PDA

View Full Version : beginer to sim cloning


gbada
01-26-2005, 18:57
please i dont know much about this sim cloning can any one highlight me more on this sim cloning and what special equipment one need to perform sim cloning

gsmdreams
01-27-2005, 10:21
You need
1. Any equipment which is compatible at least to pheonix, smart mouse and JDM programer.
2. Software such as simscan, Simemu, woron scan, cardinal, simmax, etc.
I mean any software you can use to scan the card for the KI code.
3.Blank cards prefarably greencard2 (12 in 1) I here there is now supersim(16 in 1) but I personaly have not seen one.
4. Last but not least you also need the brain to know that your card is Comp128V1 .

mktron
02-04-2005, 08:24
I have 16 in 1 card reader/writer ...as shown below
http://www.cellsina.com/images/sim_tools/16_1_sim.jpg

so, I can get IMSI and KI of the card...


my question is 'can I use the reader/writer to write into normal greencard?'

thx

sonic

danilo_nop
02-27-2005, 22:37
only eeprom, for pic you need other device

mktron
02-28-2005, 01:58
ic//thx for t reply..

ponetec
02-28-2005, 03:14
can any one explain me what is sim cloning?

deepakrathore
03-21-2005, 06:31
pls tell me i want to used mmc read/writer after some modification for sim reda writer pls help me

Shooty
04-28-2005, 11:40
What does sim cloning do? i mean as i read on this forum i think sim cloning means cloning a sim, then using the cloned sim on the same number but can u please tell me wot is the advantages?? or if i am missing something plz help me out or atleast give me a link where i can find a brief discription about this.

^NaT^
05-10-2005, 11:55
Hi.
I'm junior for simscan. :(

You need
1. Any equipment which is compatible at least to pheonix, smart mouse and JDM programer.


1.What is pheonix, smart mouse and JDM programer? IS sim reader?

You need
4. Last but not least you also need the brain to know that your card is Comp128V1 .


2. What is Comp128V1.

My objective is read KI and IMSI from sim card and insert this value to patch.
And apply this patch to my phone.
please recommend me for step of reading KI and IMSI.
thx a lot.

muskan_masoom
05-10-2005, 20:35
please tell me what is sim cloning
how can i do that
is it possible to clone different services sim in one
'how they work?
is all work at a time or one at a time
plz tell me all

kassir
05-12-2005, 01:05
can some one who have a basic knowledge about sim cloning write a tutorial on this topic, i as many others here don't know exactly what this art is about, any advanced tutorial/links and resources will be appreciated
thanx in advance :D

CH@IN
05-13-2005, 03:21
This will not be a guide of what sim cloning is, but since I am using this very nice piece of Software for years now, I will try to introduce it to you.

Sim Cloning means creating a copy of the Original Sim-card. Some of you might ask, what are the benefits of making a clone of your original Sim Card:

-Can I use both cards at the same time, so that I can have two phones at different locations?

=No. You can ONLY have one card active otherwise your Netwoek provider would notice 2 copies of the same Number and might deactivate your account. You should also consider, that some logical conclusions are made by the Network Providers like this: You can't be in France and few minutes later activate your Clone Card in Brazil. The Network Provider knows the Time that would be needed to travel from one place to the other one.



-If I have the original Simcard and the Clonecard active, would both telephones ring and can I receive SMS messages on both phones at the same time?

=No. Only one device would ring, more specificaly the telephone that replied first to the call by the Network. The same happens with the SMS's.


-Can I have more numbers than one in the same phone at the same time?

= Yes and No, the "Simemu-card" can store up to 10 different phonenumbers. But,...they will not be active at the same time. Only one number is registered to the Network Provider. The switching between the different numbers is done through a smart menuitem in your phone.

-How do I write on my simcard the other 9 numbers?

=You can NOT use your original simcard and make changes on that card to support more numbers. Instead you need to find a "Programmable Card" and copy the Firmware of the "SIMEMU" on it. These 'empty' programmable cards are called "Silver card" or "Green card" according to their Processor (CPU) and the Memory Capacity.


-What do I need to make a clone of my original card?

=That is not quite easy any more since most of the Original Sim cards are made "Copy Proof". This means that you are not able to read the necessary information out of them to use for your clone card. This procedure requires experiments with your Original Sim Card which might end into a destroyed Original Sim-Card. You will have to run a Software that will "brute force" the information out of your card, but the totally allowed read attempts are limited and will end up into a destroyed Card. Imagine the Hangman game with a Veeeery long word to guess :)


-Why would I want to make a clone of my card?

= There are many different opinions on that.
1) You can have a backup of your card in case you loose your phone
2) You can use the same Phonebook on all your numbers on the Sim in your cloned card.
3) You can have a spare phone in your car in case you would forget your phone at home. Just ask your wife, neighbor or dog to turn it off for you.
4) You can hide a second phone number from your wife without her knowledge ;)
5) You can draw the attention of all your friends with new telephone devices although you appear with an old cheap one.
6) You can have different Network providers on the same clone *but only one will always be active.
7) You avoid destroying the contacs of your expensive phone due to card switching in case you need to change cards because you don't want to carry your P910 to your job.
8) You can ask your Brother, Dad or Friend to make a clone of a new card and send you the "Ki and IMSI" through E-mail or Telephone. You can enter this info into your phone by just typing it like a sms message.


there are many more reasons I can't think of right now.


-Is the card cloning expensive?

= You will need some equipment for the programming of the clone and the reading of the original card. And you will need an empty Pic card (Green or Silver). The whole equipment should cost you less or more 40 Euro, Remember, never give away your simcard to somebody else to do this task since he will keep a copy of your simcard. The only info he will need to write down are few numbers.


Hope this little info was enough to make you decide if you want to clone your card or not. Please remember also, this cloning procedure is not very new. You should first READ through the Forum and find similar questions with yours before starting a new thread. Make a search and go beyonf the 30 last messages limit :)

Good luck and happy cloning

Ch@in

cdee
05-13-2005, 13:49
@CH@IN
very informative. many thanks.

redhata
05-13-2005, 14:48
@chain
thank you!!!

^NaT^
05-29-2005, 14:55
@CH@IN
Thank you very much. :)

itchat
05-30-2005, 14:29
very informative sir, you had enligthen some of the black side about sim cloning.

TA1754
05-30-2005, 20:36
How can I determine what card I have & if it is Comp128V1 , I have had my card since 2000-2001, I have T-mobile service in the US.

nabilaj
05-31-2005, 01:21
Hi CH@IN,
I would like to know some info from you or anybody who can help.
I have CASS interface 2 with add-on, what i want to know is will it work with other softwares that the one that can be downloaded from their site ( http://www.duolabs.com )
Thanks in advance...

karouk
05-31-2005, 01:44
@CH@IN

M8 you are such a Gentelman

CH@IN
05-31-2005, 20:15
How can I determine what card I have & if it is Comp128V1 , I have had my card since 2000-2001, I have T-mobile service in the US.

Unfortunatelly, as far as I know there is no way to see the difference between a V1 and a V2 card. You will have to try the experiment of brute forcing.

If the first pair won't show up (totally 8 pairs are calculated), than you can stop your search... you will have a V2 card.

CH@IN
05-31-2005, 20:19
Hi CH@IN,
I would like to know some info from you or anybody who can help.
I have CASS interface 2 with add-on, what i want to know is will it work with other softwares that the one that can be downloaded from their site ( http://www.duolabs.com )
Thanks in advance...


A Cas interface is used to program the firmware inside of a satelite CAM. Although it might deal with programming of a CPU, it is not suitable to program a Green/Silver Card.

I am sure you own a Pic-card programmer aswell (in case you weren't using a matrix cam and have entered the keys only by remote controll). If not, they are quite cheap meanwhile and available everywhere Sat equipment is sold.

nabilaj
06-01-2005, 03:44
Hi CH@IN
tnx 4 replying. It's true what u said about the cass but it's not limited to program the firmware inside the sat CAM... it has an add-on where you can program fun cards, gold cards... the software that i downloaded from their site also can read GSM card & i even tried it, it can read the ICC#, IMSI#, Key KC#, TIMSI#, TIMSI Time, LAC# & Network#
but nothing else can be done. Just copy edit & save the SMS & phone book.
So as i was asking can i use any other softwares for GSM using USB as it is connected via the USB port.

CH@IN
06-01-2005, 11:40
Hi CH@IN
tnx 4 replying. It's true what u said about the cass but it's not limited to program the firmware inside the sat CAM... it has an add-on where you can program fun cards, gold cards... the software that i downloaded from their site also can read GSM card & i even tried it, it can read the ICC#, IMSI#, Key KC#, TIMSI#, TIMSI Time, LAC# & Network#
but nothing else can be done. Just copy edit & save the SMS & phone book.
So as i was asking can i use any other softwares for GSM using USB as it is connected via the USB port.


Ok, if you can program Fun/Gold cards with it, then you can program Sim-emu on a Silver/Greencard with it aswell.

In order to read the ICC, IMSI,... your programmer does supports serial communication with the CPU too. We don't know if the Crystal inside your device is limited to the standart 3,579 Mhz or if it supports higher transfer rates, but this would only mean your device will read little slower the "secret Ki".
Most probable it is compatible to a Phoenix device. If yes, any software should work in order to read and calculate the Ki too.

Download Woron_scan and give it a try. ;)

Good luck

Ch@in

nabilaj
06-02-2005, 01:03
Thanks for all the info CH@IN
but from where i can download Woran i tried in this forum but could not found it all was in german i think even in gooogle also!!!!!????

