kalibrate, or kal, can scan for GSM base stations in a given frequency band
and can use those GSM base stations to calculate the local oscillator
frequency offset.

Homepage:
https://github.com/scateu/kalibrate-hackrf/
