We recently updated our article on ShadowBroker, which a lot of you liked. The latest release brought some new features and made the dashboard even richer.
But ShadowBroker is resource intensive and might need you to allocate a good chunk of resources to your VM, which not all systems have. Instead, there’s Osiris and it can do similar things without any installation. You can run it in the browser or host it on your Kali. Both versions are identical.
Osiris
Osiris is a global intelligence dashboard that aggregates live flight tracking, CCTV, earthquake monitoring, conflict zone mapping and 24/7 news feeds. It’s made to give you situational awareness across multiple intelligence domains. The tool was built with Next.js 16 and MapLibre GL and every data point is rendered via WebGL for 60fps performance even with thousands of concurrent entities on screen.
Dashboard
Let’s start with the live version. It’s available here.
The world looks busy once you enable all the data layers on the left side of the screen.
Camera Feeds
There’s a huge number of cameras available around the world that are free to access. They are usually scattered across different websites and don’t look nearly as good as they do on a map. The dashboard has integrated a big number of them, marked with green dots on the map.
Here’s a camera in Toronto. Looks empty at 5 am.
Aircraft Tracking
All kinds of aircraft and maritime vehicles can be tracked. Not only that, you can do a deep dive on the intel available for each one. Below you can see we picked a random flight over the UAE and the dashboard pulled up the company it belongs to, Tim Clark who is the CEO and some publicly known information on him.
You can do similar things with other objects on the map.
So if you’re monitoring military activity in a certain region, that can come in handy.
Critical Infrastructure
There are different data assets you can display by clicking the database icon on the right side of the screen. The data is relevant for various places, but mostly for the US.
Above you can see the critical infrastructure in New York (red) and nationwide (yellow).
Conflicts and Dangerous Zones
Wars, tensions and threats are differentiated by color and notes are assigned to each with a severity level.
Market Analysis
When someone loses, someone else wins. Osiris can do some Market AI overview, which you obviously shouldn’t take as legit advice. But you can see it does some basic analysis and warns of potential price spikes.
Satellite Tracking
All kinds of satellites are available on the dashboard and they can also be tracked. Here you can see Starlink flying over the Atlantic and Canada.
Malware Threats
Finally, you can view malware threats and attacks on the map. There was a big node in China linked to a lot of attacks, with more scattered around the rest of the country.
Hosting Locally
Although the live version is stable and its uptime is good, you might still want to run it locally. It’s pretty easy to set up:
kali > sudo apt install npm
kali > git clone https://github.com/simplifaisoul/osiris.git
kali > cd osiris
kali > npm audit fix --force
kali > npm run dev
Then it’ll be available at http://localhost:3000
Summary
As you can see, there are different platforms available for different setups. Having compared the two, ShadowBroker looks richer and more professional, but Osiris hosts a live version you can use without any installation and it already has most of what you’d want to test. The installation itself is quick and easy and the dashboard consumes way fewer resources than ShadowBroker. Test it yourself and see what you like.
You can learn more with us! Get our Cybersecurity Starter Bundle II and unlock WiFi Hacking, Python for Hackers, Radio Basics and other training.
Cellular or mobile networks have become a favorite target for Chinese APT and other hackers trying to:
Collect location data
Eavesdrop on voice conversations
Intercept confidential data.
To understand what these hackers are doing and how to protect your organization against it, let’s delve into how mobile networks work.
What is a Mobile Network?
A cellular network is not a single antenna or a single piece of infrastructure, but a layered system that lets moving devices stay connected wirelessly while the network manages identity, coverage, mobility, and routing in the background. At the edge is the UE, the user equipment: essentially the phone together with its SIM. The SIM proves who the subscriber is, while the phone provides the radio interface and the user-facing functions. From the user’s perspective it feels simple: the phone has signal and connects. Technically, that simplicity is created by several coordinated layers working at the same time.
The Radio Access Network (RAN)
The access layer is the RAN, the Radio Access Network. This is where base stations communicate with phones over the air. Different generations use different names for roughly the same role: BTS in 2G, NodeB in 3G, eNodeB in 4G, and gNodeB in 5G. Behind that sits the core, which acts like the brain of the network. It authenticates the user, keeps track of where the device is, sets up calls and data sessions, and connects traffic toward other networks and the internet. Coverage is then divided into many cells, and frequencies are reused carefully across cells that are far enough apart to avoid interference. That reuse is one of the key reasons cellular systems can serve millions of users with limited spectrum.
