GSM-Forum - View Single Post

Gobi · 04-17-2008, 08:07

“REAL” MccMnc in FAKE IMSI
Seems some operators DON'T accept IMSI like 0123456789 ... so you better use this trick if other options don't help

Any OPERATOR SIM (the one you get as contract or prepaid card) is “asked” at phone startup for the IMSI.

The IMSI (International Mobile Subscriber Identity) is a unique 15-digit code used to identify an individual user (his SIM CARD actually) on a GSM network.
In the IMSI, the first 5 digits are the Mobile Country Code – MCC and the Mobile Network Code – MNC.
This MCC / MNC code is used by the simlocked phone to check if the inserted card is accepted or not.
What all this unlocksim was doing untill now was to send when “asked” about the IMSI, the MCC/MNC as 00101, and many phones takes this as accepted card and continue then theyr boot up and start working…

If anything you tried untill now don’t work, then it is a posibility that the specific model of phone don’t work with MCC/MNC like 00101 in the IMSI.
On some phones you can use software to read to what operator the phone is locked too, or if you know allready this – just check the attached MCCMNC archive that contains this information for the specific countrys and operators.
Then you can customize more, by programming the TORNADO SIM to send to the phone the MCCMNC of that network that is locked to, so it will accept the card as own card..

“REAL” IMSI digits in FAKE IMSI

Seems some operators - DON'T accept IMSI like 0123456789 ... so you better use this trick

You can also customise the TORNADO SIM to send the rest of the IMSI (except the MCC/MNC part) the correct one from the card that will be used in that phone.
Just use the menu ACTION à READ IMSI in the TORNADO SIM software and put the operator SIM that you want to use in that phone together with the TORNADO SIM in the programming dongle. Then just change the MCC/MNC Data to 00101 or to the ones for the network where the phone is locked too and program the card.
From now on the Tornado will send to the phone when asked IMSI for simlockcheck the IMSI consisting of MCCMNC you have programmed and the rest of the correct card IMSI .
IMSI MASK put also to 111110000000000
This will make the TORNADOSIM to send the first 5 digits from the FAKE IMSI field + the rest of the REAL IMSI (digits nr6 to 15) as FAKE IMSI to the phone.

04-17-2008, 08:07	#5 (permalink)
Gobi No Life Poster Join Date: Sep 2001 Location: GSM-TOOL Age: 52 Posts: 4,092 Member: 6328 Status: Offline Thanks Meter: 3,595	“REAL” MccMnc in FAKE IMSI Seems some operators DON'T accept IMSI like 0123456789 ... so you better use this trick if other options don't help Any OPERATOR SIM (the one you get as contract or prepaid card) is “asked” at phone startup for the IMSI. The IMSI (International Mobile Subscriber Identity) is a unique 15-digit code used to identify an individual user (his SIM CARD actually) on a GSM network. In the IMSI, the first 5 digits are the Mobile Country Code – MCC and the Mobile Network Code – MNC. This MCC / MNC code is used by the simlocked phone to check if the inserted card is accepted or not. What all this unlocksim was doing untill now was to send when “asked” about the IMSI, the MCC/MNC as 00101, and many phones takes this as accepted card and continue then theyr boot up and start working… If anything you tried untill now don’t work, then it is a posibility that the specific model of phone don’t work with MCC/MNC like 00101 in the IMSI. On some phones you can use software to read to what operator the phone is locked too, or if you know allready this – just check the attached MCCMNC archive that contains this information for the specific countrys and operators. Then you can customize more, by programming the TORNADO SIM to send to the phone the MCCMNC of that network that is locked to, so it will accept the card as own card.. “REAL” IMSI digits in FAKE IMSI Seems some operators - DON'T accept IMSI like 0123456789 ... so you better use this trick You can also customise the TORNADO SIM to send the rest of the IMSI (except the MCC/MNC part) the correct one from the card that will be used in that phone. Just use the menu ACTION à READ IMSI in the TORNADO SIM software and put the operator SIM that you want to use in that phone together with the TORNADO SIM in the programming dongle. Then just change the MCC/MNC Data to 00101 or to the ones for the network where the phone is locked too and program the card. From now on the Tornado will send to the phone when asked IMSI for simlockcheck the IMSI consisting of MCCMNC you have programmed and the rest of the correct card IMSI . IMSI MASK put also to 111110000000000 This will make the TORNADOSIM to send the first 5 digits from the FAKE IMSI field + the rest of the REAL IMSI (digits nr6 to 15) as FAKE IMSI to the phone.