CH@IN
06-02-2005, 03:42
Thanks for all the info CH@IN
but from where i can download Woran i tried in this forum but could not found it all was in german i think even in gooogle also!!!!!????


Enjoy Woron_Scan Version 1.09 ;)

http://www.kievsat.com/pafiledb/pafiledb.php?action=download&id=135

Ch@in

kassir
06-02-2005, 16:43
well illustrated, thanx man, but I still want more :D

ongksj
06-02-2005, 16:49
hi, i'm new on sim, just need to know, how many types of sim and usim card are there? and can u clone usim card as well? thanks!

nabilaj
06-03-2005, 01:46
Thanks CH@IN
Any info of forums that deals with SAT card cloning ?

TA1754
06-03-2005, 05:55
Will Woron_scan also work with Supersim reader-writer as well?

CH@IN
06-06-2005, 07:16
Thanks CH@IN
Any info of forums that deals with SAT card cloning ?

There are many sites out there that deal with Sat card emulation. This site is restricted to GSM only.

Please use Google to locate a relevant site.

Ch@in

merlin123
06-06-2005, 19:30
Thanks Chain for the info u've provided, it's riveting.

I want to get into this cloning but just need to know a few of the basics.

Last week i bought infinity usb phoenix programmer with titanium cards. Will this allow me to clone sims? using some of the software mentioned, are these software compatible with xp pro?

Will the titanium cards allow me to program my sim info on them, or are they purely for cable and sat use?

I also had a friend who had a cloned sim. it was wicked. The sim was a vodafone(UK) sim. however the number and network provider was o2. when he'd call you from the number his called id would appear but when u call the number back it says the number doesn't exist.

Well anyway to cut a long story short, he was able to make unlimited amount of calls without the network realising.

How was this possible and can it be done.

Unfortunately the stupid idiot forgot the phone in his car which subsequently got broken into and the phone was stolen.

Bet the idiots that stole the phone didn't realise what they had in their posession.

Is there anyway you can obtain ki's without haiving the original sim in your presence.

can you obtain ki's from site eg underground sites etc????

please help and advise.

CH@IN
06-06-2005, 22:59
Thanks Chain for the info u've provided, it's riveting.

I want to get into this cloning but just need to know a few of the basics.

Last week i bought infinity usb phoenix programmer with titanium cards. Will this allow me to clone sims? using some of the software mentioned, are these software compatible with xp pro?
Your programmer is suitable to work with Woron Scan to extract the key (phoenix compatibility) and you can use any program (the one with your programmer) to write the sim-emu firmware on the Chipcard. Will work on XP, too.
Will the titanium cards allow me to program my sim info on them, or are they purely for cable and sat use?
Titaniumcards are different, they have a specialized CPU to assist in fast "crypt/decrypt" procedures. The GSM Sims usually don't have strong crypt/decrypt requirements so this card is not usefull (like driving a Porsche in a village). The CPU is not compatible neither to the 16F877 on silver/green.

The chipcard you should get is a silvercard or a greencard (greencard if you need more capacity for SMS and phonebook entries). Just be aware, the more you store on a card (phonebook entries, many SMSes) the longer the card will need to "boot" in your mobile (i.e. during switching of the numbers).


I also had a friend who had a cloned sim. it was wicked. The sim was a vodafone(UK) sim. however the number and network provider was o2. when he'd call you from the number his called id would appear but when u call the number back it says the number doesn't exist.

Well anyway to cut a long story short, he was able to make unlimited amount of calls without the network realising.

How was this possible and can it be done.

Unfortunately the stupid idiot forgot the phone in his car which subsequently got broken into and the phone was stolen.

Bet the idiots that stole the phone didn't realise what they had in their posession.

You will hear different stories of free calls, most of them are lies though. If you would own a Network, would you permit people making free calls because you were to stuipid to notice? I don't think so.

But...there do exist some subscriptions for people working in Network companies with unlimited free calls. You can theoreticaly make clones of such a card and share it with your friend having incoming calls blocked,... but... who has such a friend and would he/she share the card with you? Remember you are NOT supposed to activate clone and original card at the same time. (Risk of having such a great account deactivated)

Is there anyway you can obtain ki's without haiving the original sim in your presence.

can you obtain ki's from site eg underground sites etc????

please help and advise.

There are some studies of extracting ki's with many different means (by listening to the traffic between card and Network antenna i.e.) This is not very easy though and requires good (expensive ;) equipment. If you want to read more about this stuff, check out the link on following post: http://forum.gsmhosting.com/vbb/showthread.php?t=210405


And, last but not least, why searching for ki's from underground sites... You gain more from Underground C redit C ard sites... That is the same type of stealing... Just kidding. This forum is not meant to provide access and ideas for any illegal action ;)


Ch@in

merlin123
06-08-2005, 19:03
Thanks for the reply ch@in,

I'll give that woron a try. I have also bought a usb reader/writer as seen on sim-max.org.

I have tried to scan a uk o2 genie sim card, however when i tried to do it not only does it take ages but it gave me a msg saying that it's virtually useles trying to extract the ki at bytes.

plus i get a message telling me there's a pc key error??

what does this mean?? enlighten me???

CH@IN
06-08-2005, 21:35
The extraction of the 8 key pairs takes a lot of time. This is normal, but if the first pair won't show up after maximum 2 hrs (3.57Mhz crystal) (like in your case) you have most probable a V2 card. This cards can not be cloned (yet).

Please be aware of the limitation of reading attempts of the newer cards. In order to read succesfully an original sim-card, it might exceed the maximum permitted reading attempts... resulting into a destroyed original card. Some software have a protection to avoid exceed this limit...(it just would stop and warn you) but it can be bypassed. There used to be a great software out there called Cardinal68 from mfgware which extracted the key but there was no automatic "STOP" before exceeding that limit.

Please don't blame me or anybody if this will happen to you. This is the risk of this hobby. By the time you would have extracted the Key, you would not get worried about damaging your card anymore as you could make as many clones as you want.

I don't know what the error message on your pc is... but always take them serious ;)

Regards Ch@in

merlin123
06-16-2005, 18:16
Thanks for that chain,

Are there any uk cards currently on the market that i can clone???

Shooty
06-17-2005, 13:35
Thanks alot Ch@in that was enough.

minosat
06-20-2005, 21:55
@ CH@IN i remeber a doc "sim4dummies" do yuo know? Where i can see?

Thk

CH@IN
06-21-2005, 08:34
@ CH@IN i remeber a doc "sim4dummies" do yuo know? Where i can see?

Thk
There are many Step-by-Step manuals available when you search with Google. I would have included a link here, but most of them have advertisement on the pictures to buy "READY PROGRAMMED SILVERCARDS" that contain already the SIM-EMU program on them.
Daniel (the programmer of Sim-Emu) does not want this type of distribution of his Software. I accept this and therefor you will have to make the search yourself.

Trust me, once you have the correct programming equipment and your card is an 'old' V1 type, you can very easy make your clone even without a dummy manual. Don't buy the ready programmed silvercard. All the fun on the whole procedure is the "I did it myself". Even if you have killed an original card or two. :)

Silvercards are programmed on a daily base by many 100.000 people. Just look / search in the Sat scene and you will see.

Keywords for google search: Silver program loader FAQ

And one last tip from me, try using MORE the capabilities of the search engines. You should use more often the Image search functions.

http://images.google.com

If you enter there words like: simemu ki imsi .... you will see immediately who has the information that are of interesst. I bet, most of the readers of this thread would not know about this feature of google.

Go out there and have fun

Ch@in

dominicanodcora
03-04-2006, 15:40
-Is the card cloning expensive?

= You will need some equipment for the programming of the clone and the reading of the original card. And you will need an empty Pic card (Green or Silver). The whole equipment should cost you less or more 40 Euro, Remember, never give away your simcard to somebody else to do this task since he will keep a copy of your simcard. The only info he will need to write down are few numbers.



Ch@in

where can i get this 40 euro equipment???

Gsm Solutions Ltd
03-04-2006, 16:49
where can i get this 40 euro equipment???
Help guides regarding sim cloning can be found here
http://www.freewebs.com/simcloneinfo/
also word doc guide at this link
http://www.freewebs.com/simcloneinfo/Sim%20Clone%20Guide%20By%20Gsm%20Solutions%20Ltd.z ip
it may help you get started
http://www.freewebs.com/simcloneinfo/mm2gold.gif
WBR
Gsm Solutions Ltd
http://www.GsmSolutionsLtd.com

garyots
03-04-2006, 17:10
hi i got supersim 16 in 1 with sim scan when i scan my original card then when finish my original card got problem i mean i put the card into the phone it says emangency call only...wat is the problem???

thanks

CH@IN
03-05-2006, 13:42
hi i got supersim 16 in 1 with sim scan when i scan my original card then when finish my original card got problem i mean i put the card into the phone it says emangency call only...wat is the problem???
thanks

According to your description, I think you run into the A38 limit: Every newer card has a limit in how many times it will allow to "execute" the A38 function. It might be 15000 times until about 65000 times.

In order to brute-force extract your secret Ki, you need to execute this command several times (I compared it in an earlier post with the hangman game). If you run out of allowed "guesses", the card blocks permanently. If you are lucky, you will have your Ki meanwhile, if you are not... you might have i.e. only 7 pairs out of 8 that are required to make the clone. :(

In the normal life-cycle of a sim-card, this command is executed once every time you switch on your mobile or change the network antenna to a different network. This would still give a quite long life to a SIM card.

