【Flash】kvSIM v0.9 + kvGen 0.9

KoncaCN

051121 - kvGen 0.9(kvSIM用户数据生成中) 发布
进入kvGen v0.9下载页面

051118 - kvSIM 0.9 发布
  1. 加入对短信中心的切换支持(补丁自动修改第一个配置项)；
  2. 修正上一版本中菜单显示的问题；
  3. 使用虚拟卡名字替换运营商名称(仅对虚拟卡有效)。

进入kvSIM v0.9下载页面


050625更新下列功能！
1.增加到7个虚拟号
2.解决切换回真实卡时需手工搜网的BUG，
3.选卡后自动重启，无需手工开机。

欢迎各大机友下载测试,如果有问题请在后面跟贴!
进入kvSIM v0.8下载页面


050329：经过近四个月后，觉得还是不能留个不成熟的版本给机友，所以决定对kvSIM加以完善，以达到实用的程度。现制定版本计划如下（0.11已经发布，初定在4月1日发布0.8版本，中间版本暂不发布）：
    0.1 实现基本功能
    0.11 解决了不能使用“虚拟卡2”的BUG
    0.2 加入菜单
    0.3 选择“卡”后马上关机（属正常关机）
    0.5 在菜单中选择当前卡或选择“空卡”时不操作
    0.6 解决换“卡”不换号、不同运营商间切换困难问题
    0.7 解决使用真实卡时仍存在0.7解决的问题的BUG
    0.8 记录LOCI，避免每次切换卡时均向网络发IMSI，降低风险
    0.9 加入对“短信中心”的处理
    1.0 用“SIM卡名”替换运营商名字

041226：
本人停止kvSIM的更新工作，改为公布源代码，让有兴趣的机友待为完成，并在主页上加入kvSIM的相关介绍.点击查看详情
041220：
1. 用小八来读KI的尝试失败了 >_< 。不过理论上是可以的，只是我现在了解的东西太少了，不足以实现该功能，所以只好搁置起来了。
2. 接下来就是完善kvSIM了，如：菜单控制、换号时无需手工选网络、显示所选卡、在线切换（这个难度亦较大）。

【修改记录】：
　　041027 - 发布 kvSIM 0.11 版本，修正“不能使用虚拟卡２”的Bug

【Flash修改】kvSIM 0.11 - 普通SIM卡上的“一卡多号”
没错！就是小八加上补丁后就可以在普通SIM卡上实现“一卡多号”
注：KI和IMSI暂时还是要用读卡器来读取
此为测试版，请正使用“一卡多号”的机友待为测试、使用点击查看详情
注：请注意KI和IMSI的保密，因为在使用此补丁时，KI+IMSI以明文方式保存在ＦＵＢＵ中的，所以有被J2ME程序读取并以短信发送出去的可能性。请见下面的【关于安全性】
【关于读卡】大家可以看一下这边仁兄的主页：http://www.52movie.net/sim/
【关于读卡器】一般的读卡器最便宜的应该是20到30块

         ---------------------------------
【关于安全性】
　　请见本论坛《兴奋之余，我们应该冷静一下——写在kvSIM - 普通SIM卡上的“一卡多号.之后》
　　http://mobile.0110.cn/viewthread.php?tid=67171

【关于虚拟卡与真实卡的关系】
　　kvSIM只是将KI和IMSI做了处理，电话本、短信、最近接出号码、甚至PIN等都是在真实的ＳＩＭ卡上的。另外，如果真实ＳＩＭ卡是一卡多号的，选择“使用真实卡”时，仍然是使用“一卡多号”的卡，跟没打补丁是一样的，如果选择了“使用虚拟卡”，则只会使用被选择的虚拟卡，如果“一卡多号”卡有修改“短信中心”的功能，则短信中心会被“一卡多号”卡修改。
　　总之，使用虚拟卡时，只是KI和IMSI被特殊处理过，其他一切东东都是真实卡的数据、功能、特性。

