View Full Version : comp128 v2
Hi all please says me new card (comp128 v2) ı wonder decoding or not decoding
Not possible in this time
Best Regards
sonar-sx
08-08-2004, 01:27
Card reader:ESR1258 know (i think)
SirGraham
08-09-2004, 08:44
please, Can you explain more about this?
Regards,
Sir Graham.
Electroboys
08-10-2004, 17:44
After Mr . Dejan Explanation ( theory or correct information who knows ) About Comp128V2
Everybodies are wondering about Card reader ESR 1258 or whatever ..
as far as i know there aren't any card reader on the market place like that at the moment
if someone develop this idea or someone interest with this business
they can earn very good money ..
Best Regards
Oz.
electroboys, can you give ma a link for this matherial, with Mr . Dejan Explanation?
Electroboys
08-11-2004, 19:40
Here is Link (http://forum.gsmhosting.com/vbb/showthread.php?t=137366&page=3&pp=15)
Best Regards
Oz..
sonar-sx
08-12-2004, 02:56
I read here:http://clonesim.narod.ru/eng_index.htm
SirGraham
08-12-2004, 07:40
opssss!!!
I remenber... THIS IS A BIG FAKE. This reader is a normal Phoenix reader and the SIMSCAN V3 only is a troyan horse: send your IMSI and Ki by Internet (use Winsock).
... and of course donīt extract the Ki of COMP128 v2.
Regards,
Sir Graham.
Dejan Kaljevic
08-12-2004, 13:53
@electroboys
You need SIM card reader with very fast A\D converter and depend on
CHIP vendor (Siemens, Philips, SGS Thompson, etc) you can (IF you Know how) get allmost everything you need (PINs,PUKs,ADMIN CHVs,Master CHV,
Ki)
Im still not alowed to delete my useless posts :(
Electroboys
08-12-2004, 15:38
@ Mr. Dejan Kaljevic
Thank you for your attention
i am sure you can do ! or there are some possibilities as you are talking about ..
but there are some points which i missunderstood
First of all this sim card cloning absolutely quite big business..
Why don't you (somebody) make this solution commercial ( if you know how to do )
There are hundred thousands ppl ready pay for this..
Best Regards
Oz.
gokhanalpaslan
08-12-2004, 15:53
@ Mr. Dejan Kaljevic
Thank you for your attention
i am sure you can do ! or there are some possibilities as you are talking about ..
but there are some points which i missunderstood
First of all this sim card cloning absolutely quite big business..
Why don't you (somebody) make this solution commercial ( if you know how to do )
There are hundred thousands ppl ready pay for this..
Best Regards
Oz.
that is the point we are waiting for you Mr. Dejan Kaljevic
pryngeps
08-13-2004, 18:03
is possible write a software for a symbian based phone to read the ki key???
gokhanalpaslan
08-14-2004, 10:36
i dont think so you need dc and some boxes
SirGraham
08-15-2004, 17:14
Hi,
Not. Itīs very easy make a software to read Ki in Symbian, But works like the software of the PC. The problem here is break the security of the SIM. You can make this form terminal or PC + Reader. In the both cases the problem is the same.
We developed software to extract the Ki and now developed software for the Symbian and smarphones 2002/2003 (microsoft).... I think is possible and Easy but havenīt got any advantage...
Regards,
Sir Graham.
pryngeps
08-17-2004, 19:24
is not possible take the ki key when it is passed from sim to phone? my idea is write a software for smartphone to intercept the pass and take the key? is possible?
SirGraham
08-17-2004, 19:34
Hi,
I afraid that is not possible. The Ki not out of the SIM. ŋ?
Yes.. the Ki is used by the SIM to calculate a result: this is send by the phone....
If you make a Ki extractor in C++ for Symbian, you must use the same method of extraction that in PC... (include the limitations: only V1 and the time of generate the collisions).