In order to "find" the Ki, you make use of this same function of the Sim-card. If you are lucky, you will manage to find the Ki with about 12.000 executions... you should NEVER ABORT the extraction of the Ki, since the try's are limited and you would waste your allowed attempts. You should neither run the brute-force extract programs again and again just to demonstrate how they work to your friends.

The A38 limitation is usualy only available on newer simcards (end of 2003 and later) and mainly on prepaid cards. It is usualy safe to run at least ONCE a program like WORON SCAN to get the Ki (if you happen to still own a comp128V1 card).

Some older programs that we used in the beginnings of sim-cloning (2003) to find the Ki (like Cardinal 0.68) make not an efficient use of the "collision Brute-force technique" and run easier into this A38 limitation (They just need more guesses than the newer programs). Please consider to use software like woron-scan, simscan or x-sim to do this task instead (All programs mentioned are FREE of charge!!!!!). With cardinal 0.68 it is more probable to destroy your original sim than with any of the other programs I mention above.

Even after a succesfull Ki extraction you can still use your original simcard... it just might get "broken" one or two years earlier ;)
But,... since you will have by that time your secret Ki, you can make a new clone out of it so you won't feel sorry about loosing the original sim :)

Best Regards (as always)

Ch@in

garyots
03-05-2006, 18:27
@CH@IN

how do i get this woron-scan, simscan or x-sim ???i did download woron but n i did find ki but how to write to the clone sim card???i can save but its not a dat file...tell me more how to do it n with wat program i can write to the clone sim .....

thanks

CH@IN
03-06-2006, 18:57
woran will tell you the Ki and the IMSI number.

i.e. Ki: AB 21 BA FF EC 21 32 45

and the the IMSI: 892123124132123

If you couldn't find the Ki, it doesn't make any sense to program a silver/greencard.
If you could find the Ki, download the Sim-emu configurator (Read the sticky threads)

You can enter the Ki and Imsi information even through the phone menu.

Good luck

garyots
03-07-2006, 16:15
ok i understand already how to used woron n sim emu....but my problem is my clone sim is SUPER SIM 16 in 1 n when i want to write to the clone sim its says insert gsm or sim emu card...this mean my clone sim card wont work with sim emu....n in the clone sim u cant change any configuratation only u can used the program to write to it.....


i did used the original software to read then original 64k sim n it find the ki n when i write to it no problem but when i put it in the phone its says invalid sim....is there anyway to make it works???or its my sim card is not supported??

i see in some website its says to compare to v1 n v2 is the phonebook capacity... the v2 is phonebook capacity is 250 n the v1 is less then dat...my phone book is 250 so is that the problem???

thanks

garyots
03-07-2006, 18:10
well i did try woron to find ki n sim smith to find iccid n imsi n used sim smith dat miner to key in manualy the ji,iccid and imsi n the original program to write it....it works.....but i did try another telco after i read the ki with woron my original sim card dead...wats the problem???i change the sim card 3x already ....everytime fine the ki the sim will be spoil...so how to find the ki without spoiling the card???

mryashjain
03-22-2006, 22:04
thanks a lot dear for this informetation

susanta_gaan
03-23-2006, 10:34
which one is the best tool for sim cloning

CH@IN
03-23-2006, 18:27
tool?

If you mean software, I would suggest Woron-scan or X-sim as they make the best use of the collision rules (they need fewer attempts to find the Ki).

The hardware to use is a 'phoenix' compatible device (initially seen by Markus Kuhn) or a compatible device to it. (there are rs232 and USB versions available and can be build on your own as an experiment.) This device can also be used for reading the content of "Telephonecards".
If you need to program an empty chipcard (Silvercard or Greencard I or Greencard II) with "Sim_emu's firmware" you will need a pic-programmer, too. Check out the online satellite equipment shops for this kind of hardware or buy a device that can do both (Phoenix and Pic-card programmer combination).

Always remember, the simcard you are about to clone MIGHT NOT BE COMP128V1 which means that you won't get any info out of it although you might have bought the best equipment available on the market :)

Also, there is always the risk of destroying the original sim-card... If you can't get a replacement for your original card for a small amount of money AND you still need the card in case it won't work out for you, then better don't think of trying to clone it :)

Best regards

Ch@in

sallupat
03-25-2006, 16:32
sir where can i purchase the hardware & gold card or blank card?
plz give me the address

CH@IN
03-25-2006, 17:31
sir where can i purchase the hardware & gold card or blank card?
plz give me the address

Search any online satshop on google.yahoo.msn etc

try: silvercard, greencard, pic-programmer, phoenix, buy, shop

http://www.google.com/search?hs=c6&q=silvercard+greencard+programmer

jaisal
03-26-2006, 11:48
sir,
I have two sim card with diffrent network . can i add one number to another card? or i must need a blank card ?....

CH@IN
03-26-2006, 12:56
sir,
I have two sim card with diffrent network . can i add one number to another card? or i must need a blank card ?....
You need a "new" special "sim-card" (smartcard with firmware like sim-emu on it) where you will write the info that you get from your two original "normal" simcards.

You can NOT CHANGE the Ki (serial number) on any "normal" simcard (the one you get from your network provider).

Regards

CH@IN

CH@IN
03-26-2006, 13:12
After multiple request from different NEW forum-members, here is a direct link to WORON-SCAN:

Woron Scan 1.09 865 (http://vb.kievsat.com/attachment.php?attachmentid=136) from the Kievsat forum.

Please remember, there is no way to know if this program will work for you. It finds the Ki ONLY on comp128V1 cards. It may even destroy your card if used multiple times to search the Ki.

There is no manual with this software because it works as easy as: start it and wait for the "magic" numbers to appear (after couple of hours).
If you get a message that says something like: Couldn't find Ki.... then you have a new generation simcard that can't be cloned.

Enjoy life people

Regards

CH@IN

(link might not work the day YOU read this :) )

@SIR_GRAHAM: please post a link to your X-sim, too :) Thanks

sharaz191
03-28-2006, 09:51
Is there any SIM EMU Application for symbian phones

Ivan :)
04-12-2006, 23:00
one maybe stupid question...
is the ICCID same thing as KI?

CH@IN
04-13-2006, 10:20
one maybe stupid question...
is the ICCID same thing as KI?

No, the ICCID is not the same as the Ki. You can usualy read the ICCID on the printed original simcard and its a "visible" and a "known" serialnumber of the simcard (see picture 8938001......). The network-provider can even access through air and ask for the ICCID but usually they don't do that (not necessary for gsm authentication). They would "maybe" ask for this ICCID only to find a clone-card among the network. SIM-EMU has in its latest version the ability to keep this ICCID info too (I am running a clonecard succesfully over 4 years now and never had to store the ICCID on the clone card... still working)

http://www.kievsat.com/dualsim/images/umcpodl.jpg

The Ki is a secret hexadecimal number (01 23 45 67 89 AB CD EF) that can not be found anywhere on the simcard. Its hidden deep inside the Sim-card "chip" and will never pop-up just by using a simcard reader. The only way to get this info is through brute force and use of collision rules.

As you can see the possible combinations for this Ki are: 255 x 255 x 255 x 255 x 255 x 255 x 255 x 255 which means there are 17.878.103.347.812.890.625 combinations. If you would try out all of those it would take you a whole life :) The Lotto combinations (6 out of 49) are compared to this an easy game (only 14.000.000 combinations).

Regards
CH@IN

stylius
04-13-2006, 11:36
When was invented sim v2 sim card? When gsm operator began to use it? I have 2002 years sim card, but can not clone...

oludayo
04-13-2006, 13:11
chain
you've really been a sorce of great information on this subject. I am interested interested in this subject and would want to clone my sim very soon. thanx a lot.

Ivan :)
04-13-2006, 21:09
thanks ch@n,
ICCID is 19-digit decade number... in hex format it has 16 digit same as KI! so i thought there might be some connection...

second thing, when you legally copy your sim card in t-mobile for some purposes (of course after that, they destroy your original one)... They use the t-mobile SIM reader, and the simreader only copy IMSI and ICCID from original sim card! Nothing about any KI-s...
Is it, that in this way a network operator must change some information about my new sim (or old sim) in their database or… what???

CH@IN
04-14-2006, 10:23
thanks ch@n,

second thing, when you legally copy your sim card in t-mobile for some purposes (of course after that, they destroy your original one)... They use the t-mobile SIM reader, and the simreader only copy IMSI and ICCID from original sim card! Nothing about any KI-s...
Is it, that in this way a network operator must change some information about my new sim (or old sim) in their database or… what???

Yes, they update and change their database. The Ki on the new card they give you is ALWAYS different from the original card.

Regards

Ch@in

CH@IN
04-14-2006, 10:45
When was invented sim v2 sim card? When gsm operator began to use it? I have 2002 years sim card, but can not clone...

Its not just the date that is important about when the "not clonable" cards appeared:
In the very beginning when GSM started, every network had the right to use their very own algorithm (like the comp128V2 i.e.), but... most networks thought that it's secure enough to use the "default" algorithm (comp128V1) because nobody thought at that time, that it could be cracked as it was developed "secret" ... so they ended up with the comp128V1. At the same time, some providers like Vodaphone NEVER adopted this algorithm but used a different one... therefore they were not troubled when the first clone of the comp128V1 appeared.