The Handover
Mobility is handled through handover. As a device moves, the network silently transfers the connection from one cell to another so that a call, stream, or download can continue without the user noticing. The complete path is therefore UE to RAN, RAN to core, and core to the internet or another network. The telemetry reinforces that this is an active, managed system: signal quality, connected cells, traffic load, uplink, downlink, latency, and packet loss all describe the health of the connection. So after defining what must stay inside the lab, this gives us the basic architecture we are allowed to study safely: device, access network, core, cells, and mobility working together as one coordinated network.
The Control Plane vs the User Plane
Building on the architecture of UE, RAN, core, cells, and handover, the next distinction is about what kind of traffic is moving through that architecture. A cellular network carries two very different conversations at the same time. One conversation is about managing the connection itself, and the other is the actual content the user cares about. That difference is captured by the split between the control plane and the user plane.
The control plane is signaling. It is the network’s coordination layer: registering the device, authenticating the subscriber, tracking where the device is, deciding how calls and messages should be routed, and maintaining the session as the user moves. The user plane is the payload: voice, video, web traffic, app data, and messages carried through the channels that signaling has already established. A simple way to think about it is that the control plane is the set of instructions that says where traffic should go, while the user plane is the traffic itself.
This split matters for security because the two planes have different characteristics and different risks. Signaling tends to be small, structured, and network-wide; payload traffic is usually larger and more local to the user’s active session. They also run through different systems and are protected in different ways. The important insight is that attacks do not always need to break encryption on the content itself. If someone can manipulate signaling, they may be able to influence where calls, SMS, or sessions are routed. So the defensive focus is not only protecting the data, but also protecting the instructions that control the data.
Summary
Mobile networks have become ubiquitous and essential to our digital life in our modern times. Billions of people rely upon these networks to communicate and transmit data around the world. Despite security measures implemented in 4G and 5G networks, advanced attackers continue to breach these networks almost at will. If you or your organization use these networks to transmit data, make voice calls or otherwise utilize these networks, you are at risk. By better understanding these networks, you are better prepared to protect you and your organization from eavesdropping, data interception, and rogue location services.
To learn more about these systems and how they can attacked, check out our Building Your Own Mobile 4G/5G Base Station where we demonstrate real attacks on our networks.
This is the final article of our Drone Warfare series on Ukraine’s rise as a drone powerhouse. But Ukraine’s success story is not one it achieved alone. The country’s drone industry was built with the support of partners from around the world who helped Ukraine during its most difficult times. Here we look at Ukraine’s export strategy and how it can serve as a way to give back by sharing hard-earned battlefield experience and technology with the nations that helped make this success possible.
Battlefield Experience
For most of the war, Ukraine’s drone sector existed on the demand side of the defense market. The country needed huge volumes of FPV drones, interceptor drones and reconnaissance systems simply to keep pace with the battlefield. By 2026, that position began to change. Ukraine started to present itself not only as a state that needed drones, but as a state that could supply them, co-produce them, and teach others how to use them. In March 2026 President Volodymyr Zelenskiy discussed joint arms production with Dutch Prime Minister Rob Jetten and said Ukraine was ready to export interceptor drones that are not needed on its own battlefield.
Interceptor drones and the latest AI developments. Source: Ukraine’s Arm Monitor
Ukraine is not trying to sell a platform developed in peacetime and polished for foreign buyers. It is offering weapons and systems that were shaped by daily combat against a technologically capable enemy. That gives Ukrainian exports a different value proposition. They are presented as battlefield-tested tools that have already survived the hardest possible proving ground.
The Export Model
Ukraine’s export strategy depends on the fact that it is producing more than it can immediately absorb on the front line in certain categories, especially interceptor drones. In June 2026 Ukraine said it could produce 2,000 interceptor drones per day, with about half potentially available beyond domestic needs, and that it could supply at least 1,000 interceptor drones a day to allies facing Shahed attacks if investment improves. That is the logic behind the export conversation. Ukraine is not opening the floodgates on every weapon it makes. It is identifying categories where production has moved beyond immediate domestic consumption.
Business Insider also reported that Ukraine wants to protect its own security first and only share technologies that do not compromise its battlefield position. That means exports are likely to focus on systems that are already partially superseded on the Ukrainian front, or on systems that can be co-produced under controlled conditions.
Europe
Europe is the most obvious destination for Ukraine’s export strategy because the continent is already moving in Ukraine’s direction. The Netherlands are going to spend €248 million on drones for Ukraine, with production split between the Netherlands and Ukraine. On 17 June 2026 the Netherlands pledged another €500 million for drones and air defense equipment. These are signs that European governments are beginning to fund drone production as an industrial activity.