Regards,
Sir Graham.
hmm. this subject is interesting. :)
is there any kind of source about ki extracting?
now that u talk bout it... i can try to make one :)
SuPeR_PoPeY
08-17-2004, 21:51
crux make something in sim clonning, like "crux comp128 v2 extractor" ;) not only crux calculator :p
well i can start doing a symbian app if i get some help.
even if its only for the old simcards. its a start.
any help would be really appreciated. maybe source needed in c++ for extraction
ary_world
09-03-2004, 12:18
Kindly tell me the link for simscan 3.0 to download
v3? :confused:
are you sure?
never heard of it
as far as i know latest version is v2.01
I read here:http://clonesim.narod.ru/eng_index.htm
error link http://clonesim.narod.ru/eng_index.htm
Konstantin271
09-07-2004, 07:11
This page was destroyed.
colin breave
09-16-2004, 12:20
I have this soft, v3 and by sim scanner 5.2 is latest version 2.02
colin breave
09-16-2004, 12:26
And i have forget, v3 is sim scan v3.15 Alex & DejKaljevic (c)2003, and the oder soft is
sim scan v3.15 Dejan&Alex.(2004)comp2, but by me not work properity,...........
Konstantin271
09-16-2004, 15:46
SimScan V3 and other later are troyan!!! Don't use!!!
There's no original Simscan later then 2.01.
colin breave
09-17-2004, 08:47
**I dont no is that troyan, i have this soft 8 mounts and more but work not****
****************** thanx**********************************
Electroboys
09-17-2004, 12:25
Ofcourse ,
it doesn't work ..
There is no official update by Dejan Kaljevic
about Sim_Scan V3 it's only trojan and it's fake ...
last update you can get from Mr Dejan's Page (http://users.net.yu/~dejan/)
and i'm just wondering still no body interest with sim Card reader
that with A/D convertor which is Mr. Dejan Kaljevic tried to explain us ( link (http://forum.gsmhosting.com/vbb/showpost.php?p=806341&postcount=10) link2 (http://forum.gsmhosting.com/vbb/showpost.php?p=706357&postcount=45) )
Let's say we builded that reader somehow what about the software ?
confusion confusion .... :confused: :confused:
colin breave
09-17-2004, 13:00
** Thanx elektroboys, i have very interest for this sim card reader with A/D convertor,
how costs this reader? and can i with this reader comp128 v2 read its that possible?
*** Sorry for my englich letter, and everything *** for you.
yes. the software simcscanv3 by alex & dejan (which really work) is just an edited version of the simscan v2.00 original by dejan.
he told himself that v3 is fake.
seems it will send your personal informations (KI / IMSI) to alex's email. and he will use ur card, spend ur money, ....
just in case, DONT USE IT!
BR, Crux
Vulcanite
09-20-2004, 21:18
That is mean that the "simscan for COMP v2" doesn't exist now?
SuPeR_PoPeY
09-20-2004, 21:30
now??? never exist ;)
shadow0000
09-21-2004, 15:06
I have an idea, first of all I am not a programmer, but if we share ours cpu powers, we can, with a brute force attack, discover ki from a comp128 v2 sim, i suppose....
This is only an idea, i didn't know how do it.
SirGraham
09-22-2004, 07:44
Hi,
2^128 ?????? Brute force???? Impossible!!!!
Regards,
Sir Graham.
and so what guys thats all ,don`t sell brain how smart you are all of you.Just
explane can be done or not,if can explane how (make programer ,sell programer also software ). :cool:
Just an idea about Comp128 v2. Why not to use neural networks to guess the underlying function. Sometimes following un-conventional non-analytical procedures can help a lot.
To do this it is neccessary e Ki of a Comp128 v2 card and analysing input and output from the card. The first 65000 tries can be used to make the network learn. If this works fine we have the Comp128 v2 inside a neural network. So we can find Ki's from it.
Maybe I am naive in maths and enginering. However this is just an idea to a grave problem such is Comp128 v2.
Electroboys
11-29-2004, 11:51
Actually we have had ideas before that for example
Mr Dejan Kaljevic again into this you can see here (http://forum.gsmhosting.com/vbb/showpost.php?p=806341&postcount=10) and another (http://forum.gsmhosting.com/vbb/showthread.php?t=137366&page=3&pp=15)
But need somebody who can improve this ideas or who develop something concrete
Have a nice Days..