Prepaid cards are sometimes different then subscriber cards. They might still have the same algorithm (comp128V1), but most have also the A3A8 limit activated. (After 20.000 - 65.000 authentication attempts the card will block). Whenever you turn off your phone or change the network-antenna, one of those attemps are used up. (when you are in the process of cloning your card, you make two or three attempts every second ... the hangman game I was comparing with in an older post).

Now there are two options: 1) If you have a V1 card and your software is smart enough to make proper use of the collision rules (like woron-scan or x-sim i.e.) than you might find the Ki after less than 35.000 attempts,... but, if your card is older and you have already used up half of the allowed authentication attempts, than your card might get "BLOCKED" before you find the "whole" Ki from that card.

2) If you have a V2 card (most common in our days) than you will not find any part of the Ki as the collision rules (this is what the brute force crack is based on) is "deactivated".

All the info I provide are only for the purpose of explaining on an easy way the technique. They might not be accurate and definately there are better ways of explaining this stuff. Also please remember that cloning is illegal in many (most?) countries.... you are on your own on that.

Regards

CH@IN

seros
04-20-2006, 03:09
Hi i wanna begin to try to clone my SIM but i'm having some problems with finding the Sim reader, because i find one that the seller says that the device can read SIMS and can change data like phonebook , dialed calls and all that stuff, but what i wanna know is that kind of divice work to clone SIMS or i gonna need another divece to write the ki and those thing in the cloned sim, Because the seller don't know if the divece work for that.

Thanks for your help, and sorry if my english if my english is poor...

CH@IN
04-20-2006, 12:59
There are two types of programmers:

1) The "ONLY Sim-card readers" (for phonebook, telephonecard, Bankcards, etc) which can ONLY be used to READ/WRITE a simcard that ALREADY CONTAINS A PROGRAM/FIRMWARE like our original GSM-SIM-CARD (it wouldn't work in our telephone, if there where no program on it, right? ;) ) ... this reader/writer only COMMUNICATES with the chip, BUT... this Sim-card reader can NOT PROGRAM A SIMCARD when it has no FIRMWARE ON IT. (i.e. it can't do an empty SILVER/GREENCARD that you will need to make the clone on). You can use this device to find the Ki from your original Sim-card. Make sure this device supports the PHOENIX/SMARTMOUSE modes in order to make sure it will be compatible with all the famous freeware "Ki-scanning" software like woron-scan, cardinal, x-sim, simscan etc...available on the internet. You recognize a phoenix device on the crystal (3.5Mhz or 6Mhz)...(that little shiny metal thing in the right bottom corner ;) )

http://www.tvro.com.tw/main5/maindate/web%20bbs/PHOENIX.JPG

You can even build such a device on your own. It requires only few components and its a great thing to start to play with. The price for such a device should be around 10-20 EURO... available usualy for RS232 (serial port) or USB (but always with serial support drivers).

If you want instructions on how to build one on your own, CLICK HERE (http://www.technick.net/public/code/cp_dpage.php?aiocp_dp=cir_smartcard_rw)




Most "simclone packages" are sold with a simple PHOENIX device (ONLY SIM-reader/writer). This packages can NOT PROGRAM AN EMPTY silver/greencard,... only the "ready programmed Sim-clone firmware containing cards".
http://www.kievsat.com/my/products_pictures/schitivatel.JPG

2) The best solution are the All/in/one "Smartcard-reader (phoenix) + Smartcard-Programmer" devices (see picture below) that are capable to do ALL kind of SIM-CARD things. With this type of hardware you can program "EMPTY" clonecards and put your OWN FIRMWARE on them. (This equipment can be usually found in SATELITE shops).

Just make sure to buy hardware that will support both:

-PHOENIX/SMARTMOUSE MODE
-PIC BASED CARDS (SILVERCARD, GREENCARD,...) PROGRAMMING
-(optional ATMEL BASED CARDS (Funcard,...) PROGRAMMING

I would suggest to buy an INFINITY USB PHOENIX device (abt 40 EURO) as shown on the picture. This device is capable to do all smart-card stuff and will be useful for future projects.

Some info about this programmer can be found CLICK HERE ... (http://www.programmation.fr/FR/plusdinfo.php?idprod=981)
http://www.programmation.fr/Commun/Plusdinfo/981/infusbphoenSmall.jpg

and an inside picture:
http://www.maxking.com/shopcart/files/images/infinity_files/infusbphoenix4l.jpg

But you can use any other device, too. Just make sure it will do what you need it for.

If you are planning to do just this one cloning, than better try to find or borrow some equipment from a friend or neighbor cause maybe "cloning" won't work for you anymore as clonable cards become more difficult to find in our days.

My rule of the thumb: if a vendor doesn't KNOW if his device is capable to do stuff... than it can't do it.

Regards

CH@IN

bhang
04-20-2006, 20:04
xsim killed a 128v1 sim by using all the a38s and i didnt even get 1 byte... im not sure it wasn't my fault, but i read up and followed the directions as best i could.

I found a woron scan that shows v 1.0.6 on the title bar but the meta data says 1.0.0.1 when you hover over the filename with a mod date of 2006. It also says "for Kievsat members" on the title.
I cracked 5 sims last night with this version best time: ~25-30mins, least a38 hits: 3381 (47,540 software), worst time: 45-1hr, worst # of a38s: 30,078

the other W.S. I have says 1.0.0.1 inside and out with mod date of 2004.

I used a violet phoenix 3.686mhz on a p3-1ghz, exploiting US T-Mob sims.

still waiting on my greencard2... 5 clones and nowhere to put 'um,

BhanG

CH@IN
04-20-2006, 23:20
xsim killed a 128v1 sim by using all the a38s and i didnt even get 1 byte...
BhanG

Welcome to the world of "sim-destroying". :p

The latest version of Woron_scan is currently 1.09_865. When you hover on the file, it will report a different version (1.0.0.1) but this is normal. I guess the woron author did forget to change the version number before compiling.

I have repacked "Woron-scan 1.09_865" and attach it to this post as two rar files. (Due to 300Kb upload limit)

Credits go out to the Kievsat Forum for this file.

Regards
Ch@in

CH@IN
04-20-2006, 23:22
:confused: :confused:

2phast
04-25-2006, 23:59
To simplify things a bit, I purchased this kit from Ebay

http://cgi.ebay.com/Super-Sim-Card-Clone-Duplicate-Backup-Copy-Writer-16in1_W0QQitemZ9718084737QQcategoryZ48501QQrdZ1QQc mdZViewItem

It came with all the needed software and instructions for any novice to clone their sim card. The software is setup to terminate the scan before it destroys your sim card.

I was able to discover KI on my T-Mobile sim in less than 25000 attempts. My sim is about 1 year old +/-, not same design as current T-Mobile sim, its the previous gen sim from around 2004/2005.

CH@IN
05-09-2006, 12:44
Be aware,

simson links to webpages with modified "files" which send your secret Ki through the internet.

achin_ji
05-11-2006, 09:55
You need
1. Any equipment which is compatible at least to pheonix, smart mouse and JDM programer.
2. Software such as simscan, Simemu, woron scan, cardinal, simmax, etc.
I mean any software you can use to scan the card for the KI code.
3.Blank cards prefarably greencard2 (12 in 1) I here there is now supersim(16 in 1) but I personaly have not seen one.
4. Last but not least you also need the brain to know that your card is Comp128V1 .
Hello sir
I m new to this sim read/write.

Plz help me in building my concept.

I m student if BTech Compscience and lokking to build program in vc++ to only read sim card how can i do this plz answer me

achin_ji
05-11-2006, 10:14
i hav sim card reader and i tried to read with the file name ////.//com3 using vc++ handler created means some thing is on com3 but when i try to read it nothing has been read so how to read it what dos device name should i used to read it

CH@IN
05-11-2006, 11:06
i hav sim card reader and i tried to read with the file name ////.//com3 using vc++ handler created means some thing is on com3 but when i try to read it nothing has been read so how to read it what dos device name should i used to read it

smartcards use serial communication. they need you (like every serial device) to send a command from your terminal (your pc) and they reply to this command.

These commands are called "APDU" and you can easily locate them on the internet. You could also read the GSM specifications to understand all available commands and their functionality.

A good start would be the homepage of Wolfgang Rankl: CLICK HERE (http://www.wrankl.de/UThings/UThings.html)
and especialy his Tutorial about sim communication with a terminal program: CLICK HERE (ACROBAT READER FILE) (http://www.wrankl.de/UThings/SIM.pdf)
Here you might find your first steps in understanding this procedure.

Regards

CH@IN

achin_ji
05-11-2006, 11:51
Any one plz help me
i just want to read sim card data using vc++
plz helppppppppp

achin_ji
05-13-2006, 06:25
Sir plz help me i m student of engineering college in india and i had to make my final year project on sim card reader i.e in vc++ to only read sim card using sim card reader



plz help me.
achin_ji@rediffmail.com

achin_ji
05-13-2006, 07:00
Sir plz help me i m student of engineering college in india and i had to make my final year project on sim card reader i.e in vc++ to only read sim card using sim card reader



plz help me.
achin_ji@rediffmail.com

achin_ji
05-13-2006, 07:06
@CH@IN
Thank you very much.

but sir i try to access sim card reader using vc++ by creating handler of com3 .

which is created successfully but when i try to read com3 i read nothing

plz help me in reading it plz

plz help me.
achin_ji@rediffmail.com

achin_ji
05-13-2006, 07:09
@CH@IN
Thank you very much.

but sir i try to access sim card reader using vc++ by creating handler of com3 .

which is created successfully but when i try to read com3 i read nothing

plz help me in reading it plz

plz help me.
achin_ji@rediffmail.com

achin_ji
05-13-2006, 09:37
smartcards use serial communication. they need you (like every serial device) to send a command from your terminal (your pc) and they reply to this command.