The Drone Squad Fury unmanned aerial platform developed by OM Defense Systems on display at the Eurosatory defense exhibition in Paris, June 2026. Source: Militarnyi
The broader European defense picture points the same way. It was reported that G7 countries and the United States had agreed to allow Ukraine-based and European firms to produce long-range missiles and air defense systems under license. Europe is no longer only buying Ukrainian results, it wants to buy into the production model behind them.
Source: Airbus’ drone portfolio
The broader European defense market is also moving in Ukraine’s direction. For instance, Airbus partnered with the French counter-drone startup Alta Ares. Under the June 2026 memorandum of understanding, Airbus will integrate Alta Ares’ AI-guided interceptors, including the Black Bird and X-Lock systems, both combat-tested in Ukraine since 2024, into its Fortion IBMS command-and-control platform, connecting Alta Ares’ targeting software and interceptor drones to Airbus’ battle management systems to create a sensor-to-shooter chain against drone and cruise missile threats.
Middle East
The Middle East is the second major market because it faces a different but equally urgent drone threat. In March 2026 Zelenskiy said Ukraine was ready to send instructors to the Middle East and export interceptor drones that are not needed at home. Business Insider added that Ukrainian officials see older Ukrainian counter-drone technology as still useful for allies facing Shahed attacks, even if those systems are already outdated by Ukraine’s own battlefield standards. A weapon does not need to be the newest model to be valuable if the user’s threat environment is less intense than Ukraine’s.
Ukrainian interceptor drone in open terrain (desert-like background works well for the Middle East angle)
That makes the Middle East a natural fit for Ukraine’s export model because the buyer often wants a system, not just a drone. The package includes interceptor drones, training, radar integration, and electronic warfare resilience. Zelenskiy explicitly framed the issue that way, saying that without radar coverage and software that can operate under jamming, an interceptor is not a real defender.
Production
The most interesting part of Ukraine’s export strategy is not the sale itself. It is the move toward co-production. The point of co-production is to make exports more durable and less vulnerable to disruption. It also lets allies develop industrial capacity while Ukraine keeps access to the newest combat-tested designs. The G7 agreement reported by The Guardian shows a model where production can be shifted into partner territory while still drawing on Ukrainian experience and requirements. That approach helps solve three problems at once. It spreads risk away from the battlefield. It makes procurement faster for partners. And it creates a legal framework for sharing sensitive technology without handing over full control of the most advanced systems.
The Financial Logic
The export strategy also has a budget logic. Drone exports and co-production can help bring in foreign money, expand industrial capacity, and reduce pressure on the domestic defense budget. The Netherlands’ funding would support drones and air defense equipment for Ukraine, while Ukraine’s officials see export volume as a way to unlock more production capacity. The practical idea is that external orders help keep factories busy, while revenue and investment help scale the next generation of systems.
Ukraine’s Drone Industry arrives in Düsseldorf. Source: DroneXL
This logic is important in wartime because the domestic state cannot fund every possible expansion on its own. Exports make production more sustainable. They also let Ukraine distribute risk across several partners rather than relying only on its own budget and wartime aid flows. In other words, the export strategy is partly about money, but it is also about industrial resilience.
Main Constraints
Ukraine’s export strategy is still tightly constrained by its own security needs. Ukrainian officials want to keep priority for domestic forces and treat exports as selective. That means the country is not trying to become a free-market weapons bazaar in the middle of a war. It is trying to manage surplus capacity without weakening the front line. There is also the issue of sensitivity. Not every system can be exported, and not every partner can receive the same level of access. Licensed production in allied countries solves part of that problem, but only part. The more advanced the system, the more likely it is to remain under stricter Ukrainian control. That is why the export strategy is likely to be layered. That means some hardware is going to be sold directly, while some systems will be co-produced, some software and training will be shared for integration, and some capabilities will stay in-house.
Strategic Value
Ukraine’s biggest advantage in the export market is not price alone. It is combat credibility. Allies are interested because Ukraine’s drones and counter-drone systems were developed in the harshest possible environment. A state that has spent years fighting under heavy electronic warfare pressure, missile strikes, and mass drone attacks has something to offer that many peacetime defense industries do not. That does not mean Ukraine will dominate global drone exports. Competition is still strong, and certification with production security all remain real obstacles. But the country has already crossed an important threshold, where it’s no longer only asking for help. It is now a partner that can supply systems, share production, and train others to fight the same kind of war.
Conclusion
Europe wants production. The Middle East wants interception. Ukraine wants revenue and industrial depth. That creates a new model built around selective exports and battlefield-tested expertise. Ukraine is no longer only defending itself with drones, but it is using drone expertise to build alliances. That is the meaning of its export strategy today.
Login
