Cardpeek — Smartcard File System Browser

Cardpeek is a graphical smartcard exploration tool that reads and displays the file system structure of SIM, USIM, ISIM, banking, and identity cards. Within TelcoChisel, Cardpeek is configured with telecom-specific Lua scripts for deep inspection of 3GPP SIM Elementary Files (EFs), authentication keys (Ki/OPc), PLMN selectors, and USIM security domains.

Key Capabilities & Security Vectors

• EF Structure Browsing: Navigate the complete SIM/USIM file tree including EF_ICCID, EF_IMSI, EF_LOCI, EF_ADN, EF_FPLMN, and EF_KEYS.
• Authentication Parameter Extraction: Read exposed Ki, OPc, and Milenage algorithm parameters from misconfigured test SIM cards.
• PLMN Selector Analysis: Inspect EF_PLMNwAcT and EF_OPLMNwAcT to understand carrier roaming preferences and forced PLMN selection vectors.
• USIM Service Table Audit: Decode EF_UST to identify enabled USIM services including OTA, GBA, MBMS, and ProSe capabilities.

TelcoChisel Execution Cheatsheet

1. Launch Cardpeek GUI

# Open Cardpeek with automatic reader detection
cardpeek
# Select "Telecom SIM" script from the dropdown

2. Read SIM via CLI Lua Script

# Execute USIM exploration script headlessly
cardpeek-cli -e /usr/share/cardpeek/scripts/usim.lua -r 0

3. Export SIM Data to XML

# Dump complete SIM file structure to XML for offline analysis
cardpeek-cli -e /usr/share/cardpeek/scripts/usim.lua -r 0 -x /tmp/sim-dump.xml

Practice in TelcoSec Academy

👉 Launch Smartcard Security Lab on App.TelcoSec.Net