These commands are called "APDU" and you can easily locate them on the internet. You could also read the GSM specifications to understand all available commands and their functionality.

A good start would be the homepage of Wolfgang Rankl: CLICK HERE (http://www.wrankl.de/UThings/UThings.html)
and especialy his Tutorial about sim communication with a terminal program: CLICK HERE (ACROBAT READER FILE) (http://www.wrankl.de/UThings/SIM.pdf)
Here you might find your first steps in understanding this procedure.

Regards

CH@IN sir i wish to buy the english version of the book did it contain some source code in vc++ to access sim card reader.

plz let me know

achin jain
achin_ji@rediffmail.com

CH@IN
05-13-2006, 10:30
I understand that this project is very important to you, but please don't write in every thread about your proble. You can easily start a NEW THREAD and post your questions there.

I have not read this book, I don't know where to get it from or if it is usefull for your project at all.

Try to locate other sources on the NET especialy in SERIAL PORT COMMUNICATION with VC. Read about the typical baudrate to interact with a smartcard (the phoenix readers have a 3.5 and 6 Mhz crystal... find the corresponding baudrates ...9600)

I don't want to do your homework as this is a project that should make you understand and learn on your OWN what all is about.

I can only offer you a link where you will find some sourcecode with explanations. Hope this will bring you on the right route.

http://www.codeproject.com/system/cserialcom.asp

Good luck

CH@IN

achin_ji
05-13-2006, 13:08
I understand that this project is very important to you, but please don't write in every thread about your proble. You can easily start a NEW THREAD and post your questions there.

I have not read this book, I don't know where to get it from or if it is usefull for your project at all.

Try to locate other sources on the NET especialy in SERIAL PORT COMMUNICATION with VC. Read about the typical baudrate to interact with a smartcard (the phoenix readers have a 3.5 and 6 Mhz crystal... find the corresponding baudrates ...9600)

I don't want to do your homework as this is a project that should make you understand and learn on your OWN what all is about.

I can only offer you a link where you will find some sourcecode with explanations. Hope this will bring you on the right route.

http://www.codeproject.com/system/cserialcom.asp

Good luck

CH@IN sir i know its odd to write in every thread but i m not getting any clue i.e why so plz don mind and plz help me in getting the sample code plz if u can :D

bhang
05-13-2006, 17:28
Sir plz help me i m student of engineering college in india and i had to make my final year project on sim card reader i.e in vc++ to only read sim card using sim card reader



plz help me.
achin_ji@rediffmail.com

not sure what you need but you probably just need a standard ps/sc card reader, then you want to write an app that reads the info from the sim, since pc/sc is the universal standard for comm. between PCs and SmartCards (get it? pc/sc) they are cheap, and mostly used for logon type card systems or to backup phone books and stuff, a phoenix/smartmouse would probably work also...im no coder so I dunno which is easier to interface with

hope i helped

bhang

bhang
05-13-2006, 18:20
Welcome to the world of "sim-destroying". :p

The latest version of Woron_scan is currently 1.09_865. When you hover on the file, it will report a different version (1.0.0.1) but this is normal. I guess the woron author did forget to change the version number before compiling.

I have repacked "Woron-scan 1.09_865" and attach it to this post as two rar files. (Due to 300Kb upload limit)

Credits go out to the Kievsat Forum for this file.

Regards
Ch@in



how do we know you didn't alter it so send our KIs to some former eastern block country.... sike:D

CH@IN
05-13-2006, 22:13
how do we know you didn't alter it so send our KIs to some former eastern block country.... sike:D

1) by checking the MD5 checksum,
2) by using software-firewalls like i.e. Zonealarm to be notified if a program is requesting internet access without reason
3) by trusting sources and reputations ;)

sir i know its odd to write in every thread but i m not getting any clue i.e why so plz don mind and plz help me in getting the sample code plz if u can

Use google or other searchengines. Visit sites with sourcecode under GNU or public domain like sourceforge.net

Check out this site: CLICK HERE (http://www.opensc-project.org/)
This site has the sourcecode for the "phoenix openct project" by Antoine Nguyen.

I'll attach the sourcecode as a rar file to this post. Please respect the Forum rules and DON'T SPAM with multiple repeating messages.

CH@IN

P.S. NO MORE REPLIES FROM ME IN THIS "Beginner to simcloning" THREAD. START A NEW ONE.

maxheadroom
05-14-2006, 08:48
I'm a Sat tester and would like to expirement with GSM.

I've noticed everyone is talking about Pheonix readers
would a simple ISO programmer used for Sat testing do the same thing? Or would a NEXUS (orange/blue) Glitcher be a better device to use and is there programing, pin configuration, POTS setting info for it?

I know that the new Nagra2 SAT cards are much harder to crack altough the procedure is very similar to what was mentioned here with GSM. And same goes for cracking WEP/WPA encryption for WiFi networks by intercepting the packets of traffic until the encryption is broken.

Its a bummer to hear that the sim card goes dead after several attempts.
I was hoping to clone a T-Mobile card for its $19.99/month unlimited GPRS features to be used in a laptop without having the phone nearby or worry that it is on at the same time.

CH@IN
05-15-2006, 08:37
I'm a Sat tester and would like to expirement with GSM.

I've noticed everyone is talking about Pheonix readers
would a simple ISO programmer used for Sat testing do the same thing?

If your ISO programmer is Phoenix/smartmouse based (look for the shiny metal thing (Crystal 3.579 or 6.00 Mhz) I describe few posts earlier above) then YES!!!


I was hoping to clone a T-Mobile card for its $19.99/month unlimited GPRS features to be used in a laptop without having the phone nearby or worry that it is on at the same time.

Yes, this is a typical reason to clone a simcard.
According to other Forum members (read thread: Following cards can be cloned) T-Mobile USA can still be cloned. You can do this experiment with your current programmer and Woron-scan. If you don't get any results with this Woron then STOP RIGHT THERE, don't continue to search any further as you have an UNCLONABLE COMP128V2 card.

Regards

Ch@in

vimafeje
05-15-2006, 12:51
Hi, how do i know if i have an UNCLONABLE COMP128V2 card?
i can´t clone my Portuguese Vodafone sim. i use it in a vodafone mobile connect card 3G. i would love to have free internet in my qtek 9090!

butigood
05-15-2006, 14:54
Thanx a lot. Useful information

KLueT
05-17-2006, 16:31
Hiya Folks,

first of all I'd like to say great forum here, useful info ...

My question is really do I need SIM cloning to change my mobile number entry in "Special Numbers -> My mobile" ?:confused:

The situation is that my UK provider Orange transfered my original mobile number from Vodafone and therefore replaced my temporary Orange mobile number.
When I got the Orange SIM it had that temporary number in the "Special Number -> My Mobile" entered.
Now, that this number is no longer valid, I want to entre my real number in that menu entry.

Problem: My handset SE K750i only gives me the option to View the number, but not edit it ! Do I need to clone a new SIM card, or are there other methods to change that mobile number entry ???

Many thanks for your help.

PS: Orange refuses to issue me a new SIM showing the correct mobile number ...:(

CH@IN
05-17-2006, 20:16
Hi, how do i know if i have an UNCLONABLE COMP128V2 card?
i can´t clone my Portuguese Vodafone sim. i use it in a vodafone mobile connect card 3G. i would love to have free internet in my qtek 9090!

Check here: http://forum.gsmhosting.com/vbb/showthread.php?t=213686&page=2

3G can not be cloned, they use a different encryption

My question is really do I need SIM cloning to change my mobile number entry in "Special Numbers -> My mobile" ?:confused:

The situation is that my UK provider Orange transfered my original mobile number from Vodafone and therefore replaced my temporary Orange mobile number.
When I got the Orange SIM it had that temporary number in the "Special Number -> My Mobile" entered.

AFAIK, you can change this entry on the original simcard with programs like Cardinal 0.99, I don't know what purpose this entry has on the simcard as it is nowhere used.

Cloning a sim means just copying the "serial" number of the original simcard on a clone. It's not a 1:1 copy therefore no other information or area is copied (i.e. the operator specific applications)

I don't know what you would gain if you change the "Special Number" entry on your card, definately you won't get a different (your previous) "incoming" number back... this is only done on the "server" of your networkprovider.

Regards

Ch@in


EDIT: I think you need a direct PC-SIMcard connection for cardinal (AFAIK) with a phoenix or PC/SC device. You can't use a cable directly connected to your phone. But I might be wrong...

KLueT
05-17-2006, 23:14
@ Ch@in Thanks, I downloaded Cardinal 0.99.rar ... Can I use my cruiser fighter cable to do it or my DCU-60 USB cable leaving the SIM in my phone ?

vikbz
05-18-2006, 18:01
damn u off di CHAIN!!!!...heh heh heh tnx man!!!!

daniel mugunde
05-25-2006, 09:45
hey,
how do i get hold of the PHOENIX SIM READER/WRITER?

achin_ji
05-25-2006, 09:46
Hello,

I m an engineeir and i m trying to construct a program in vc++ to read SIM CARD

Though i m able to read ATR frm it And ALSO able RUN APDU on it but i got the prob in APDU as per in gsm 11.11 the format of APDU is

cla,ins p1, p2 , p3,le ,File ID,lc

and Im sending APDU
A0 A4 00 00 02 7F 10
BUT I DISCOVERED THAT THE CORRECT APDU SHOULD BE
A0 A4 00 00 02 R06 7F 10 R04

BUT HOW DO I DESCRIBE 'R06' AND 'R04' IN VC++ AS ALL OTHER ARE IN HEX AND I M SUCCEFULL IN SENDING HEX
PLZ HELP ME

ACHIN JAIN
achin_ji@rediffmail.com

hackit
05-26-2006, 22:57
this sounds very interesting, looks like i have lots of reading ahead of me now.

