PDA

View Full Version : compv2 cloning

HH_854
09-09-2003, 17:03
Hi all!

I ever destroyed sim cards with cardinal and simscan 1.33
I don't know if my current sim card is compv1 or compv2: this is a french orange sim from 12/2002(I think it's compv2, but i don't know exactly!). Can SimScan 2 destroy compv2?
gsmsalers
09-09-2003, 17:19
Yes. That will also destroy. No solution. But heard some tricks. But need to test.
SirGraham
09-10-2003, 18:07
Hi,

I think not.

Only some cards with COMP128 v1 have limit (with counter). The V2 donīt need this limit because donīt generate collisions...

V2: you canīt extract the ki with collisions, you donīt need put a limit...

You problem with this card is other.... When one card are broken for the SimScan the A0 A88 APDU command donīt Work. The rest of command works well.

Regards,
Sir Graham.

http://www.endorasoft.es/avatars/Logo.jpg (http://www.endorasoft.es)

WEB: http://www.endorasoft.com
FORO: http://www.endorasoft.com/forum
FTP: ftp://endorasoft.com Login: public Password: public
MeMoCan
09-10-2003, 22:02
Our GSM Operator uses Compv2 + a38 limit. it is so interesting is not is? :)
SirGraham
09-10-2003, 22:20
Hi,

The operator donīt put this option. This option is of the manufactured of the card.

... and this option is Stupid. For What?

The COMP128 v2 HAVENīT got collisions. You can use a scan to extract the Ki. This option only limit the life of the card...

Regards,
Sir Graham.

http://www.endorasoft.es/avatars/Logo.jpg (http://www.endorasoft.es)

WEB: http://www.endorasoft.com
FORO: http://www.endorasoft.com/forum
FTP: ftp://endorasoft.com Login: public Password: public
OnOff
09-13-2003, 18:06
Could You guide to an getting started about sim clone?
How do you read any SIM card?
What hardware do I need?
If you don't have patience to ' bla bla' with me, give me some links to visit.

Thanks
MeMoCan
09-13-2003, 23:47
yes sir, i know it. and i wrote "operator uses"
cards are compv2 and a38 limited. when you try to find ki, first you can not find, on second try simcard crashed...

our operator is stupid, i agree :)
SirGraham
09-14-2003, 10:26
Hi,

@Onoff:

You can read old messages in this forum or in my forum. You found a lot of info about how you can started.


@MeMoCan.

You can confirm What is your operator? And the manufactured of this cards?

Regards,
Sir Graham.

http://www.endorasoft.es/avatars/Logo.jpg (http://www.endorasoft.es)

WEB: http://www.endorasoft.com
FORO: http://www.endorasoft.com/forum
FTP: ftp://endorasoft.com Login: public Password: public
MeMoCan
09-14-2003, 22:16
i dont know manufacturer, old cards were gemplus, and they was compv1. on new cards, no name is written.
SirGraham
09-15-2003, 16:31
Ok.

And the operator? Please?

Regards,
Sir Graham.
MeMoCan
09-15-2003, 21:55
Turkcell -TR
cristi2
09-16-2003, 09:14
Hi Endorasoft !
many compV2 cards use a38 limit ! :mad:
If no part of the Ki is extracted after 30-40000 tries with simscan20, cancel the scanning or the card dies :(
SirGraham
09-16-2003, 16:55
Hi,

@MeMoCan: Ok. Thanks for the info.

@Cristi2:

Well. This is not logic. :confused:
Why? Because you can extract the Ki with the collision Search.

The Limit are use in COMP128 v1 to eliminate the posibilty to search the Ki. You need 180.000 autenticates (more less) to calculate the ki. Normaly the card with limit have a 65536 counter to eliminate this posibility of search.
When you overflow this counter the autentication APDU return error. All rest of functions of you card works well.

Is this your case? Can be possible your card crashed for other case? I broken card for the use... ŋ?
You can determinate if you card are broken by limit easy, If you card donīt work when you call... but It cach coverture...

Best Regards,
Sir Graham.

http://www.endorasoft.es/avatars/Logo.jpg (http://www.endorasoft.es)

WEB: http://www.endorasoft.com
FORO: http://www.endorasoft.com/forum
FTP: ftp://endorasoft.com Login: public Password: public
MeMoCan
09-17-2003, 00:40
Sir Graham : after reach a38 limit, card blocks itself. after blocking there is no network connection...

no not much of compv2 cards have a38 limit.
SirGraham
09-17-2003, 07:42
Hi,

I try to block some cards (all were V1) with limit, and It only blocks the A0 88 (authenticate) command. The rest of the funtionality works normaly...
(I can read the IMSI and other files without problem)

This is my experience.

How do you know if this card is V2? Perhasph the counter are broken before the first par are found....


Best Regards,
Sir Graham.

http://www.endorasoft.es/avatars/Logo.jpg (http://www.endorasoft.es)

WEB: http://www.endorasoft.com
FORO: http://www.endorasoft.com/forum
FTP: ftp://endorasoft.com Login: public Password: public
cristi2
09-17-2003, 08:15
@SirGraham
Hi,
I destroyed a german d2-card (gemplus, compv2). After ca 150000 authenticates the card completely died (no more atr, card completely dead).
>Can be possible your card crashed for other case? I broken card >for the use... ŋ?
no. I tested another such card ant it died on the same way ! :mad:
>
I think, almost all new cards have implemented an authentication counter :mad:
SirGraham
09-17-2003, 08:38
Hi Cristi2,

Here in is Spain I try with new Gemplus V2 and makes a lot of try with any problem (Telefonica and Vodafone). Sure.

I donīt know what is the problem but I sure that these V2 havenīt counter.... ŋ?

Perhapsh some operator ask for to the manufacturer (Gemplus) a V2 cards with limit or not?

In Spain donīt have limit.... for the moment...

Regards,
Sir Graham.
yaren
09-22-2003, 15:05
Dear Sir Graham,
Sorry,I dont understand you!..Did you find ki and imsi codes for comp 128 v2 cards?I know that you work very hard this subject from lots of time!..any hot news?
regards
SirGraham
09-22-2003, 15:29
Hi yaren,

We are working in this now.... There isnīt any new yet...

Regards,
Sir Graham.
yaren
09-23-2003, 07:45
Hi Sir Graham,
Thank you very much for reply my message! I hope you find and get v2 cards cloning solution! Have a nice work!..I will wait your discoveries!..
Regards
yaren