MobileSniper: Towards Automated Penetration Testing of 5G Campus Networks and IoT Infrastructures

5G technology introduces new security challenges that require advanced penetration testing tools. This paper presents MobileSniper, an open-source tool specifically designed to address the unique vulnerabilities in 5G networks, particularly in campus and enterprise environments, while extending its applicability to the emerging domain of IoT security and privacy. MobileSniper leverages a modular architecture to integrate with popular security frameworks like Nmap and Nessus, incorporating 5G-specific functionalities such as service enumeration, network function detection, and PCAP analysis. In addition, the tool has been adapted to meet the security and privacy demands of IoT ecosystems, addressing threats related to device authentication, data encryption, and privacy breaches. Designed to identify vulnerabilities in critical 5G components—such as the Radio Access Network (RAN) and Core Network—MobileSniper focuses on issues like protocol manipulation and network slicing exploitation. Results from real-world tests demonstrate the tool’s compatibility across operating systems, expandability, and reliability under stress. The paper also discusses future enhancements, including automated attack modules and specialized vulnerability scanners, to further improve the tool’s capabilities for securing 5G infrastructures and IoT networks.