Archy
28.06.2007, 19:25
Добрый день.
Собственно, сабж.
Клонирую Вороном 1.09, настройки - дефолт (т.е. начинаю с 0+1 пары), начинаю с 4* скорости, не работает - на 2*, нет - на 1-й (3.57). Программатор - (имхо не_настоящий, т.к. тупо черная коробка без надписей с 2-мя светоидиодами, но совместимый с) Multi Yo XP (35$ в сат-павильоне на КарДачах), версия его внутренней прошивки была "6", перешил на новую - "7".
Потихоньку добавляю что и как. Есть вопросы-уточнения - пишите.
1. T-mobile, США, полугодичной давности. Алго, как сказал Ворон, "не comp128v1". Пыткам через сим_скан не подвергал - смысла нет.
ATR: 3B 3B 94 00 92 38 10 10 49 xx xx xx xx 90 00
ICCID:8901260650012xxxxxx
IMSI :08 39 01 62 60 15 xx xx xx
2. Extra. Кажется, литовская - не моя, а друг не помнит, откуда привез - вычиталась на 2* скорости:
The real speed is 19200..
There is a card in Phoenix device:
ICCID:89370019200003xxxxxx
PIN1 is enabled
PIN1 remaining 2 attemps
PUK1 remaining 10 attemps
Successful PIN1 verification
IMSI :08 29 64 10 29 00 xx xx xx
The real speed is 19200..
There is a card in Phoenix device:
ATR:
3B 19 94 33 04 01 19 45 53 0B 01 8xxxx
PIN1 is enabled
PIN1 remaining 3 attemps
PUK1 remaining 10 attemps
Successful PIN1 verification
15:20:28
Starting 2R attack on 0 pair....
Found 2R attack collisions:used 129xx steps
15:41:18
Found by 2R attack the 0 pair=xxxx
15:41:18
Calculating data for 3R attack....
15:41:18
Found data: common=68 first=xxxx second=xxxx
Finding 3R attack collision...
15:42:09
3R attack collisions found...used 45x steps
3R attack 6 possible pairs found
Possible Pair xxxx
Possible Pair xxxx
Possible Pair xxxx
Possible Pair xxxx
Possible Pair xxxx
Possible Pair xxxx
15:42:10
Found by 3R attack the 4 pair=xxxx
15:42:10
Calculating data for 4R attack....
15:42:11
Found data: common=81 first=xxxx second=xxxx third=xxxx
Finding 4R attack collision...
Used 132 steps for 4R attack
15:42:26
4R attack 8 collisions found...
15:42:26
final calculating pairs by 4R attack...
xxxx xxxx
xxxx xxxx
Found by 4R attack 2 pair=xxxx
15:42:27
15:42:27
Calculating data for 3R attack....
15:42:27
Found data: common=44 first=xxxx second=xxxx
Finding 3R attack collision...
15:42:54
3R attack collisions found...used 238 steps
3R attack 8 possible pairs found
Possible Pair xxxx
Possible Pair xxxx
Possible Pair xxxx
Possible Pair xxxx
Possible Pair xxxx
Possible Pair xxxx
Possible Pair xxxx
Possible Pair xxxx
15:42:55
Found by 3R attack the 6 pair=xxxx
15:42:55
Calculating data for 5R attack....
15:42:55
Found data: common=xxx first=xxxx second=xxxx third=xxxx forth=xxxx
Finding 5R attack collision...
Used 510 steps for 5R attack
15:43:53
5R attack 8 collisions found...
15:43:53
final calculating pair by 5R attack...
xxxx xxxx xxxx xxxx
xxxx xxxx xxxx xxxx
15:43:53
5R calc. time 0.687
Found by 5R attack 1 pair=xxxx
15:43:54
Calculating data for 3R attack....
15:43:54
Found data: common=32 first=хххх second=xxxx
Finding 3R attack collision...
15:44:40
3R attack collisions found...used 418 steps
3R attack 2 possible pairs found
Possible Pair xxxx
Possible Pair xxxx
15:44:41
Found by 3R attack the 5 pair=хххх
15:44:41
Calculating data for 4R attack....
15:44:41
Found data: common=28 first=хххх second=хххх third=хххх
Finding 4R attack collision...
Used 136 steps for 4R attack
15:44:54
4R attack 8 collisions found...
15:44:54
final calculating pairs by 4R attack...
xxxx xxxx
xxxx xxxx
Found by 4R attack 3 pair=xxxx
15:44:55
Finding last pair by brute force...
15:44:57
Found by brute force the 7 pair=xxxx
KI: xx...xx
IMSI: 08 29 64 10 29 00 хх хх хх
ICCID:893700192000037ххххх
3. Tak-tak (Era) - не comp128v1
ATR: 3B BC 94 00 40 14 47 47 33 xx xx xx xx 43 32 30 30 30
ICCID:8948020506106xxxxxx
IMSI :08 29 06 20 71 06 xx xx xx
4. Orange - не comp128v1
ATR: 3B 3F 94 00 80 xx xx xx xx xx A3 FF FF 06 0E 83 3E 9F 16
ICCID:8948030528308xxxxxx
IMSI :08 29 06 30 38 03 xx xx xx
5. Шведско-Питерская Tele2 - не comp128v1
ATR:3B 1C xx 80 xx 30 xx 32 xx 00 53 26 71 01 6D
ICCID:89701200600009xxxxxx
IMSI :08 29 05 02 33 00 xx xx xx
6. b (все страны уточню чуть позже) - читал до 45000 - коллизий нет.
ATR: 3B xx xx 00 xx 14 47 47 33 53 33 39 30 53 31 30 30
ICCID:894802100508283xxxx
IMSI :08 29 06 xx xx xx 82 73 73
Собственно, сабж.
