telecomsecurity/pstn-adsl-lns repository overview

⁠TelcoSec PSTN/ADSL Cyber Range — LNS (L2TP Network Server)

The foreign-carrier side of the lab's simulated wholesale roaming model: an accel-ppp-based LNS that terminates L2TP tunnels from the BNG/LAC, modeling a subscriber roaming onto a partner ISP's network (deployed per-region as lns-de/lns-us/lns-jp).

Attack surface: unencrypted L2TP tunnel frames between the host LAC and foreign LNS, offline MS-CHAPv2 hash cracking from intercepted PPP negotiation.

Part of the TelcoSec PSTN/ADSL Cyber Range — a 16-container, 100% software-based telecom security lab modeling a realistic wholesale ISP (copper-line impairments, PPPoE, RADIUS/AAA, L2TP wholesale roaming, TR-069/CWMP). Built for the TelcoSec Telecom Security Academy.

⚠️ Intentionally vulnerable. Ships plaintext PAP/crackable MS-CHAPv2, an unauthenticated MongoDB backend, and unencrypted TR-069 by design, for red-team training. Do not deploy outside an isolated lab network.

Full lab source, architecture diagram, and attack scenarios: https://github.com/TelcoSec-Labs/TelcoSec_PSTN_ADSL_LABs⁠