CH@IN
06-15-2006, 10:34
this sounds very interesting, looks like i have lots of reading ahead of me now. If you like it, just RATE THIS THREAD to make it visible. There are still many repeating questions in the Sim-cloning section that have been already answered here. Best Regards and happy cloning Ch@in

mamo_mogon03
06-18-2006, 10:57
Wow! Very good explaination.

achin_ji
06-19-2006, 08:03
Hello

I m now able to read /write through the Sim card also able to recoverd all the deleted SMS also able to genrate log like sim scan But did any one know abt the concept of Lost /deleted phone book and also abt how to bypass Pin/Puk no . If any one know plz specify


achin_ji@rediffmail.com

mykiss4u
06-20-2006, 21:07
very nice information

mike234
06-22-2006, 15:21
Can you use an clone when your phone is simlocked. Can you use other profider?

CH@IN
06-23-2006, 00:41
Can you use an clone when your phone is simlocked. Can you use other profider?
It depends on the brand and model/version of the phone.
You need to start the phone with a clone of the "locked simcard" and afterwards you can switch through the sim-emu menu to a different provider.
Newer phones like *NOKIA's BB5 do NOT work when simlocked. They reboot when you try to bypass the simlock.

Most SonyEricsson phone do work with cardswitching after the phone was booted from a simlocked number.

Regards Ch@in

@mike234: No, you can't use your Nokia BB5 phone because the newer generation phones are smart and reboot when you try to bypass the simlock through the number switching menu on the clone-card.

Also, vodaphone cards can not be cloned.

mike234
06-23-2006, 14:04
I Have a BB5 phone it is locked to vodafone UK . I have a vodafone card from my country the phone does not accept this card. Can't use sim cloning then??? :confused: :confused:

It depends on the brand and model/version of the phone. You need to start the phone with a clone of the "locked simcard" and afterwards you can switch through the sim-emu menu to a different provider. Newer phones like *NOKIA's BB5 do NOT work when simlocked. They reboot when you try to bypass the simlock. Most SonyEricsson phoned do work with cardswitching after the phone was booted from a simlocked clone. Regards Ch@in

a__
06-23-2006, 22:16
edit.. remove some information.. i correct it and post back for u

a__
06-23-2006, 22:22
I Have a BB5 phone it is locked to vodafone UK . I have a vodafone card from my country the phone does not accept this card. Can't use sim cloning then??? :confused: :confused:

No is not work on any nokia, motorola, i only see on OLD ericsson it work who have bad or no security (can see unlock in eeprom anyway!)

asims
06-24-2006, 14:56
@ Ch@in i need your email address i got really a wonderfull use of sim clonning so i wanna discuss with you about that , my email address is haji_adeel@hotmail.com Contact with me as soon as possible thanks ;)

1105027
06-25-2006, 20:50
can any body tell me the link from where i can get free tutorials on sim cloning

CH@IN
06-26-2006, 07:49
can any body tell me the link from where i can get free tutorials on sim cloning

1st step: Make sure you own an old card (comp128V1). Read through this (thread: following cards can be cloned...) (http://forum.gsmhosting.com/vbb/showthread.php?t=213686)to see if the card you want to clone is listed as clonable. If it is not clonable, stop here :rolleyes:

2nd step: Find necessary hardware equipment (check out this (http://forum.gsmhosting.com/vbb/showpost.php?p=1704437&postcount=64) for an explanation on suggested devices) and use any searchengine to locate an online dealer.
If you ONLY need to check IF you can clone a specific card, then you should ONLY buy or build your own [a mobile to serial cable will do the job, too] cheap phoenix reader [15 EURO] and download WORON-SCAN (freeware) from this (http://forum.gsmhosting.com/vbb/showpost.php?p=1705590&postcount=66) thread.

3rd step: If you were succesfull with step 2, then you should have the IMSI of your simcard (something like 08 29 12 34 56 78 99 01 23) AND the secret Ki (something like A1 B2 C3 D4 E5 F6 77 88 99 00 AA BB CC DD EE FF). To find the Ki is the difficult part because it takes 1) luck [most cards don't use comp128V1 anymore], 2) time [to extract the Ki can take 30 minutes up to 12 hours], 3) nerves until you see it worked [many times the original simcard gets destroyed during this procedure]. Also, during scaning for your Ki number with WORON SCAN, you will notice that the Ki will show up in PAIRS 1st with 9th, 2nd with 10th, 3rd with 11th and so on.... There are totaly 8 pairs to find, smetimes the original card gets broken when you only have half of them. :(
If you can't find a replacement of the original simcard for little money... just in case it goes wrong... and you don't want to risk a sim-card's life, better don't start with step 2 and stop here :rolleyes:

4th step: Buy an "empty" SILVER-/GREEN-/ or GREENCARD2 (brandname of these chipcards is www.microchip.com (http://www.microchip.com) NOT ATMEL AND NOT FUNCARD's). You will also need a PIC PROGRAMMER now, (link available on step 2). The best equipment to buy is a combination of both, a phoenix AND a pic programmer. Don't spend more than 40 Euro for the programmer and not more than 10 Euro for the empty Silvercard.

5th step: Download sim-emu's firmware (it's free for "not selling this firmware" people, but read the copyright included anyway), and read the instructions on sim-emu's homepage (http://simemu.cjb.net/) (see the sticky threads) for instructions how to burn this on your empty card. Sim-emu's firmware comes with a configurator software (currently version 2.1) where you can enter the results of your scans (The IMSI and Ki from step 2), and some other stuff like how many SMS/ADDRESS BOOK you need for your sim-clone. But,... you can also make a clone without entering this data into the configurator because you can type the IMSI and KI's directly into your phone once the sim-card is inserted into your phone. It has it's own sophisticated menu for this purpose.

6th step: Share your experience here on this board and don't blame me if you destroyed a simcard or two (The chance of destroying your sim is VERY HIGH, SO BE WARNED!!!) This is the risk of this hobby. Never let somebody else do this cloning for you because (s)he might keep a copy of the numbers for him(her)self. NEVER publish any found KI number on any forum. If you have questions about them, use FAKE ONES. Never try "free" Ki's offered in any thread... they are 99% stolen through TROJANS from uncarefull 'newbies to sim-cloning'.

NEVER USE ANY PROGRAMS THAT ARE NOT FROM THEIR ORIGINAL SOURCES. Most of them contain SPY/TROJAN/VIRUSES and send your private data to the underground. AND LAST, Don't download anything that wants you to believe you can clone a Comp127V2 or V3 card. THIS CAN NOT BE DONE! IT's ALWAYS FAKE AND CONTAINS VIRUSES.

Disclaimer: Cloning/ Reverse-engineering of sim-cards is NOT LEGAL. Be sure to make this only for experimental purposes, never operate original and cloned card at the same time, ... bla bla bla. Read the whole thread for more info.

Regards

Ch@in

Feel free to redistribute this on any site as long as you keep a link to the source. Thank you.

murthyy
06-30-2006, 12:37
very good tutorial mr chain thank you

wasabe64
06-30-2006, 23:04
Great thread! Thanks for the helpful info Ch@in!

.::MoBiLeDoC::.
07-13-2006, 16:24
Out of curiosity and on the topic of cloning can the sim cards of some unlocking software security protection be cloned?

For example some software comes with a usb sim card reader with sim inside for security protection can this card be cloned. also y i ask this is because i have lost many of these usb readers which cost a lost of money, so if we can clone to keep a copy just in case.

yanky_1586
07-18-2006, 12:14
thank you very much this is very good answer to my questions

lp4u
07-21-2006, 13:42
just one questiuon chain : what u do with ur cloned sim and with the original one?? it's quite challenging to clone a sim card but whats the use after that?

harshad_gohil
07-21-2006, 14:30
from were i get cloning box and blank sim also cost

veli
07-29-2006, 22:49
good explanation
good luck.

raufsagar
07-30-2006, 08:48
Hello Ch@in

Very Useful Information About Sim Cloning? Can You Provide Some More Details..........
Weldone....................

abbe
08-13-2006, 17:33
Hallo ch@in
my first step is correct?:confused:

kanopener
08-14-2006, 21:27
thank you for the very informative article

CH@IN
08-22-2006, 07:29
Hallo ch@in
my first step is correct?:confused:

Yes,

you are a true DIY (Do it Yourself) cloner :) When you have this reader ready, please tell us your experience.

P.S. To build this reader on your own might be more expensive than just buying a ready one, but I guess you are aware about that.

Best Regards

CH@IN

CH@IN
08-22-2006, 07:31
To all thank you replies: Don't thank me mate, I am just sharing Info I have collected. Feel free to make the best out of it.

Regards

CH@IN

CH@IN
08-22-2006, 07:43
Out of curiosity and on the topic of cloning can the sim cards of some unlocking software security protection be cloned?

For example some software comes with a usb sim card reader with sim inside for security protection can this card be cloned. also y i ask this is because i have lost many of these usb readers which cost a lost of money, so if we can clone to keep a copy just in case.