Клонирую Вороном 1.09, настройки - дефолт (т.е. начинаю с 0+1 пары), начинаю с 4* скорости, не работает - на 2*, нет - на 1-й (3.57). Программатор - (имхо не_настоящий, т.к. тупо черная коробка без надписей с 2-мя светоидиодами, но совместимый с) Multi Yo XP (35$ в сат-павильоне на КарДачах), версия его внутренней прошивки была "6", перешил на новую - "7".
Потихоньку добавляю что и как. Есть вопросы-уточнения - пишите.
1. T-mobile, США, полугодичной давности. Алго, как сказал Ворон, "не comp128v1". Пыткам через сим_скан не подвергал - смысла нет.
ATR: 3B 3B 94 00 92 38 10 10 49 xx xx xx xx 90 00
ICCID:8901260650012xxxxxx
IMSI :08 39 01 62 60 15 xx xx xx
2. Extra. Кажется, литовская - не моя, а друг не помнит, откуда привез - вычиталась на 2* скорости:
The real speed is 19200..
There is a card in Phoenix device:
ICCID:89370019200003xxxxxx
PIN1 is enabled
PIN1 remaining 2 attemps
PUK1 remaining 10 attemps
Successful PIN1 verification
IMSI :08 29 64 10 29 00 xx xx xx
The real speed is 19200..
There is a card in Phoenix device:
ATR:
3B 19 94 33 04 01 19 45 53 0B 01 8xxxx
PIN1 is enabled
PIN1 remaining 3 attemps
PUK1 remaining 10 attemps
Successful PIN1 verification
15:20:28
Starting 2R attack on 0 pair....
Found 2R attack collisions:used 129xx steps
15:41:18
Found by 2R attack the 0 pair=xxxx
15:41:18
Calculating data for 3R attack....
15:41:18
Found data: common=68 first=xxxx second=xxxx
Finding 3R attack collision...
15:42:09
3R attack collisions found...used 45x steps
3R attack 6 possible pairs found
Possible Pair xxxx
Possible Pair xxxx
Possible Pair xxxx
Possible Pair xxxx
Possible Pair xxxx
Possible Pair xxxx
15:42:10
Found by 3R attack the 4 pair=xxxx
15:42:10
Calculating data for 4R attack....
15:42:11
Found data: common=81 first=xxxx second=xxxx third=xxxx
Finding 4R attack collision...
Used 132 steps for 4R attack
15:42:26
4R attack 8 collisions found...
15:42:26
final calculating pairs by 4R attack...
xxxx xxxx
xxxx xxxx
Found by 4R attack 2 pair=xxxx
15:42:27
15:42:27
Calculating data for 3R attack....
15:42:27
Found data: common=44 first=xxxx second=xxxx
Finding 3R attack collision...
15:42:54
3R attack collisions found...used 238 steps
3R attack 8 possible pairs found
Possible Pair xxxx
Possible Pair xxxx
Possible Pair xxxx
Possible Pair xxxx
Possible Pair xxxx
Possible Pair xxxx
Possible Pair xxxx
Possible Pair xxxx
15:42:55
Found by 3R attack the 6 pair=xxxx
15:42:55
Calculating data for 5R attack....
15:42:55
Found data: common=xxx first=xxxx second=xxxx third=xxxx forth=xxxx
Finding 5R attack collision...
Used 510 steps for 5R attack
15:43:53
5R attack 8 collisions found...
15:43:53
final calculating pair by 5R attack...
xxxx xxxx xxxx xxxx
xxxx xxxx xxxx xxxx
15:43:53
5R calc. time 0.687
Found by 5R attack 1 pair=xxxx
15:43:54
Calculating data for 3R attack....
15:43:54
Found data: common=32 first=хххх second=xxxx
Finding 3R attack collision...
15:44:40
3R attack collisions found...used 418 steps
3R attack 2 possible pairs found
Possible Pair xxxx
Possible Pair xxxx
15:44:41
Found by 3R attack the 5 pair=хххх
15:44:41
Calculating data for 4R attack....
15:44:41
Found data: common=28 first=хххх second=хххх third=хххх
Finding 4R attack collision...
Used 136 steps for 4R attack
15:44:54
4R attack 8 collisions found...
15:44:54
final calculating pairs by 4R attack...
xxxx xxxx
xxxx xxxx
Found by 4R attack 3 pair=xxxx
15:44:55
Finding last pair by brute force...
15:44:57
Found by brute force the 7 pair=xxxx
KI: xx...xx
IMSI: 08 29 64 10 29 00 хх хх хх
ICCID:893700192000037ххххх
3. Tak-tak (Era) - не comp128v1
ATR: 3B BC 94 00 40 14 47 47 33 xx xx xx xx 43 32 30 30 30
ICCID:8948020506106xxxxxx
IMSI :08 29 06 20 71 06 xx xx xx
4. Orange - не comp128v1
ATR: 3B 3F 94 00 80 xx xx xx xx xx A3 FF FF 06 0E 83 3E 9F 16
ICCID:8948030528308xxxxxx
IMSI :08 29 06 30 38 03 xx xx xx
5. Шведско-Питерская Tele2 - не comp128v1
ATR:3B 1C xx 80 xx 30 xx 32 xx 00 53 26 71 01 6D
ICCID:89701200600009xxxxxx
IMSI :08 29 05 02 33 00 xx xx xx
6. b (все страны уточню чуть позже) - читал до 45000 - коллизий нет.
ATR: 3B xx xx 00 xx 14 47 47 33 53 33 39 30 53 31 30 30
ICCID:894802100508283xxxx
IMSI :08 29 06 xx xx xx 82 73 73