【Flash】kvSIM v0.9 + kvGen 0.9

incredible

楼上，专家级的就是信步篮桥提供的数据，我的跟你一样。见： http://mobile.0110.cn/dispbbs.asp?boardID=35&ID=67313&star=2&page=1

soft888

强啊，读卡器哪里找啊[em06]

m16

我用两张费卡怎么读不出KI呢？读了几分钟显示全是00 00 00 00 00 00 00```````````````我是按以下这个方法读的啊！“用Woron Scan 成功读出KI，Card Reader中选A38 Simulator 点KI然后Start，大约10～20分钟便可成功读出KI”

vincentlks

请教各位大虾，假如换了KI和IMSI的话是不是要强刷?是全部刷还是只刷改换的KI和IMSI部分!!谢谢!

[此贴子已经被作者于2004-10-27 16:40:29编辑过]

m16

读完卡显示以下内容：Simulator is ready
16:13:05
Starting 2R attack on 0 pair....
Found 2R attack collisions:used  20240 steps
16:13:25
Found by 2R attack the 0 pair=0000
16:13:25
Calculating data for 3R attack....
16:13:26
Found data: common=25 first=00BD second=1019
Finding 3R attack collision...
16:13:26
3R attack collisions  found...used 488 steps
3R attack 2 possible pairs  found
Possible Pair 0000
Possible Pair 6500
16:13:26
Found by 3R attack the 4 pair=0000
16:13:26
Calculating data for 4R attack....
16:13:27
Found data: common=17 first=022B second=87CD third=5600
Finding 4R attack collision...
Used 150 steps for 4R attack
16:13:27
4R attack 8 collisions  found...
16:13:28
final calculating pairs by 4R attack...
0000 0000
Found by 4R attack 2 pair=0000
16:13:28
16:13:28
Calculating data for 3R attack....
16:13:28
Found data: common=25 first=00BD second=1019
Finding 3R attack collision...
16:13:28
3R attack collisions  found...used 488 steps
3R attack 2 possible pairs  found
Possible Pair 0000
Possible Pair 6500
16:13:28
Found by 3R attack the 6 pair=0000
16:13:28
Calculating data for 5R attack....
16:13:29
Found data: common=274 first=004E second=5DDC third=1100 forth=8800
Finding 5R attack collision...
Used 460 steps for 5R attack
16:13:29
5R attack 8 collisions  found...
16:13:30
final calculating pair by 5R attack...
0000 0000 FEF1 0000
00B2 0000 FEF1 0000
16:16:55
Found by 5R attack 1 pair=0000
16:16:55
Calculating data for 3R attack....
16:16:55
Found data: common=25 first=00BD second=1019
Finding 3R attack collision...
16:16:56
3R attack collisions  found...used 488 steps
3R attack 2 possible pairs  found
Possible Pair 0000
Possible Pair 6500
16:16:56
Found by 3R attack the 5 pair=0000
16:16:56
Calculating data for 4R attack....
16:16:57
Found data: common=17 first=022B second=87CD third=5600
Finding 4R attack collision...
Used 150 steps for 4R attack
16:16:57
4R attack 8 collisions  found...
16:16:58
final calculating pairs by 4R attack...
0000 0000
Found by 4R attack 3 pair=0000
16:16:58
Finding last pair by brute force...
16:16:58
Found by brute force  the 7 pair=0000KI  : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
IMSI:

rosey_bear

真的阿？？

m16

用好卡也读不出来，什么原因呢？

Jialaowai

我爱小8到永久！

s32307

以下是引用s32307在2004-10-27 2:43:00的发言：
不能换号！

Xinshou

等待大虾整理出具体步骤来教小辈

s32307

以下是引用s32307在2004-10-27 2:43:00的发言：
不能换号！

wdx7005

移动的“一卡双号”怎样读取？

s32307

换号界面在哪里？

AlexShen

Ｖ２卡能不能用？

rosey_bear

呜呜，我可是买了一卡多号的哦！！！这可是亏大了[em06][em06][em06][em06][em06]

rosey_bear

以下是引用AlexShen在2004-10-27 17:55:00的发言：
Ｖ２卡能不能用？
v2好像还没有软件读出来哦

rosey_bear

还是支持哦小8 阿，我的最爱！！！

AlexShen

以下是引用rosey_bear在2004-10-27 17:56:00的发言：

呜呜，我可是买了一卡多号的哦！！！
这可是亏大了[em06][em06][em06][em06][em06]
你買什麼牌的？
我用ＳＩＭ　ＭＡＸ　換號免關機
這個補丁要關機的
還是有不同的

s32307

我用SUPER SIM，本来换号也不用重开机啊。可是我用这里提过的kvSIM补丁写了两个号码，开机后找不到换号界面！

rosey_bear

以下是引用AlexShen在2004-10-27 18:00:00的发言：


你買什麼牌的？

我用ＳＩＭ　ＭＡＸ　換號免關機

這個補丁要關機的

還是有不同的

和parkstar买的!!
还不错,感觉电话本和短信容量没有太大变化!!
电话本变成128个了,原来200
短信   变成50个了,   原来40