SIMCardInfoGathering

From PaulDotCom Security Weekly
Jump to: navigation, search

Here's a link to the original FLASH (swf) presentation as delivered on the podcast.

The SIM card reader used was assembled from a kit by Ladyada in conjunction with PySIMreader. Get your own kit here, and download a copy of pySIMreader here.

If your installation of python does not include pySerial, you may need to install it for pySIMreader to access the hardware with the USB FTDI cable.

To start pySIMreader we use the following command from the directory where we have pySIMreader:

$ python ./pySIMreader

First, we need to select the appropriate serial port for our FTDI cable. This will vary depending on your system configuration. Once we've selected a serial port, we'll recieve some information via the new STDOUT window (assuming we have a good simcard inserted into the reader). Upon successful completion, we'll be presented with a new window and a menu. By utilizing the options in the window an in the menu, we can explore all of the available options and information on the simcard. Explore!

From the window, we can access the Phonebook (IE the stored numbers) as well as the received SMS messages. From the SMS messages display, we can determine and change the message status (Read, Unread and Deleted).

From the menu, under Phonebook, we can access the Last # dialed, in addition to the stored phonebook. While this feature is not supported by every phone (hence not showing up on every card), when it does it can yield interesting results.

Also from the menu under the SIM menu optio, we can access detailed SIM Information. This new window will revail details about the PIN usage, Location information, Serial number and IMSI information.

Yes, that is a full size Altered Beast arcade cabinet in Larry's Lab of Doom. Yes, it works and the suicide battery is intact - the sound still functions.

Personal tools
Namespaces
Variants
Actions
Shows
Misc
Toolbox