Best Regards
Oz..
CyberoptiK
12-16-2004, 01:42
Hi,
2^128 ?????? Brute force???? Impossible!!!!
Regards,
Sir Graham.
Nothing is ImPossible.
Wait up..
GreetZ
SirGraham
12-16-2004, 09:10
Hi,
well ...Ok Nothing is impossible but is very, very, very, very long. About a 100.000.000.000 years.
If you have patience, is possible...
However, to make a brute force attack you need to know ALSO the function COMP128 v2....
Regards,
Sir Graham.
CyberoptiK
12-16-2004, 12:09
now, 100.000.000.000 years r showing that is also not impossible.
Dont forget, which is build of human can be destroyed early or later of other human.
GreetZ
SirGraham
12-16-2004, 12:32
hi,
Of course. There isnīt any protection full. But... What is the solution for V2? for the moment It is not possible extract the ki.
Brute force isnīt the solution.
Regards,
Sir Graham.
CyberoptiK
12-16-2004, 12:42
no Solution for Comp128V2, pitty.. I think the programmers dont spend long time to crack it. always and all says its to diffucult..
GreetZ
:) Does anyone have something of concrete instead of replying infinitely ?
GSM_look
12-28-2004, 14:18
* * *
*
*
*
* *
* *
Merry Christmas!
ypselon1900
02-25-2005, 00:52
http://www.smart-scan.narod.ru/3_eng_read_comp2.htm
alguin a visto esto, es cierto o no?
y lo siento al escibir en espaņol
SirGraham
02-25-2005, 01:47
Hi,
Sorry You canīt write in spahisn. Itīs a rule of forum.
uhh..... je,je...
http://www.endorasoft.es/promocion/esrcomplect.jpg
Do you see all picture "normal"? :D I think the author donīt work better in photoshop. :cool:
See the RS232 wired... ŋ?
Itīs a hoax.... :p
(Quedate con el Burdo "foto montaje" del lector ESR. El cable conector de RS232 se lo podian haber currado mas con el "FotoCHOP". ;) . En Fin... Ya se hablo de estos TIMADORES en otros mensajes).
Regards,
Sir Graham.
http://www.endorasoft.es
Sir graham is it now possible to clone comp 128 v2 whit this instrument????
SirGraham
03-12-2005, 10:48
Hi,
Simple ANSWER: ITīS A BIG Faaaaaakeeeeeeeeeeeeeeeeeeee!!!!
regards,
Sir Graham.
really?? why? :confused: :confused:
SirGraham
03-15-2005, 00:51
Hi,
Try the software.... (but be carefull, of course) ;)
Regards,
Sir Graham.
Dear Friends
The manufacturer of ESR 1258 is claimed that this device is able to read out Comp128.2 and Comp128.3, but in this forum i have read that this is not possible. What is the actual position of this device. Any one, can explain it.
SATZONE
CyberoptiK
03-16-2005, 11:13
all the posts r bla bla bla..
GreetZ
SirGraham
03-16-2005, 12:26
Hi,
@satzone: When you use this software be carefull and disconnect internet conexion..... ;)
Regards,
Sir Graham.
Hi,
@satzone: When you use this software be carefull and disconnect internet conexion..... ;)
Regards,
Sir Graham.
Scotty, raise the shields :D
what is the mean "rain the shields" because my english is not good as you
SirGraham
03-16-2005, 13:52
Hi,
Basic: BE CAREFULL !!! When you try this "invent"...
This is a "Star Trek" comment when the Klingon attacks....
I only can say: "the force may be with you..."
Regards,
Sir Graham.
