SIMtester

SIMtester¶

The provided tools assess SIM card security in two dimensions:

• Cryptanalytic attack surface. Collect cryptographic signatures and encryptions of known plaintexts

• Application attack surface. Generate a list of all application identifiers (TAR) and find "unprotected" (MSL=0) applications

Requirements¶

• Java 1.7 (code can be easily tweaked to compile under Java 1.6 or even lower if needed)
• PC/SC reader (via pcsc daemon) –or–
• Osmocom phone (via libosmosim)

Download¶

Pre-compiled .jar TODO
Source Code TODO
Live System TODO

Instructions¶

1. Download
2. unpack
3. run: TODO call
• TODO command line parameters

Dependencies¶

Software uses several libraries, if compiled from source the following libraries are needed:

• Apache Common CLI 1.3
• CombinatoricsLib 2.0
• SIMLibrary - available in the git along with SIMTester

Mailing list¶

A public mailing list for announcements and discussion can be found here