Everything can be cloned in this world... it's just a matter of time.
To be more specific to your question, many software that use this kind of protection have been "c rack ed". What they do is emulate an original smartcard and sell it together with "copied" hardware. If you buy such a device, as soon as you want to upgrade the software for it, the device will not work anymore. More common is though to remove the protection routines out of the software or to implement the hash calculation algorithm into the main software.... I think NOW we are offtopic.

Regards

CH@IN

CH@IN
10-09-2006, 16:52
http://................ (forum.gsmhosting.com/vbb/forumdisplay.php?f=70)

sorry wrong thread, message removed

sujithsidhardhan
10-09-2006, 18:11
Use this thread.

http://forum.gsmhosting.com/vbb/showthread.php?t=339095

sujithsidhardhan
10-09-2006, 20:11
Hallo ch@in
my first step is correct?:confused:

Could you please provide the specification for this ckt?. Which all PIC can be programmed with this schematic?

CH@IN
10-10-2006, 17:31
Could you please provide the specification for this ckt?. Which all PIC can be programmed with this schematic?

Look at the shematic... you see a max232, 2 crystals (6 and 3.5 mhz), a simcard (as a picture), ... what does this look like to you? Right, it's a phoenix reader. NOT a PIC PROGRAMMER. (I think this answered your question)

kok123
10-12-2006, 17:07
is this sim cloning..that we can make our own box???

sujithsidhardhan
10-16-2006, 15:13
Look at the shematic... you see a max232, 2 crystals (6 and 3.5 mhz), a simcard (as a picture), ... what does this look like to you? Right, it's a phoenix reader. NOT a PIC PROGRAMMER. (I think this answered your question)

Ok. But why there is the jumper for PIC ? The JP1 jumper can select whether it is a PIC Programmer or Simcard reader. JP3 determines whether it is a pic programmer or a phoenix / smartmouse. PLEASE LET ME KNOW WHICH ALL PICS CAN BE PROGRAMMES WITH THIS CKT?

CH@IN
10-18-2006, 10:21
Ok. But why there is the jumper for PIC ? The JP1 jumper can select whether it is a PIC Programmer or Simcard reader. JP3 determines whether it is a pic programmer or a phoenix / smartmouse. PLEASE LET ME KNOW WHICH ALL PICS CAN BE PROGRAMMES WITH THIS CKT?

Sorry, I am really very busy these days. You are right, I was wrong, there is some pic programming in that circuit. I'm not sure what chips these circuit can do, but it should be the same as the JDM... still have to compare the circuits... but really,... I hardly have any time spare these days. BTW, nice guide, but make it easier for beginners... less technical backround maybe ;) @kok123: You miss the idea of the whole cloning background. Why not asking for a dual sim from your network provider... they do that too, and you won't waste your time reading this forum. Regards Ch@in

xafo
10-19-2006, 19:37
Ok guys i really need a Guruu for this one.............. I am in a third world country and the mobile phone service is very high cost, the local telephone company is selling a GSM Fixed Phone branded EZCOM QUIDKT-2200.

Here is the deal, everybody wants to take the sim out of the fixed phone and put it in a unlocked GSM movil phone, when you atempt that the sim seems to be locked to the ezcom phone it asks for a code which the phnoe company will not give you.

I tryed changing the imae on the mobil to the one on the ezcom but it did not work. any ideas, is there a way to read a sim card to disclose its puk code. this is a diferent story here you see all of you guys are finding a way to unlock a phone to use any sim card I need to unlock a sim cardo to use in any phone......

sujithsidhardhan
10-21-2006, 19:12
Sorry, I am really very busy these days. You are right, I was wrong, there is some pic programming in that circuit. I'm not sure what chips these circuit can do, but it should be the same as the JDM... still have to compare the circuits... but really,... I hardly have any time spare these days. BTW, nice guide, but make it easier for beginners... less technical backround maybe ;) @kok123: You miss the idea of the whole cloning background. Why not asking for a dual sim from your network provider... they do that too, and you won't waste your time reading this forum. Regards Ch@in

Thanks and waiting for your reply.

sujithsidhardhan
10-21-2006, 19:14
Hallo ch@in
my first step is correct?:confused:

Could you please let me know more details about this schematic.

andy12345
10-22-2006, 00:58
hey..im a beginer at this sim cloneing too and i wanted to ask where i can buy this sim cloning kit because my son need a phone and i dont wanna add another line so ya help a bro out...and can you please show the steps on how to clone the sim ok thanks

sujithsidhardhan
10-22-2006, 18:43
hey..im a beginer at this sim cloneing too and i wanted to ask where i can buy this sim cloning kit because my son need a phone and i dont wanna add another line so ya help a bro out...and can you please show the steps on how to clone the sim ok thanks



Go to http://forum.gsmhosting.com/vbb/showthread.php?t=339095 for the guide

search on ebay for the sim card programmer and the sim card reader or go to http://www.pulsat.com or http://www.promosatuk.com for the device and plain wafer cards.

sujithsidhardhan
10-29-2006, 05:49
Anybody cloned BSNL from india succesfully?

mazo
01-12-2007, 04:16
Can this be use for cloning project http://img.photobucket.com/albums/v685/mazo_jdf/scr_blue.gif

can be found at: http://www.cdrking.com/local/products/index.php?action=&temp=2&typeno=d&prod=Cd-r%20King&prodcode=scr_blue

Software: http://www.cdrking.com/downloads/simcard/simeditor.zip

Gerard_Dirks
01-12-2007, 20:42
How much ist Php 295? What kind of Currency is this??

amey
01-30-2007, 12:55
This will not be a guide of what sim cloning is, but since I am using this very nice piece of Software for years now, I will try to introduce it to you.

Sim Cloning means creating a copy of the Original Sim-card. Some of you might ask, what are the benefits of making a clone of your original Sim Card:

-Can I use both cards at the same time, so that I can have two phones at different locations?

=No. You can ONLY have one card active otherwise your Netwoek provider would notice 2 copies of the same Number and might deactivate your account. You should also consider, that some logical conclusions are made by the Network Providers like this: You can't be in France and few minutes later activate your Clone Card in Brazil. The Network Provider knows the Time that would be needed to travel from one place to the other one.



-If I have the original Simcard and the Clonecard active, would both telephones ring and can I receive SMS messages on both phones at the same time?

=No. Only one device would ring, more specificaly the telephone that replied first to the call by the Network. The same happens with the SMS's.


-Can I have more numbers than one in the same phone at the same time?

= Yes and No, the "Simemu-card" can store up to 10 different phonenumbers. But,...they will not be active at the same time. Only one number is registered to the Network Provider. The switching between the different numbers is done through a smart menuitem in your phone.

-How do I write on my simcard the other 9 numbers?

=You can NOT use your original simcard and make changes on that card to support more numbers. Instead you need to find a "Programmable Card" and copy the Firmware of the "SIMEMU" on it. These 'empty' programmable cards are called "Silver card" or "Green card" according to their Processor (CPU) and the Memory Capacity.


-What do I need to make a clone of my original card?

=That is not quite easy any more since most of the Original Sim cards are made "Copy Proof". This means that you are not able to read the necessary information out of them to use for your clone card. This procedure requires experiments with your Original Sim Card which might end into a destroyed Original Sim-Card. You will have to run a Software that will "brute force" the information out of your card, but the totally allowed read attempts are limited and will end up into a destroyed Card. Imagine the Hangman game with a Veeeery long word to guess :)


-Why would I want to make a clone of my card?

= There are many different opinions on that.
1) You can have a backup of your card in case you loose your phone
2) You can use the same Phonebook on all your numbers on the Sim in your cloned card.
3) You can have a spare phone in your car in case you would forget your phone at home. Just ask your wife, neighbor or dog to turn it off for you.
4) You can hide a second phone number from your wife without her knowledge ;)
5) You can draw the attention of all your friends with new telephone devices although you appear with an old cheap one.
6) You can have different Network providers on the same clone *but only one will always be active.
7) You avoid destroying the contacs of your expensive phone due to card switching in case you need to change cards because you don't want to carry your P910 to your job.
8) You can ask your Brother, Dad or Friend to make a clone of a new card and send you the "Ki and IMSI" through E-mail or Telephone. You can enter this info into your phone by just typing it like a sms message.


there are many more reasons I can't think of right now.


-Is the card cloning expensive?

= You will need some equipment for the programming of the clone and the reading of the original card. And you will need an empty Pic card (Green or Silver). The whole equipment should cost you less or more 40 Euro, Remember, never give away your simcard to somebody else to do this task since he will keep a copy of your simcard. The only info he will need to write down are few numbers.


Hope this little info was enough to make you decide if you want to clone your card or not. Please remember also, this cloning procedure is not very new. You should first READ through the Forum and find similar questions with yours before starting a new thread. Make a search and go beyonf the 30 last messages limit :)

Good luck and happy cloning

Ch@in
-Can I use both cards at the same time

CH@IN
01-31-2007, 15:33
-Can I use both cards at the same time

Only one card will remain registered on the network. If you turn on the second phone (i.e. with the original card), then the other (clone) card will disconnect from the network. Always the last card that had registered to the network will be online, but never both together. Sometimes you will still see on both phones a strong signal with the Networkname, but if you try to make a call or receive a call/sms, only one of them will work.