SirGaraham
You are requested to please if you have any information about ESR 1258 or you have checked it please write here because the manufacturer are saying that comp128.2 is possible through this device and your kind posts are here that this device is FAKE. Have you checked ESR practically or not.
please answer : it's possible or not?
this is already discussed to death, no, its no comercial solution for compv2 at the moment, and this device about you talking is fake, big fake that will not clone v2 simcards ans also when you try comp1 it will send your Ki and IMSI to "hidden master", thats why i write "Scotty, raise the shields" cos i tried few softwares for compv2 (with no succes) and all of them try to send some info trough my firewall (raised shield).
so dont try to waste your money
regards
Seth
Taken from the site above:
"At first time, we were interested in the area of SIM, which responsible for Key Identification (KI). Yes, these electric changes are very little, imperceptible, they could be measured in parts of microamperes, but tracing is nevertheless possible. Furthermore, it is possible to trace the small electromagnetic waves (radiation) from microchip, because any electrical device radiates waves more or small. The clock frequency of processor of SIM cannot be stable on various modes of work. In case with SIM, some changes have observed on 10-20 KHz during accepting of some pair of KI. Using this method, we were succeed in access to the holy of holies of SIM: PIN1,PIN2, PUK1, PUK2. The first model of the device for reading SIM v2 was assembled enough complex, large, bulky, it was seemed like a vacuum tube radio receiver. Some time later, we have done a big lot of work in this sphere"
This is not possible to do it at your home as these guys claim. It was only possible into the IBM labs with special and very expencive equipment. There is no chance that these guys made a pretty small device like this.The so called "Energy Sensitive Reader" doesnt exist.
Only one word can explain this photo of the device: LAME
Just a scam from some guys, don't waste your time
Electroboys
03-17-2005, 11:57
Why Don't some body who is provider of ESR Reader , write here something about their product !!!!
Coz , it's fake as everybody said ..
No need to rate their web page anymore...
we can even call them as a cheater on market feedback side..
how much could comp128 v2 C source code worth in $ ?
Dear Friend
Here is a story for ESR1258. That I was interested to purchase the device Called ESR 1258 about which i got the link http://www.smart-scan.narod.ru/1_eng_intro.htm from this forum. I was interested just for experiment with this device for Comp128v2.
I contact the concernd person through E.Mail: titov_sn@mail.ru and ICQ Number 278266193 who tell me that his name is Mr. Sergey Titov. We were in contact aproximately one week and Mr. Sergey Titov was sure that this device is able to read out Copm128v2 because he was doing the work with this device. One day i ask him for his telephone number because i wants to talk on phone, he give me a Mobile number +380-97-2942545. I was called from Pakistan for 9-10 times only for confirmation that is it possible or not? but Mr. Sergy Titov was sure and sure on telephone too.
I ask him for his residetial address because i wants to send him a Comp128v2 Sim, he should scan the sim and tell me the IMSI and KI then i will check it, if it will work with same Number then i will order for 20-25 devices, he told me his residential address as "04201 Ukraine, Kiev, Smolicha Yuriya Street, house 5" but he ask me that i should not send my sim to any other person due to that secret information of my Sim can be out. Then I was agree for not sending sim. He ask me that i should purchase only one for first time, if i will be satified then i can order for more otherwise i should not order.
I enquire for payment proceedure, then Mr. Sergy Titov said to me that i can send payment only Webmoney Transfer or Directo Bank Transfer and Bank detail was given as:
Beneficiary:
Alexander Dacenko, Visa Electron, 8061,
Correspondent bank:
Deutsche Bank Trust Co. Americas, N.Y., USA.
SWIFT code: BKTRUS33 Acc. 04-408-193
Bank of Beneficiary:
FIRST INVESTMENT BANK
Swift code: FIBX UA UK
Address: 6, Moskowskiy av., Kyiv, 04073, Ukraine, phone
(38044)468-2772 Account Number 29093001
but due to some problem i was not able to send the amount through above both system. I was discuss this matter with Mr. Sergey Titov then he said to me that I can send the payment through Western Union Money Transfer in the Name of Alexander Dacenko Anatolievich, Passport NC: 577103. I was done the payment through Western Union on 19.03.2005 and on 21.03.2005 the mail was received from Mr. Sergey Titov that payment has been received and device will dispatch today i.e. 21.03.2005 and I will receive the device ESR1258 within 2-3 days positively.