感谢 梦游天堂 提供KI和IMSI给我测试，在此向他致谢。
【原理】：
IMSI可以说是一个移动用户的标识，每张正常SIM卡里的IMSI绝对是不同的
KI　是网络登录时使用的一个密钥，是不能直接读出来的(128 bit)
手机登录时将IMSI（或TMSI）发给网络，网络根据IMSI判断是否对该用户进行验证，如果肯定，则发一随机数RAND(128bit)给手机，手机转发给SIM，SIM收到RAND后，用KI作为密钥，通过A3A8算法运算出（SRES + Kc）( 32bit + 64bit）给手机，手机将SRES发给网络，网络自己做一次A3A8运算，如果自己得出的SRES与手机发回来的SRES是一致的，则认为该用户是合法用户。 而Kc是留作后面进行语音通信时对数据进行加密用的。
kvSIM的原理就是 Hook (钩子) 了手机与SIM卡的通信接口，修改SIM返回的IMSI，并在补丁中进行A3A8运算，再把SIM返回的(SRES + Ki)替换掉。
【1120进展】：（041220宣布搁置）
读卡进度：完成 30%
先大概说一下读卡的原理：
sim_scan <-> [ virtaul com port <-> kvReader <-> 数据线 <-> 6688i <-> kvSIM 0.2 ]
sim_scan - 这个应该不用我解释是什么了吧
virtual com port 是一个商业的软件，不注册可试用15天
kvReader - 是个WIN下的软件（暂时这样命名，我说完成的30%就是基本上完成了这个）
kvSIM 0.2 - 准备在0.2版本中加入相应的功能来读SIM卡的KI的函数接口

一句话说穿了，在sim_scan的角度，[ ] 中的所有东东组成了一个“读卡器”

[ 本帖最后由 KoncaCN 于 2005-11-21 00:58 编辑 ]

zhyxxy

沙发啊！！！！！！！

gitian

晕了～有这么强～！！！
大师辛苦了，这么晚都在工作～～～

[em48]注意休息o ～

按kvSIM原理是不是有可能把手机虚拟到电脑上？

通过电脑实现手机的功能～～～
那么gprs,短消息，和旋，彩屏··。

[此贴子已经被作者于2005-1-7 8:46:13编辑过]

xuguan

我好穷的..高手.可不可以想个办法..用6688读KI码出来..像手机工作室读IMSI码一样...
我不想买读SIM卡器啊.....

[此贴子已经被作者于2004-10-26 18:17:19编辑过]

flash补丁

250034404
253878015
272050291
273264369
277670467
282342628
286342772
305097940
315290678
332073270
332073507
344329286
346685504
346686230
349732432
358774577
369335070
372685975
395940434
398943030
409184124
409184407
413641644
419738302
421596121

suxue

以下是引用KoncaCN在2004-10-25 23:54:00的发言：

另：正在研究如何用小八来读Ki，大家可先按兵不同。如果可以，小八就变成一个读卡器！

[此贴子已经被作者于2004-10-26 23:08:23编辑过]

KoncaCN

以下是引用flash补丁在2004-10-26 0:12:00的发言：
250034404
253878015
272050291
273264369
277670467
282342628
286342772
305097940
315290678
332073270
332073507
344329286
346685504
346686230
349732432
358774577
369335070
372685975
395940434
398943030
409184124
409184407
413641644
419738302
421596121

