demand: telcosec pkg list telcosec pkg info 5g sudo telcosec pkg install sdr sim
  6. 6
    Audit smartcard environment, PC/SC readers, and toolchains: telcosec sim status telcosec sim readers
  7. 7
    Decode ISO/IEC 7816-3 Answer-to-Reset (ATR) and classify telecom SIM profiles: telcosec sim atr 3B9F95801FC78031E073FE211B674A4C7380110043 telcosec sim atr --json
  8. 8
    Inspect eSIM LPA chip details and installed eSIM profiles: telcosec sim lpac chip telcosec sim lpac profile
  9. 9
    Inspect and manage 5G Standalone core services and UERANSIM: telcosec 5g status
  10. 10
    Launch guided frequency surveys or SCTP signaling sweeps: telcosec scan

Troubleshooting

Common Issues
If `telcosec hardware` does not detect your connected SDR, verify physical USB connectivity (`lsusb`), check that your user account belongs to the `plugdev` group (`id -nG`), and ensure the low-latency udev rules have triggered (`sudo udevadm trigger`). If smartcard readers are not detected, run `telcosec sim status` to verify that `pcscd` daemon is running (`sudo systemctl restart pcscd`).

Frequently Asked Questions

How do I install telcosec on macOS?

Run 'brew tap telcosec-tools/tap && brew install telcosec'. The formula builds a native Mach-O binary for your architecture (Apple Silicon M1/M2/M3/M4 or Intel x86_64) and automatically installs shell completions and manual pages.

What does 'telcosec status' report?

It audits running kernel version, real-time SCHED_RR permissions, locked memory limits, USB buffer allocations, active SCTP kernel socket parameters, running cellular core services (Open5GS, MongoDB), and smartcard daemon status.

How does 'telcosec sim' decode SIM smartcards?

It includes a native, pure Go ISO/IEC 7816-3 ATR parser with zero external C dependencies. It validates direct/inverse convention, decodes Fi/Di speed factors, extracts historical bytes, verifies TCK checksums, and classifies profiles into 2G GSM, 3G/4G USIM, 5G ISIM, and sysmoUSIM test SIMs.

Is 'telcosec pkg' different from 'telcosec-pkg'?

No. 'telcosec pkg' delegates directly to the exact same modular metapackage engine and repository, providing identical options and domain aliases inside the unified operator interface.

Can 'telcosec' run without root privileges?

Yes. Most discovery commands (`status`, `hardware`, `sim`, `pkg list`, `scan`, `academy`) run unprivileged. Service orchestration commands (`telcosec 5g start`, `telcosec pkg install`) invoke sudo only when modifying system state.

Is 'telcochisel' interchangeable with 'telcosec'?

Yes. `/usr/local/bin/telcochisel` is a symlink pointing directly to `/usr/local/bin/telcosec`.

HANDS-ON TELECOM LABS

Learn Unified Operator CLI Suite in TelcoSec Academy

Master real-world implementation, protocol fuzzing, and telecom security engineering in guided browser sandbox labs.

Interactive Cloud Labs No Hardware Required CTSP Certification
Start Telecom Labapp.telcosec.net · Instant access
Back to OS Customizations