Haaaaaaa, I was hopeful that device is coming and will receive upto 25-26/03.2005, but all in vain. Since I was receive the confirmation mail that Mr. Sergey Titov or Mr. Alexander Dacenko has received the payment I am waiting for device but up till now nothing is happen. Since last few days I am in try to contact Mr. Sergey Titov through mail but mail is receiving back that "no mail box is found" and "no user is found". When I want to contact through telephone number the message is receiving that "this number cannot be reach at the moment please try later and Mr. Sergey Titov is also not logging on ICQ.
It is the story of ESR1258. Only for 260US$ that person(s) is doing this, i accept my .............
Dear Friend, my aim of above is that please careful and dont trust any Ukr.... Online Business especially like ESR1258.
Sincere
SATZONE
Konstantin271
04-03-2005, 12:27
Not!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
oh my ***!!! I hate this person
Dear Friends
Any Solution for recovery of payment
Satzone
Dear Friends
Any Solution for recovery of payment
Satzone
Sorry friend, no solution to recover money, you have been warned by members and also respected members like Sir Graham that this device is fake.
why the site is not down? http://www.esr2.nm.ru/ this site is a fake!
SirGraham
04-04-2005, 21:41
Hi,
@satzone: we say you that this is a big fake!!!!!.......
Regards,
Sir Graham.
http://www.endorasoft.es/avatars/Logo.jpg (http://www.endorasoft.es)
WEB http://www.endorasoft.es
FOROS http://foros.endorasoft.es
Electroboys
04-06-2005, 12:32
@satzone
say goodbye to your money ...
this is the way how they earn money
:(
Dear Friends
The Ukrainee fraudulent person now doing business through website www.kiscan.net. He has changed the icq, the previous icq number was 278266193 and now is 277001627 and may be he has changed his mobile number also because when i calls a lady is replying.
Any how, be carefull because that person and device called esr-1258 is 101% fraud and he is cheating the people.
SatZone
Hi, SirGraham! Hi ALL!
Here is my point of view: to extract Ki from SIM card with comp128v2 you need to use Differential Power Analysis (DPA).
It can be done without any expensive hardware or software. For example, I have writen software which is terminal and monitors SIM card's power supply when SIM card is "thinking" (when it is verifying PIN or run GSM ALGO). As AD converter I use SoundCard from PC (device is connected to SoundCard's LineIn). It is enough to see how power supply is modifying while SIM card is "thinking". I am agree with anyone who says that 48 or 96 kSamples/s is too small rate but this variant of device is very good for beginners (like me) and is not expensive.
Here is screenshot (SelectFile APDU is trasmited to SIM Card, the first part is data sent, then SIM card selects file and return answer (9F XX) at the end): follow this link and click there "здесь
http://www.sc-research.hut1.ru/SmartCardSupplyAnalyzer_2.jpg
SirGraham
03-12-2006, 21:24
Hi Nuken,
We also works in this direction.
Can you send me to email address: sir__graham@[nospam]terra.es ?
... and perhashp we can change ideas about this...
Regards,
Sir Graham.
http://www.endorasoft.es/avatars/Logo.jpg (http://www.endorasoft.es) http://www.endorasoft.es/avatars/bluehack.jpg (http://bluehack.endorasoft.es)
WEB http://www.endorasoft.es
FOROS http://foros.endorasoft.es
Hi SirGraham!
See your mail.
achin_ji
05-13-2006, 07:21
Sir plz help me i m student of engineering college in india and i had to make my final year project on sim card reader i.e in vc++ to only read sim card using sim card reader
plz help me.
achin_ji@rediffmail.com
COMP128V3 NO LIMIT A3A8 DOWNLOAD WORON SCANhttp://scan.gsm-best.com
:mad: :mad: :mad: :mad:
BAN THIS USER !!!! This link sends you to TROJAN files.
achin_ji
05-18-2006, 14:41
hello sir
I just ur help sir i m able to Read ATR frm Sim Card Using VC++
But My aim is to read the whole sim card
plz help me
Achin jain
achin_ji@rediffmail.com
Hello SirGraham!
I can not mail you because my mail server messages
"Domen name does not exist"
Please, mail me.