CH@IN
01-31-2007, 15:54
Ok guys i really need a Guruu for this one.............. I am in a third world country and the mobile phone service is very high cost, the local telephone company is selling a GSM Fixed Phone branded EZCOM QUIDKT-2200.

Here is the deal, everybody wants to take the sim out of the fixed phone and put it in a unlocked GSM movil phone, when you atempt that the sim seems to be locked to the ezcom phone it asks for a code which the phnoe company will not give you.

I tryed changing the imae on the mobil to the one on the ezcom but it did not work. any ideas, is there a way to read a sim card to disclose its puk code. this is a diferent story here you see all of you guys are finding a way to unlock a phone to use any sim card I need to unlock a sim cardo to use in any phone......

how about logging the commands send from the ezphone to the simcard? Is that a standard sim-card, anyway? Do they use the standard PIN or is this a special application?
Build a "season 2 logger" interface or buy a ready one and start investigating....
http://ucables.com/img/pics/SEASON2.jpg

Cryspim
02-19-2007, 18:38
1 - For each ask connection of user, the system must realise your authentication

2 - After the "connection ask", VLR/SGNS (Visitor Location Register/Serving GPRS Node Support) asks for user the TMSI/INSI (Temporary Mobile Subscriber Identity/International Network Subscriber Identity) and it´s gived to HLR (Home Location Register) to start the authentication process

3 - The AC (Authentication Center) calculates the SRES (Signal Response) and the KC (Ciphering Key) having the IMSI (International Mobile Subscriber Identity) and returns to HLR (Home Location Register) the Triplet that is taken by the sum of SRES (Signal Response), RN (Random Number) and KC (Ciphering Key). This sum is made by this way:

Triplet = SRES + RN + KC
SRES = A3 (KI, RN) > A3 (Authentication Algorithm), KI (Individual Authentication Key) and RN (Random Number)
KC = A8 (RN, KI) > A8 (Ciphering Key Generating Algorithm)

The RN is generated by the AC and the KI is available in the Data Base for IMSI (International Mobile Subscriber Identity)

4 - The HLR provides the KC to the BTS (Base Transmitter Stations), the RN to the MS (Mobile Station) and the SRES to the MSC/VLR (Mobile Switching Center/Visitor Location Register)

5 - With the RN on hands, the MS calculates the SRES and this value is compared with the value received by HLR

6 - The authentication is made only if the SRES are equal on both sides.

So, my question is: it means that the cellphone calculates by yourself the SRES to compare with HLR SRES, and, if SRES is equal to KI + RN (provided by the HLR previosly), so the cellphone have access to KI in a smallest time to realize this calc, am i right? Is it possible to use the own cellphone to give access to KI number by any way, like a proper SW "logging" the entire CPU process during the authentication for "fishing" the KI number?

Sorry for my poor english...

b.r.

Cryspim

shaqa
02-21-2007, 21:26
is it possible with simclone,,,to clone one number,, and than use it in same time,,i mean to spy for example,any number? e.x: gf :P

Cryspim
02-21-2007, 23:06
i don´t think so. if you clone your number and put new cloned sim in another phone, both phones will loggin in the network, but if one phone is making a call and the other phone try to make a call at the same time, the first call is ended by the network. so, both wave signal, but don´t work at the same time.

*PS.: still waiting some idea about my previous post. The core of question is: why is necessary attach COMP128 with a external SW/HW if the own cellphone access the KI fastly during the authentication network process? Is not more easy "filter" this access by some way to find the KI? if it´s be possible, then does no matter if the chip is COMP128 v1, v2 or v3. If the cellphone have access to the KI, we could do the same "hacking" the cellphone, not the SIM.

Cryspim

Gerard_Dirks
02-22-2007, 01:39
Very interesting these.

Let the professionals under us think if they find a solution to extract the ki in your way of thinking

CH@IN
02-24-2007, 11:05
For educational purposeso once again : It's NOT the cellphone that does the calculation... it's the SIMCARD. The phone is ONLY the middleman to forward the information from the network INTO the simcard, and the results FROM the simcard back to the network. Don't waste your time suggesting new ideas... if the hash source won't leak again like on the comp128v1 you will never see a public comp128v2 clone. Clone cards are offered by many Mobile providers already, and those are even legal to use. So if you urgently need one, better do it this way. BR ch@in

Gerard_Dirks
02-24-2007, 17:12
Nice, but I do not want to have 4 telephones in my pocket! Sim Cloning is interesting because of tht 6in1 12in1 or 16in1 solutions, not to have a copy of my GSM Card. I know that I can order a second GSM card!

Cryspim
02-24-2007, 17:26
@CH@IN: Many thanks to clear my doubt.

@Gerard Dirks: Try one of THIS (http://www.ipmart.com/main/browse.php?&cat=1762). Works great for me.

b.r.

Cryspim

urujack
02-26-2007, 05:27
hi all, really interesting thread. i've read it upside down :)
with woron_scan i got this:

\par Starting 2R attack on 0 pair....
\par No 2R attack collision found....
\par 00:31:28
\par Starting 2R attack on 4 pair....
\par No 2R attack collision found....
\par Both pairs possibly non-collisions....

this means it couldn't and won't find the Ki ?
anybody has a clue?

thanks and br to all

urujack
02-26-2007, 06:58
it happened 2 times with different SIMs :(

sbog
02-26-2007, 22:52
it happened 2 times with different SIMs :(comp128v2 - nowadays it's normal.

xafo
02-27-2007, 19:24
Ok guys i really need a Guruu for this one.............. I am in a third world country and the mobile phone service is very high cost, the local telephone company is selling a GSM Fixed Phone branded EZCOM QUIDKT-2200.

Here is the deal, everybody wants to take the sim out of the fixed phone and put it in a unlocked GSM movil phone, when you atempt that the sim seems to be locked to the ezcom phone it asks for a code which the phnoe company will not give you.

I tryed changing the imae on the mobil to the one on the ezcom but it did not work. any ideas, is there a way to read a sim card to disclose its puk code. this is a diferent story here you see all of you guys are finding a way to unlock a phone to use any sim card I need to unlock a sim cardo to use in any phone......

I need something that can read the PIN or PUK of the original sim???? Is ti possible??? Plase I need helpon this

urujack
03-02-2007, 03:37
comp128v2 - nowadays it's normal.

thanks man, i thought so, but i expected a more explicit info in the woron_scan log...

BR!

sbog
03-05-2007, 16:59
thanks man, i thought so, but i expected a more explicit info in the woron_scan log...What remains unclear?
1. You 've chosen the pair #0 (among 8 possibilities) to start 2R attack on.
2. 31044 attacks failed - no 2R-collision on the selected pair (#0) was found. This means either the pair #0 is non-collisional (one of 769) or the algo is not comp128v1 (namely - v2 since WS started attacks).
3. WoronScan has chosen the pair #Your_choice+4 (0+4=4) to start 2R attack on.
4. 31044 attacks failed - no 2R-collision on the selected pair (#4) was found. This means either the pair #4 is non-collisional (one of 769) or the algo is not comp128v1 (namely - v2 since WS started attacking).
5. After 62088 attacks WS stopped its attempts since it could be dangerous (many types of cards die after 65536 runs of GSMAlgo).

GS82
03-12-2007, 21:12
Does anybody know where can I get a silvercard, greencard or greencard2 in Argentina? Or the nearest location.
Thanks.
Alguien sabe donde puedo conseguir una silvercard, greencard or greencard2 en Argentina? O el lugar mas cerca.
Gracias

sanu_kallin
02-21-2008, 10:45
thanks u very much friend. got a fair idea

jesusodin
03-04-2008, 07:03
Only one card will remain registered on the network. If you turn on the second phone (i.e. with the original card), then the other (clone) card will disconnect from the network. Always the last card that had registered to the network will be online, but never both together. Sometimes you will still see on both phones a strong signal with the Networkname, but if you try to make a call or receive a call/sms, only one of them will work.

But, can you listen to the conversation of the original SIM??... Guess I'm thinking about the Movie "the bourne ultimatum"; where he listens to the conversations of the CIA agents right after he cloned the SIM.... Is it posible??.

Great info by the way....

thxs.

vimafeje
03-05-2008, 01:52
But, can you listen to the conversation of the original SIM??... Guess I'm thinking about the Movie "the bourne ultimatum"; where he listens to the conversations of the CIA agents right after he cloned the SIM.... Is it posible??.

Great info by the way....

thxs.

Exactly just like you said : it's in a movie..... not in real life with cheap equipment like this....

Jhay-r
04-14-2008, 07:03
ask cia about it....

btw.:

any seller here from philippines???

i'm looking for greencard......
for use with lg u900

Jhay-r
04-14-2008, 07:11
what software is use to check if the card is v1 or v2???

phonenation
04-27-2008, 13:26
I have a UK 3g sim card which works only on the '3' network phones. Can anyone clone the sim so that I can use it on 2g phones. If this is possible we can send a lot of business your way as there is a big demand for this here.

freesms643
06-26-2008, 00:36
hey guyzzz i jus wanned 2 no tht:-

* if i clone a SIM, then can i operate both the SIMs at the same time..?
* If yes, then can i listen to the conversation going on the cloned or original SIM on my SIM...?
* And if again yes, then where can i buy all the stuff to clone 1...?

thanx ppl

i'll be waiting for your reply...

free....sms....643

start_service
06-27-2008, 17:09
Hello everybody ! I am happy that I am here with professionals and I have a questions I would like to get good answers .
is there any way to clone simcard and put two simcards in different phones would both of them ring and receive SMS messages on both phones at the same time ?