telecomsecurity/pstn-adsl-bng repository overview

⁠TelcoSec PSTN/ADSL Cyber Range — BNG (Broadband Network Gateway)

The ISP core's edge: an accel-ppp-based LAC (L2TP Access Concentrator) that terminates subscriber PPPoE sessions, proxies RADIUS authentication, and tunnels traffic via L2TP to LNS servers in a simulated 3-continent wholesale roaming architecture (Germany/US/Japan).

Attack surface: plaintext PAP and crackable MS-CHAPv2 PPPoE negotiation, RADIUS dictionary-attack exposure via the AAA proxy, L2TP wholesale tunnel sniffing on the management network.

Part of the TelcoSec PSTN/ADSL Cyber Range — a 16-container, 100% software-based telecom security lab modeling a realistic wholesale ISP (copper-line impairments, PPPoE, RADIUS/AAA, L2TP wholesale roaming, TR-069/CWMP). Built for the TelcoSec Telecom Security Academy.

⚠️ Intentionally vulnerable. Ships plaintext PAP/crackable MS-CHAPv2, an unauthenticated MongoDB backend, and unencrypted TR-069 by design, for red-team training. Do not deploy outside an isolated lab network.

Full lab source, architecture diagram, and attack scenarios: https://github.com/TelcoSec-Labs/TelcoSec_PSTN_ADSL_LABs⁠