Here is snapshot of my software
Smart Power Supply Analyser (http://www.sc-research.hut1.ru/SCPSA_By_Nuken.jpg) (follow this link and click there "здесь")
Good Luck!
vimafeje
05-30-2006, 10:54
Hi to all,
i just want to share this with you: (i read it in a forum)
if you need to clone a comp128 V2 SIM card, you must know some things;
-It's impossible to clone this SIM (comp128 V2)!
-how to solve this:
you must tell your operator that you have a phone or car radio whith gsm function or anything else whit GSM function, and this cant read your SIM card, if they don't know what to do, sugest them to change your card to an older one!
It's work to me!!!!
Visit my home page: http://www.vimafeje.com
achin_ji
06-10-2006, 08:47
Hello all
I m Able to read sim card using VC++ just like sim scan i too able to produce the log file but still i don't know any think abt KI and how to get that out also
is their is any crack or by pass of pin means if one wish to bypass pin check to retrive information then can it be possible plz if any one have any idea let me know
achin_ji@rediffmail.com
vanishedlove
06-17-2006, 09:53
Hi all
right now i am thinking about another way to 'guess' how is the COMP128 V2.. supose we have got some samples of:
SRES(1) = comp128v2 (RAND(1), KI, IMEI),
SRES(2) = comp128v2 (RAND(2), KI, IMEI),
SRES(3) = comp128v2 (RAND(3), KI, IMEI),
.........
SRES(n) = comp128v2 (RAND(n), KI, IMEI),
I believe there should be some way to "guess" how comp128v2 works with some statistic analysis programs such as SAS, MINITAB.. or maybe Crystal Ball :D
And the problem is to collect plenty of samples of SRES and RAND... and I think this can be done with a Fake-Base-Station, as currently mobile phones does not verify the Base Stations, then we can get enough samples of :
SRES(n) = comp128v2 (RAND(n), KI, IMEI)
and the last step should relay to the statistic programs.... any one like this idea? your comments?
J.K.
vanishedlove
06-18-2006, 08:42
Might be yes.... but it doesn't matter, as the value of IMEI doen't change.
Have you any reason to consider that IMEI is used? I think you are wrong because when I place my SIM Card comp128v2 in SIM Card reader it can RUN GSM ALGO and it can not take any IMEI because SIM Card is not in phone!!!
SRES=GSM ALGO(Ki, RAND)!!!!
SRES=GSM ALGO(Ki, RAND)!!!!
For sure! It does not depend even on IMSI, since dual-IMSI simcards (f.e. Tele2 Russia) give the same SRES for equal RANDs and both IMSI being activated.
As for statistic analysis - all in vain: the function has rather good uniform distribution. and shows rather good "random" behaviour.
vanishedlove
06-24-2006, 18:03
We dont believe it only because it hasn't be done.... isn't it? once upon a time, people trust MD5, and now ...
The tip here is trying to show a new way out of electrics, as the card is tooooo smart. I just guessed there should be few ways to find out some circulation :)
it says, "water leaks from the shorts of casks"... let's find more, the weak points may be in the system, and may be in something the system relys on.
cheers.
For sure! It does not depend even on IMSI, since dual-IMSI simcards (f.e. Tele2 Russia) give the same SRES for equal RANDs and both IMSI being activated.
As for statistic analysis - all in vain: the function has rather good uniform distribution. and shows rather good "random" behaviour.
then...
IMEI + IMSI need only 4 network authentication
vanishedlove
06-25-2006, 17:09
I made a mistake, IMSI is from SIM card while IMEI is from mobile phone... so the function samples are:
SRES(1) = comp128v2 (RAND(1), KI, IMEI, IMSI),
SRES(2) = comp128v2 (RAND(2), KI, IMEI, IMSI),
SRES(3) = comp128v2 (RAND(3), KI, IMEI, IMSI),
.........
SRES(n) = comp128v2 (RAND(n), KI, IMEI, IMSI),
The IMEI & IMSI are always known, and the KI is constant, SRES could probobly be sniffed or even made by fake base-station ;)
The weak point here is the base-station... maybe there are more weak points inside the base-stations.. if we can get more information about it we could find it, anybody knows how to build a fake base-station?
hehehe comp128 v1,v2 or v3 not depend on IMEI at all. When did SIM ever ask phone for IMEI? Can you show me in GSM11.11?
