https://stream.echo6.co/videos/watch/039450e3-7eea-4011-8eff-09f2faa3a749 In this video, I walk through using LTESniffer with two SignalSDR Pro radios—each equipped with its own internal GPS-disciplined oscillator (GPSDO)—to simultaneously capture both the uplink and downlink of an FDD LTE base station. Both the LTE base station and user equipment (UE) are fully controlled in my private lab environment. Why two SDRs and internal GPSDOs? FDD LTE splits the uplink and downlink onto different frequencies. To successfully monitor both and reconstruct the connection handshake (including extracting the IMSI), you need two synchronized SDRs. Each SignalSDR Pro here uses its own internal GPSDO, ensuring precise timing and frequency alignment for this type of sniffing. How does IMSI sniffing work? When the UE connects to the LTE base station, identity and authentication data are exchanged separately on the uplink and downlink. By capturing both with tightly synchronized SDRs, tools like LTESniffer can reconstruct the exchange and, in a lab environment, extract the IMSI as shown in this demo. Legal & Ethical Note: This is an educational demonstration performed entirely in a controlled lab with privately-owned hardware and spectrum. Nothing in this video should be interpreted as an endorsement or encouragement of unauthorized or illegal activities. Questions, or want a deeper technical dive? Drop a comment below! WarDragon Pro available here (when in stock): https://cemaxecuter.com/?product=wardragon-pro-kit Don’t miss out on staying connected: Catch updates on Twitter: https://twitter.com/cemaxecuter Supporting the channel: If you find this content helpful, please consider supporting the channel through Patreon: https://www.patreon.com/cemaxecuter Sat, 25 Apr 2026 12:45:46 GMT https://validator.w3.org/feed/docs/rss2.html PeerTube - https://stream.echo6.co https://stream.echo6.co/client/assets/images/icons/icon-512x512.png https://stream.echo6.co/videos/watch/039450e3-7eea-4011-8eff-09f2faa3a749 All rights reserved, unless otherwise specified in the terms specified at https://stream.echo6.co/about and potential licenses granted by each content's rightholder.