5G hacking for red and blue teams
Training Overview
5G Hacking for Red and Blue Teams is an advanced, hands-on training at CSA XCON 2026, Dehradun, focused on offensive and defensive security of modern 5G core networks.
As 5G becomes foundational for critical infrastructure across manufacturing, healthcare, smart cities, and defense, the security of telecom networks is no longer a niche concern. Unlike traditional IT environments, 5G introduces unique risks across mobile protocols, signaling, network slicing, and cloud-native network functions. This training is designed to close that skills gap.
Participants will learn how to attack, assess, and defend 5G core networks using realistic threat scenarios in a fully controlled, ethical lab environment.
About the Training at CSA XCON 2026
This intensive workshop delivers deep technical exposure to real-world 5G security challenges, blending red team attack techniques with blue team defensive strategies.
Key highlights include:
- Hands-on exploration of 5G core and RAN security
- Realistic simulations of attacks against sliced 5G networks
- Exposure to telecom-specific threat models and protocols
- Practical guidance for both pentesting and defending 5G deployments
- Alignment with global telecom security standards and frameworks
The training directly supports CSA XCON’s goal of preparing security professionals for next-generation infrastructure threats.
What You Will Learn
Participants will gain in-depth hands-on experience with:
5G Architecture & Security Foundations
- 5G core architecture and UE registration flow
- Security requirements for key network functions (AMF, UDM, UDR, NRF, etc.)
- SUCI, 5G-AKA, EAP-AKA, NAS and AS security
- 3GPP 33.501 security specifications
- Securing backhaul, interconnects, private 5G and MEC
- Open RAN (ORAN) architecture and security considerations
Threat Modeling & Risk Assessment
- Threat actors, motivations, and capabilities in telecom environments
- Security risks across 5G core interfaces
- Using MITRE FiGHT and MOTIF frameworks
- Threats in sliced, NFV-based and MEC-enabled networks
- Compliance and assurance using 3GPP SCAS, SECAM and NESAS
Vulnerability Research & Attack Surface
- Core network exploitation stages and entry points
- Attacks on user-to-network and network-to-network interfaces
- Vulnerabilities in PFCP, NGAP, GTP, and HTTP/2 (SBI)
- Rogue network functions and spoofed network slices
- Protocol tunneling, MEC exploitation, and supply chain risks
Pentesting & Red Team Operations
- Pentesting tools and techniques for 5G interfaces
- Fuzzing 3GPP core protocols and service-based APIs
- Core network intrusion via N1, N2, NEF and N32 interfaces
- Replay attacks on vulnerable 5G interfaces
- Slice abuse, MITM attacks, lateral movement, and persistence
- Reverse shell access and hidden backdoors in 5G cores
Blue Team & Defense Strategies
- Enforcing network slice isolation and access controls
- Monitoring 5G core traffic and anomaly detection
- Mutual authentication and encryption between network functions
- API gateway protections and request validation
- Hardening network functions and applying zero trust principles
- Rate limiting, filtering, and DoS mitigation strategies
Training Experience & Expectations
- Fully hands-on, lab-driven training
- Ethical testing in a controlled 5G virtual environment
- Balanced red team and blue team perspectives
- Focus on realistic telecom attack paths and defenses
- Techniques applicable to real-world 5G deployments
Participants will leave with the confidence to test, secure, and operate 5G core networks in critical environments.
Who Should Attend
This training is ideal for:
- Telecom and wireless security architects
- Red teamers and penetration testers
- Blue team and SOC professionals
- Network and cloud security engineers
- Security researchers working on mobile and IoT ecosystems
Skill Level
Intermediate to Advanced
Participant Requirements
Participants should have:
- Basic understanding of wireless communications or cybersecurity
- Familiarity with telecom concepts (2G–5G, APIs, cloud, microservices)
- Experience using tools like Wireshark
- Comfort with at least one scripting or programming language
What Participants Will Receive
Each participant will receive:
- Access to a realistic 5G virtual lab with sliced core networks
- Custom pentesting tools for recon, intrusion, and fuzzing
- Network traffic monitoring and analysis tools
- Preconfigured virtual machines with all required tooling
- Case studies and real-world telecom attack scenarios
Trainer
This training will be delivered by a globally recognized expert in telecom and 5G security, with extensive experience in researching, exposing, and mitigating vulnerabilities in commercial mobile networks and contributing to international security standards.