← Back to TelcoSec Arsenal

pySim

SIM / USIM / ISIM / eSIM

Osmocom tool suite for reading, programming, and auditing SIM, USIM, ISIM, and eSIM cards over standard PC/SC interfaces.

Domain / CategorySmartcard & UICC Security Toolkit
Required HardwarePC/SC Smartcard Reader (Omnikey / ACR38U)
Primary BinarypySim-prog.py
⚡ Quick Telecom Protocol BriefSIM / USIM / ISIM / eSIM

pySim is an open-source Smartcard & UICC Security Toolkit component included in TelcoChisel for telecommunications security auditing. It targets SIM / USIM / ISIM / eSIM infrastructure for compliance with 3GPP and GSMA telecom security standards.

Primary Binary: pySim-prog.pyHardware: PC/SC Smartcard Reader (Omnikey / ACR38U)

pySim — SIM / USIM / eSIM Security & Programming Suite

pySim is the authoritative Osmocom tool for interacting with telecommunication smartcards (UICC). In TelcoChisel, pySim comes with full support for PC/SC daemon bindings, SysmoSIM programmable cards, and eSIM Local Profile Assistant (LPA) commands.

Capabilities

  • Key Extraction & Inspection: Read Elementary Files (EF_IMSI, EF_ICCID, EF_HPLMN, EF_AD, EF_AUTH) to extract subscriber credentials and carrier parameters.
  • Milena / Tuak Key Derivation: Program authentication keys (Ki, OP, OPC) for test carrier deployment in Open5GS/srsRAN test environments.
  • eSIM Profile Audits: Interact with eUICC security domains (ISD-P, ECASD) to test eSIM profile downloading and mutual authentication certificates.

Pre-installed TelcoChisel Cheatsheet

1. Detect Connected Smartcard Reader

# Check PC/SC reader status and card ATR
pcsc_scan

2. Launch Interactive pySim Shell

# Enter interactive pySim terminal
pySim-shell.py -p 0

3. Read IMSI and Carrier Elementary Files

# Inside pySim-shell:
pySim-shell (0:MF)> select ADF.USIM
pySim-shell (0:MF/ADF.USIM)> select EF.IMSI
pySim-shell (0:MF/ADF.USIM/EF.IMSI)> read_binary

Practice in TelcoSec Cloud Academy

To learn smartcard hardware security and eSIM penetration testing: 👉 Access the SIM & UICC Lab at App.TelcoSec.Net

Cloudflare D1 Verified

Community Test Notes & Field Feedback

No community field notes posted yet. Be the first telecom engineer to leave feedback!