It not clever to sniff just SRES, because only half encrypt rand send over radio. Also it cost you alot to make fake base station, which probably illegal in most country.
Is easier and cheaper to buy 100 pay go sim, most time network give for free or very cheap. Otherwise can check ebay.
BUT i tell you even 10^4 sims is not enough to reverse algorithm. Look at number combination and you see is not realistic. Only people who know not about how crypto and hash function work make posts like this.
You talk about MD5, where is flaw in MD5? It in only some implementation where 'clever' OEM try to change function to customize and make error.. look at WEP is exactly the problem. Read more, then post again :)
excel service
06-28-2006, 17:26
For a long time it was impossible to find out keys from SIM-cards, based on the algorithm Comp v2 with 128 bit, using standard devices for reading. This new encryption standard was purposely introduced by GSM operators, after the case when they got to know about the regrettable bug in Comp 1. Then new SIM-cards with Comp 2 and 3 came into the world. It would simply turned to blocked on reading attempt or men might read it for infinitely time and without results. Further usage the blocked SIM was useless.
The group of independent developers of smart-cards (Smartcard Developer Association) and group of American scientists of Intel Company anew got this crypto steady SIM at 5 hours cloning. Their method was based on analyze energy consumption of smart card in reading process; also they used extended algorithms for reading SIM. Besides, they have discovered some changes in frequency of electromagnetic radiation of card in various modes of its working. They published this report in Internet and presented results to World GSM Association and American Committee for Mobile Communication of USA. But mobile operators are still in no way react on this research. Statistic shows: operators will invest money in modern systems as soon as scope of illegal calls comes up to 3-5%. On the other part, its easy to understand the position of Russian mobile operators, because new security systems cost much money, and to introduce the new equipment is simply unreal.
After wide issue of crypto steady SIM, cloning as business gradually died out. But Russian specialists could duplicate and they had started up to life this new technology of reading of SIM with Comp 2. Thus, European and American engineers, numerous froad-managers, and other specialists somehow overlook simple fact: above all, SIM-card is an electrical microchip, which needs some electrical energy for its work. Moreover such energy consumption changes depend on working of specific areas of chips SIM card. At first time, we were interested in the area of SIM, which responsible for Key Identification (KI). Yes, these electric changes are very little, imperceptible, they could be measured in parts of microamperes, but tracing is nevertheless possible. Furthermore, it is possible to trace the small electromagnetic waves (radiation) from microchip, because any electrical device radiates waves more or small. The clock frequency of processor of SIM cannot be stable on various modes of work. In case with SIM, some changes have observed on 10-20 KHz during accepting of some pair of KI. Using this method, we were succeed in access to the holy of holies of SIM: PIN1,PIN2, PUK1, PUK2. The first model of the device for reading SIM v2 was assembled enough complex, large, bulky, it was seemed like a vacuum tube radio receiver. Some time later, we have done a big lot of work in this sphere.
As a result, the special device, Card Reader ESR 12-58 for SIM (Energy Sensitive Reader) has been created. We used in the scheme two Atmel microcontrollers; they work under control their own programs and it was protected it from copying, by the word. The scheme appeared effective, real, working and inexpensive (in comparison with the first models).
For SIM-cards reading and fully functional work of device, the special program, Smart_Scan, was developed. The program assembled on basis of the best programs for keys reading, it uses the best optimized algorithms. We took better ideas from Woron_Scan 1.09, SIM-Scan 2.01, xSIM, CARDinal and other similar programs. This version of Smart_Scan also supports usual reading devices. The program allows:
- To work with ESR devices under operating system Windows (9x, Me, 2000 and XP).
- Extends functionality of usual SIM-Reader, allows reading of registration keys of SIM cards of transitional models, which are Comp 1, but the usual readers cannot read them already.
- Allows reading of security codes of SIM: PIN1, PIN2, PUK1, PUK2, using ESR device.
- Contains additional algorithms for processing your IMSI and KI.
