[{"data":1,"prerenderedAt":192},["ShallowReactive",2],{"tool-doc-shadysim":3},{"_path":4,"_dir":5,"_draft":6,"_partial":6,"_locale":7,"title":8,"description":9,"name":8,"protocol":10,"category":11,"hardware":12,"command":13,"academyLab":14,"body":15,"_type":186,"_id":187,"_source":188,"_file":189,"_stem":190,"_extension":191},"\u002Ftools\u002Fshadysim","tools",false,"","ShadySIM","SIM card application installation and exploitation toolkit for loading custom Java Card applets onto SIM\u002FUSIM cards for OTA attack simulation and SIM toolkit research.","SIM \u002F USIM","SIM Card Exploitation","PC\u002FSC Smartcard Reader (ACR38U \u002F Omnikey)","shadysim -l","https:\u002F\u002Fapp.telcosec.net",{"type":16,"children":17,"toc":175},"root",[18,27,45,52,97,103,110,123,129,138,144,153,159],{"type":19,"tag":20,"props":21,"children":23},"element","h1",{"id":22},"shadysim-sim-card-applet-exploitation-toolkit",[24],{"type":25,"value":26},"text","ShadySIM — SIM Card Applet Exploitation Toolkit",{"type":19,"tag":28,"props":29,"children":30},"p",{},[31,36,38,43],{"type":19,"tag":32,"props":33,"children":34},"strong",{},[35],{"type":25,"value":8},{"type":25,"value":37}," enables loading custom Java Card applets onto programmable SIM cards (sysmoISIM-SJA2, Gialer blanks). Within ",{"type":19,"tag":32,"props":39,"children":40},{},[41],{"type":25,"value":42},"TelcoChisel",{"type":25,"value":44},", it is preconfigured with PC\u002FSC reader drivers and sample exploit applets for testing SIM Toolkit (STK) command injection, OTA SMS key bruteforcing, and carrier OTA platform security assessment.",{"type":19,"tag":46,"props":47,"children":49},"h2",{"id":48},"key-capabilities-security-vectors",[50],{"type":25,"value":51},"Key Capabilities & Security Vectors",{"type":19,"tag":53,"props":54,"children":55},"ul",{},[56,67,77,87],{"type":19,"tag":57,"props":58,"children":59},"li",{},[60,65],{"type":19,"tag":32,"props":61,"children":62},{},[63],{"type":25,"value":64},"Custom Applet Installation",{"type":25,"value":66},": Load arbitrary Java Card applets onto writeable SIM\u002FUSIM cards for security testing.",{"type":19,"tag":57,"props":68,"children":69},{},[70,75],{"type":19,"tag":32,"props":71,"children":72},{},[73],{"type":25,"value":74},"SIM Toolkit Hijacking",{"type":25,"value":76},": Install rogue STK menus that intercept user interactions (call setup, SMS sending, USSD queries).",{"type":19,"tag":57,"props":78,"children":79},{},[80,85],{"type":19,"tag":32,"props":81,"children":82},{},[83],{"type":25,"value":84},"OTA Attack Simulation",{"type":25,"value":86},": Simulate over-the-air SIM update attacks by testing OTA key derivation and binary SMS payload handling.",{"type":19,"tag":57,"props":88,"children":89},{},[90,95],{"type":19,"tag":32,"props":91,"children":92},{},[93],{"type":25,"value":94},"APDU Trace Analysis",{"type":25,"value":96},": Log and analyze SIM ↔ ME (Mobile Equipment) APDU command sequences for protocol reverse engineering.",{"type":19,"tag":46,"props":98,"children":100},{"id":99},"telcochisel-execution-cheatsheet",[101],{"type":25,"value":102},"TelcoChisel Execution Cheatsheet",{"type":19,"tag":104,"props":105,"children":107},"h3",{"id":106},"_1-list-installed-sim-applets",[108],{"type":25,"value":109},"1. List Installed SIM Applets",{"type":19,"tag":111,"props":112,"children":117},"pre",{"className":113,"code":115,"language":116,"meta":7},[114],"language-bash","# Enumerate all applets installed on the target SIM card\nshadysim -l -r 0\n","bash",[118],{"type":19,"tag":119,"props":120,"children":121},"code",{"__ignoreMap":7},[122],{"type":25,"value":115},{"type":19,"tag":104,"props":124,"children":126},{"id":125},"_2-install-custom-stk-applet",[127],{"type":25,"value":128},"2. Install Custom STK Applet",{"type":19,"tag":111,"props":130,"children":133},{"className":131,"code":132,"language":116,"meta":7},[114],"# Install a SIM Toolkit test applet from compiled CAP file\nshadysim -i \u002Fopt\u002Fshadysim\u002Fapplets\u002Fstk-intercept.cap -r 0\n",[134],{"type":19,"tag":119,"props":135,"children":136},{"__ignoreMap":7},[137],{"type":25,"value":132},{"type":19,"tag":104,"props":139,"children":141},{"id":140},"_3-delete-applet-from-sim",[142],{"type":25,"value":143},"3. Delete Applet from SIM",{"type":19,"tag":111,"props":145,"children":148},{"className":146,"code":147,"language":116,"meta":7},[114],"# Remove a previously installed applet by AID\nshadysim -d A0000000620001 -r 0\n",[149],{"type":19,"tag":119,"props":150,"children":151},{"__ignoreMap":7},[152],{"type":25,"value":147},{"type":19,"tag":46,"props":154,"children":156},{"id":155},"practice-in-telcosec-academy",[157],{"type":25,"value":158},"Practice in TelcoSec Academy",{"type":19,"tag":28,"props":160,"children":161},{},[162,164],{"type":25,"value":163},"👉 ",{"type":19,"tag":32,"props":165,"children":166},{},[167],{"type":19,"tag":168,"props":169,"children":172},"a",{"href":14,"rel":170},[171],"nofollow",[173],{"type":25,"value":174},"Launch SIM Security Lab on App.TelcoSec.Net",{"title":7,"searchDepth":176,"depth":176,"links":177},2,[178,179,185],{"id":48,"depth":176,"text":51},{"id":99,"depth":176,"text":102,"children":180},[181,183,184],{"id":106,"depth":182,"text":109},3,{"id":125,"depth":182,"text":128},{"id":140,"depth":182,"text":143},{"id":155,"depth":176,"text":158},"markdown","content:tools:shadysim.md","content","tools\u002Fshadysim.md","tools\u002Fshadysim","md",1792170263442]