你发的是什么呀？

浪客超仔

激动得说不出话~~~~~~明天就做个读卡器！！不过我好像不需要一卡多号~~~

半支烟

; kvSIM 0.1 alpha
;
; Author: Konca Fung
;         (www.konca.com)
;         25th Oct, 2004
; for SLCK v55lg8; Usage:
;    I use 'Level' of the game 'The Maze' (吃豆子)
;       to control the "SIM card" you want to use.
;  Beginer   - your true physical SIM card
;  Advanced  - the virtual SIM card 1
;  Expert    - the virtual SIM card 2
;
;    It will take effect when you shutdown and boot the mobile;     please change the Ki and IMSI yourself,
;     the data that you needn't to modify please leave it as '00' !!!!
; ------- (Ki + IMSI) Begin -------
;     You can just change this part when you want to modify the Ki and IMSI
; Format: (when you
;   + 0x00: KI   (16 bytes, for example: 8E1122334455667788997B73D22787CB )
;   + 0x10: IMSI ( 9 bytes, for example: 084906000021436587 )( and please fill with '00' after it )
;   + 0x20: Name ( Empty now )
;   + 0x30: SMS Centre ( Empty now ); datas of virtual SIM Card 1
0x1FA060: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 00000000000000000000000000000000 ; KI   - change it if you need
0x1FA070: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 00000000000000000000000000000000 ; IMSI - change it if you need
0x1FA080: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 00000000000000000000000000000000
0x1FA090: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 00000000000000000000000000000000; datas of virtual SIM Card 2
0x1FA0A0: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 00000000000000000000000000000000 ; KI   - change it if you need
0x1FA0B0: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 00000000000000000000000000000000 ; IMSI - change it if you need
0x1FA0C0: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 00000000000000000000000000000000
0x1FA0D0: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 00000000000000000000000000000000
; ------- (Ki + IMSI) End   -------
; ------- Do not change the rest data -------; Hook SIM_Access_Function() in Send & Recv
0x2579FA: DAB210E4 DABF00A0
0x257A86: DAB210E4 DABF00A0; Hook after 'Send back to IIC' and before 'Msg dispatch'
0x256e18: E6003200 FABF04A0; Program
0x1FA000: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF FABF08A0FABF0CA0FABF6CA188108820883088408850886088708880889088A0
0x1FA020: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 88B088C088D088E088F0DABF18A398F098E098D098C098B098A0989098809870
0x1FA040: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 986098509840983098209810E6003200FAC51C6EDB002A206B7653494D202A00
0x1FA160: FFFFFFFFFFFFFFFFFFFFFFFF 10E4B2004CB0CD00B483C700
0x1FA16C: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 88908880D4900C00D4800A00E6F12210E0C2DC42A8318AF33B10E6F12210E0C2
0x1FA18C: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF DC42A8310AF30202DC42B831E6F1940DE6F23600DC42A92149218D08E6F1940D
0x1FA1AC: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF E6F23600DC42A9214923FD07E112E6F2940DE6F33600DC43B922E6F1940DE6F2
0x1FA1CC: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 3600DC42A921C0215C21E6F25C20E6F3FE020021DC539812A842DC44F4411000
0x1FA1EC: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 3D07E112E6F2940DE6F33600DC43B922E6F1940DE6F23600DC42A9214921EA20
0x1FA20C: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF D6A246FE8800EA2096A246FEA4002D0846FEC0002D1F46FEB0002D25EA00D6A2
0x1FA22C: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF DC49A92847F26F00EA30D6A2F018F0290811DC42A96149672D0447F67E00EA30
0x1FA24C: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF D6A2DC42A921E6F22110E0C3DC43B922EA00D6A2E6F12110E0C2DC42A92147F2
0x1FA26C: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 88002D0B0D32E6F12110E0C2DC42A92149272D0347F27E003D28E7F29200E6F2
0x1FA28C: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 2010E0C3DC43B9220D20E7F28800E6F22110E0C3DC43B92288C088D088F088E0
0x1FA2AC: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF E6F210008820E6FC1010E0CDF0E8E600FE02F0F9F2F46821F2F56A21DABF6EAA
0x1FA2CC: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 080298E098F098D098C0D4101000D420120088208810D4301200883088908880
0x1FA2EC: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF D44012008840D45012008850D4A01200E600FE0288A0F2F46021F2F56221DABF
0x1FA30C: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 6EAA06F0100098809890DB00E6FC940DE6FD3600DC4DA92C4921EAF032A4E6FC
0x1FA32C: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 940DE6FD3600DC4DA92C4923EAE032A4E6FC2010E0CDDC4DA92C47F29200EA30
0x1FA34C: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 32A4E6FC2110E0CDDC4DA92CEA2032A4E6FC940DE6FD3600DC4DA92C49222D08
0x1FA36C: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 4923EA3032A4E6FCA020E6FDFE020D04E6FC6020E6FDFE02E6FE2110E0CFDC4F
0x1FA38C: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF A92E47F288002D3349272D0547F27E002D24EA001CA4E6FE2210E0CFDC4FA81E
0x1FA3AC: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 0AF10404DC4FB81EE09E88E0E6FFF00AE6F13200F02CF03DDC5198CFA8DFF0F3
0x1FA3CC: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF F0E2E600FE0206FE1000F2F46821F2F56A21DABF6EAA08020D1BE6FC2210E0CD
0x1FA3EC: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF DC4DA8EC0AFE0808DC4DB8EC0D11E6FEF00AE6FF3200DC5F981EA82E88208810
0x1FA40C: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF F0ECF0FDE6FC1010E0CDDABF28A80804E102E6FC2010E0CDDC4DB92CE6FC2110
0x1FA42C: FFFFFFFFFFFFFFFF E0CDDC4DB92CDB00
0x1FA434: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 66B1BAA2029C704B3719080CFBC1F6BC6DD597352A4FBF73E9F2A4DFD1946CA1
0x1FA454: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF FC25F42F40D306EDB9A08B714C8A3B46431A0D9D3FB3DD1ED624A645987CCF74
0x1FA474: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF F7C229544701310E5F23A915604ED7E1B6F31C5CC976044AF880110B9284F530
0x1FA494: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 955A782757E66AE8AF137EBECA8D89B0FA1B6528DBE33A1433B262D88C162079