- Provides friendly English interface.
However, there is a little danger of SIM-card blocking. Only ESR allows minimize such risk to zero for any kind of cards. Besides, there are a lot of various programs for card reading, each one has its own advantages and imperfection. SIM-Scan, CARDinal, xSIM, Woron_Scan etc. But only Smart_Scan contains the best algorithms of scanning.
vanishedlove
06-28-2006, 21:18
Hi a__, you are right, I need to read and learn more... I once thought posting first was a good way for me to decide what directation I need to go ;)
Thanks
Hi excel service
Thanks for your good explanation of ESR1258 & the Sim_Scan program, this is my first time know about it, I once saw the picture while some people said that didnt look like ture... but nowadays I believe in it!
And I would like to share you some thing as I know about the ESR & the new Simscan: I have ever got a simscan322 program, and didn't know how to use it, it didn't work properly whatever in XP or 98.... and right now I guess that is only because the simscan322 should work with ESR1258 smart card reader.
The simscan322 I 've got are also attached, while some people in this forum said it contains a trojan horse program.... this once made me sooo upset, it has passed the checking of virus scanning, and I still dont know whether it contains any virus or not, as virus-scanning software are usually later responsed than virus... although, I still want to put it here, let people which know virus well tell us the answer :p
note1: the simscan322 MUST be extract to the folder "C:\sim_scan", otherwise it will says: cannot find ESR12.dll, even the dll file is beside him.
note2: the way I tried this software was to build a clean system with virus scanning software, disconnected the unnecessary hard disks to protect the datas, while nothing virus appeared, while the simscan322 didn't work properly. it contains 2 programs, one named sim_scan.exe, and the other one named sim_scan3.exe, the later one I guess should work with ESR1258 reader...
note1: the simscan322 MUST be extract to the folder "C:\sim_scan", otherwise it will says: cannot find ESR12.dll, even the dll file is beside him.
ESR12.dll is not a [direct link library] but an EXE file. Why don't you just rename ESR12.dll file to ESR12.exe and run it in any folder?
The Simscan322 application is just a loader to execute ESR12.dll and make the whole package appear more "sophisticated".
ESR12 is a silly joke for "credulous people" (leichtglaubig) in order to make them post "reviews of possibile theoretical success" and use them to advertise for ESR12 and attract new victims without even realizing.
The more technical terms are used in the description, the higher the rate to convice more people (victims)
.
FOR THE VERY LAST TIME, IT'S FAKE!
ESR 1253 is just there to make people spend money and buy a non existing device. (The only thing that actualy exists, are the bank-accounts of the guy who is making profit from "crap-believing" people.)
Regards
Ch@in
note2: the way I tried this software was to build a clean system with virus scanning software, disconnected the unnecessary hard disks to protect the datas....
That's funny, because your clean system even runs emule in the background....</br>
vanishedlove
07-01-2006, 11:09
That's funny, because your clean system even runs emule in the background....</br>
Funny? but I didn't say that screenshots are taken in the clean system :p
I got some screenshots & a LOG file from FileMon in that clean system, given as below:
vanishedlove
07-01-2006, 12:06
The ESR.dll looks clean, even when you change its extended name to .exe, it just shows to be looked like a program, while when it is launched separately, we will see the new interface of the simscan, seems to be a separate program.
Then let's see the simscan3.exe, it doesn't look like a good thing. as the wsock32.dll is loaded... wsock32.dll is not a necessary module here.
And at this very moment, an strange idea came into my mind, that is, the ESR12.exe could be the Orginal new simscan program, and the simscan3.exe is a fake. It seems that someone adds the simscan3.exe into the package and wants to make some misunderstanding.
And the next problem is how to use the ESR12.exe if it really exists, it can be run separately while it cannot be stopped normally except to be stopped by taskmgr, something is wrong here. maybe that is dued to the wrong card reader?
There is an old saying "fire never gets bundled by paper" I have heard before, and all the technical restriction is nothing while the needs of people is coming up, just like, umm.... to hold back a train with one single arm. And the problem is that I don't see any train here :D
fetishistic-scientism?