I have a plethora of femtocells (small base stations) I want to get rid of. If you want it, it's yours, for free. You just need to cover the shipping costs. Else it will become the property of Trash Inc.

Here the list of 3G femtocells: - Cisco residential signal box USC3331, model 74-12584-01, PID USC3331-EE-K9. The flash (TSSOP) is desoldered but in the box (just is case you need to dump it). Just resolder it and it should work fine. - 2x Vodafone (Greece) Access Gateway UAP2105. One is open, but nothing is missing. 5 pair of board to board connectors are included. This is the one first model that has been hacked. - Vodafone Sure Signal AP 2820V. A cute plug style 3G femtocell. modded for serial output and external power supply (so the serial is not mains referenced). I have doc on how to root and flash it. Sadly it misses little effort for interfacing it with osmocom, but is the best candidate for such a project. - Vodafone Sure Signal AP 2820V. not modded. - Ubiquisys ZP-000-05EU, aka SerComm. Flash is desoldered and in the packages. Serial output is available. - SFR Home 3G G2, Ubiquisys ZP-004-01FR. serial is available. This is the one I hacked and reflashed for a MitM attack back in 2011 - yet another Vodafone (Greece) Access Gateway UAP2105. already open. should work, but else perfect donor board. - SFR Home 3G G3, FEM-SER-r0. flash is desoldered and in package.

Here the list of 4G femtocells: - Samsung Verizon 4G LTE Network Extender, model SLS-BU103 - 3x T-Mobile (USA) Personal 4G LTE CellSpot, 9961 Home Cell V1. one is open and has plenty of test points soldered.

just let me know if you are interested.