0x1FA4B4: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 3D67CB481D6E55D4B4CC96B70F42ACC438C59E00642D990790DEA3A73C87D2E7
0x1FA4D4: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF AEA526F9E022DCE5D9D0F144CEBD7DFFEF36A8597B7A499175EA8F6381C8C052
0x1FA4F4: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 68AA88EB5D51CDADEC5E69342EE4C60539FE619B8E85C7ABBB3241B57F6B93E2
0x1FA514: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF B8DA83214D561F2C583EEE12182B9A17509F866F0972035B1082530AC3F0FD77
0x1FA534: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF B166A2BA9C024B7019370C08C1FBBCF6D56D35974F2A73BFF2E9DFA494D1A16C
0x1FA554: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 25FC2FF4D340ED06A0B9718B8A4C463B1A439D0DB33F1EDD24D645A67C9874CF
0x1FA574: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF C2F7542901470E31235F15A94E60E1D7F3B65C1C76C94A0480F80B11849230F5
0x1FA594: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 5A952778E657E86A13AFBE7E8DCAB0891BFA2865E3DB143AB233D862168C7920
0x1FA5B4: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 673D48CB6E1DD455CCB4B796420FC4ACC538009E2D640799DE90A7A3873CE7D2
0x1FA5D4: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF A5AEF92622E0E5DCD0D944F1BDCEFF7D36EF59A87A7B9149EA75638FC88152C0
0x1FA5F4: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF AA68EB88515DADCD5EEC3469E42E05C6FE399B61858EABC732BBB5416B7FE293
0x1FA614: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF DAB82183564D2C1F3E5812EE2B18179A9F506F8672095B0382100A53F0C377FD
0x1FA634: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 130B50722B01455E27127F756103552B1B7C46532F473F0A2F594F040E3B0B05
0x1FA654: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 236B67441556245B557E20326D5E7806354F1C2D635F292258445D376E7D6914
0x1FA674: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 5A504C60173C594079380E4A6508134E4C42682E6F32200327003A195C161233
0x1FA694: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 39417774166D07563B5D3E6E4E634D430C71576266055821263817084B2D0D4B
0x1FA6B4: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 5F3F1C317B7814702C1E0F626A02671D526B2A7C181E29106C64752849280772
0x1FA6D4: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 527324700C6664545C3048610936374A717B111A353A0409457A15762A3C1B49
0x1FA6F4: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 767D220F417354403E514601186F79536851317F30691F0A065B57251036747E
0x1FA714: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 1F260D00486A4D3D1A432E1D60253D3465112C6C473442392133195A02777A23
0x1FA734: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 34322C061531293B27331920332F342B250428223D0C1C043A17080F0C160912
0x1FA754: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 370A212332012B03390D3E0E072A2C3B3E391B06081F1A3629162D1427031038
0x1FA774: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 3002151C242A3C212212000B180A113D1D0E2D1A372E0B11362E09181E3C2000
0x1FA794: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 1426021E3A230110382817300D13131B1F352F263F0F3105253519243F1D0507
0x1FA7B4: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 01051D0619011217111300091819061F1C14181E041B030D0F100E1204030809
0x1FA7D4: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 14000C1A15081C021D020F070B160E0A11150C1E1A1B101F0B070D170A051613
0x1FA7F4: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 0F0C0A04010E0B0705000E0701020D080A03040906000302050608090B0D0F0C
0x1FA814: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 3424FE023426FE023427FE02B427FE02F427FE02
0x1FA828: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 889088808870886088F088E026F0A200D4A0B000D430AE00E6FE1000F0FCF08D
0x1FA848: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 26FF100000FEDC48A9CFF0FE00F0B9CF86FE1F00CDF3E01EE00CD4D0A200D4F0
0x1FA868: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF A40000DCDC4FA9CDF0DC00D0B9CD80FCCDF4E00CE00DEA0046A9E00FEA0038A9
0x1FA888: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF E058208CE0194C980B9DF2F80EFEF0BF00B8E049209CE0174C79F06B0067F010
0x1FA8A8: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 66F1FF3FF2F202FE001BDC42A9E1C0E7F08066F8FF3FF2F902FE0086DC49A988
0x1FA8C8: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF C0845C140074E094204CE0164C64F6F70EFE4B66F2F70CFEC470A000DC49A988
0x1FA8E8: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF C084DC42A9A1C0AB5C1B00B4F6FB0EFE4B66F2FB0CFEE6F61428E6F7FE02F04C
0x1FA908: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 5C240064DC57D4560200A8468830D430A2000043DC45A984DC42B9819830DC57
0x1FA928: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 9816A826001BDC42A9C1DC49B9C808F1E048208CE0194C98409FADA208D1E01F
0x1FA948: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 4CFC40FDAD9A804CCD95E00CE00DF0FC00F0A9CFC0C6E03F20FD6C6F69C1F0FC
0x1FA968: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 5C2F00FD00F0E4CF2000803DCDF086FC1F00CDEC46FE0800DD2BE00CE10CE6F1
0x1FA988: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 1000001066F1FF3FF2F202FE001CDC42B9C1E00DF08C5C38008DF0F85C4F00F8
0x1FA9A8: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF F08FBC6F7C9F00F866FF80FF81F000F8DC42A9C100F0F4EF2000C0E7E07F20FD
0x1FA9C8: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 4C7F71CEDC42B9C1807DCDE480FCCDD6808EEAC060A8E00EF0CE5C1CF0DC00D0
0x1FA9E8: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF F4CD010000C0A9ECC0E75C4771ECF0C3F0DA00CEDC4DB9EC803ECDEEE00EF0CE
0x1FAA08: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 5C1CF0DC00D0F4CD1200C0C65C66F0DC00D0F4ED1300C0E75C2771CE00C0F4EC
0x1FAA28: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 1400C0E77C2771CEF0C3F0DA08C400CEDC4DB9CC805ECDE3F4C01E00C0C65C66
0x1FAA48: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF F4E01F00C0E75C2771CEDC4AE4C30A00E10CDC4AE4C30B0006F0A60098609870
0x1FAA68: FFFFFFFFFFFF 98809890DB00
0x1FAA6E: FFFFFFFFFFFF ECF5ECF4DB00

