theapache64 / sim-jacker

Source code for the new SIM card flaw which lets hijack any phone just by sending SMS - Source Code + Demo Video
https://simjacker.com/
Apache License 2.0
114 stars 19 forks source link

programa simjacker #16

Open python245 opened 2 years ago

python245 commented 2 years ago

https://m2msupport.net/m2msupport/download-at-command-tester-for-simcom-modules/

anyoneoruser commented 6 months ago

If you want to create a SIMJacker python program, you can try the pysimcard librairy. To get the target IMSI number, you can use an SS7 attack. I have found an IMSI catcher here. SendIMSI.jar.zip To run it, download java here if you don't have it and type the following command in your terminal:

java -jar SendIMSI.jar

Note that it will need 2 hard-to-get parameters (target IP address and your Global Title) to setup the IMSI catcher. But this is the value of the parameters that never change:

██████████@██████████ simsi % java -jar SendIMSI.jar
*********************************************
***             Frauding Target           ***
*********************************************
[*]Set Client PC: 1
[*]Set Peer PC: 2
[*]Set Client IP: <your public IP address>
[*]Set Client Port: 23481
[*]Set Peer IP: <your target public IP address(hard-to-get parameter)>
[*]Set Peer Port: 4446
[*]Set Network Indicator [0] International [1] National: 0
[*]Set Target's MSISDN: <your target phone number(e.g +201150508833)>
[*]Set your GT: <your Global Title(hard-to-get parameter)>

To get your Global Title, try to create a webpage that send you the content of the navigator global variable and connecting to mobile data an then opening this "phishing" page on your phone, maybe you will find your Global Title in the content that the webpage sent you. For the ICCID, i have some infos here.