hwf5555

高`````````````

scabwc

一定要试试，这可是个改变小8历史的时候啊。

ICERYO

准备关机前随便看了一眼，想不到有好东西

ICERYO

IMSI 可以用手机工作室来读，但是KI就不行。明天就去找读卡器

ICERYO

大概看了一下，现在是不是可以用3张卡？？原卡，虚拟卡1，虚拟卡2。我没用过读卡器，不知道KI是什么东西，用过的朋友提示一点

KoncaCN

其实可以更多，只是测试性地使用两个虚拟卡IMSI可以说是一个移动用户的标识，每个正常SIM卡里的IMSI绝对是不同的
KI　是网络登录时使用的一个密钥，是不能直接读出来的手机登录时将IMSI（或TMSI）发给网络，网络根据IMSI判断是否对该用户进行验证，如果肯定，则发一随机数RAND(128bit)给手机，手机转发给SIM，SIM收到RAND后，用KI作为密钥，通过A3A8算法运算出（SRES + Kc）( 32bit + 64bit），手机将SRES发给网络，网络自己做一次A3A8运行，如果自己得出的SRES与手机发回来的SRES是一致的，则认为该用户是合法用户。 而Kc是留作后面进行语音通信时对数据进行加密用的。kvSIM的原理就是 Hook (钩子) 了手机与SIM卡的通信接口，修改SIM返回的IMSI，并在补丁中进行A3A8运算，再把SIM返回的(SRES + Ki)替换掉。

ICERYO

3个卡我想应该够了吧。联通，移动各一张，还有一个备用呢。难道还要做CDMA，6688不可是双模。另外说一点，我用西门子工作室读出来的IMSI是15位，用读卡器的朋友看看你们的是多少位。我是广西南宁的移动动感地带卡。卡上可存40短信，200个电话，32K

scabwc

哈哈，第一个刷，成功了，历史的时刻来了，选择初级：手机内的SIM卡的手机号（本地通），选择高级，第二个手机号（联通的）选择专家，第三个手机号（神州行），小8的朋友可以节省下买一卡多号的米。强烈建议置顶啊。

scabwc

感谢楼主，开发了这样好的东西，正式版一定可以一机多号了，而且还会有好的界面啊。小8永不被打败。

chowgwen

强啊！！！可惜我没有专门的读卡器，一般多少钱的？

豆豆

这个有历史意义。