Woron scan log

[migone]

I've tried to find KI with 3 differents cards...but it always gives me same log

Anyone can explain, please ?

PIN1 is disabled
PIN1 remaining 3 attemps
PUK1 remaining 10 attemps
10:09:50
Starting 2R attack on 0 pair....
No 2R attack collision found....
10:53:37
Starting 2R attack on 4 pair....
No 2R attack collision found....
Both pairs possibly non-collisions....

[lvcid]

I've tried to find KI with 3 differents cards...but it always gives me same log

Anyone can explain, please ?

I'm getting the exact same thing....

[Thaijames]

I've tried to find KI with 3 differents cards...but it always gives me same log

Anyone can explain, please ?

Getting same exact thing, what does it mean?

[lvcid]

I might add that I'm using InfinityUSB+Silvercard

[ianh]

i also get this on a o2 uk sim yet if i put in the att sim that came with the phone it says
Starting 2R attack on 0 pair....
The GSM algorithm is not comp128-1 ...Scanning stoped...

[migone]

I might add that I'm using InfinityUSB+Silvercard

Me too, Infinity USB Unlimited

[lvcid]

i also get this on a o2 uk sim yet if i put in the att sim that came with the phone it says
Starting 2R attack on 0 pair....
The GSM algorithm is not comp128-1 ...Scanning stoped...

So theoretically if I don't get the "The GSM algorithm is not comp128-1 ...Scanning stoped.." it means that it can be cracked right???

[migone]

So theoretically if I don't get the "The GSM algorithm is not comp128-1 ...Scanning stoped.." it means that it can be cracked right???

Theoretically yes...

[ianh]

realisticaly though no!! my o2 sim scans up to 65000 steps and then just stops.

[Thaijames]

realisticaly though no!! my o2 sim scans up to 65000 steps and then just stops.

Something about some cards will fail if scanned more than this, some kind of security. However is it a setting in Woron Scan or does it automatically know that the card has the 65000 limit

[Holles]

Starting 2R attack on 0 pair....
No 2R attack collision found....
10:53:37
Starting 2R attack on 4 pair....
No 2R attack collision found....
Both pairs possibly non-collisions....

I'm getting the exact same thing as Ivcid & Migone....

what does it mean ?

Ivcid & Migone have you clear the problem !

[migone]

Unfortunately no... :mad:

[Thaijames]

I looked at all the sim cards which have the above problem and they all are able to store 250 contacts, someone mentioned that if a sim card holds 250 contacts then it is a version 2 sim. Does this mean that Woron Scan might not give an error message or does it mean that some Version 1 sims can also hold 250 contacts?

[Thaijames]

Just read on GSMhosting that sims that start with the number 89 are Version 2 Sims
most of the sims that I have been testing and that give the above error have started with that number (89), including the one in the Iphone.

This means that Woron Scan might not be alerting us that it is a version 2 card as previously noted. Can anyone else confirm this?

[ozbimmer]

Thaijames: not true. I have a sim with ICCID starting 89 and Woron has no problem finding the necessary info :)

BTW, 89 simply means it's GSM. Have a look at ICCID numbering system...

[Thaijames]

Thaijames: not true. I have a sim with ICCID starting 89 and Woron has no problem finding the necessary info :)

BTW, 89 simply means it's GSM. Have a look at ICCID numbering system...

ozbimmer, Thanks for clarifying that, I think a lot of us are stuck because we cannot get the ki and don't know if we are dealing with a version one or two SIM and if we are using the right method to extract the Ki

[healeydave]

You are all using the software fine, its just Woron is unable to crack the KI.

I have tested many cards and have successfully extracted KI from a few.
Surprisingly, out of all the cards I have tested, Woron has not declined to scan any stating they are not version 1 but in the majority of cases it has exhausted its sequence without success.

The author of Woron-Scan has stated that it may not always detect a SIM is V1 or V2 and proceed with the attack sequence. I think you are simply experiencing this!

If you run through the default 2R scan on 0 & 4 pair, your count should be over 60k (around 31000 attempts per pair) when it reaches the end. If it does this, assume the card is a V2 or V3 card or simply a SIM that can't be KI extracted.

The first time I scanned a working SIM and didn't get a result, I proceeded to scan the other pairs but blocked the SIM. Many SIMs have a limit to the amount of attacks that can be actioned against them!

[Thaijames]

. Many SIMs have a limit to the amount of attacks that can be actioned against them!
Thanks for the info above very helpful. Do only version 1 sims have a limit to the amount of attacks? I have ruined a few sims by going over the limit, does that mean they are version 1? And if they are version 1 should I keep on trying on the same type of sim in hopes that I will eventually crack one of them.

[healeydave]

No, If its a version 1 SIM, Woron is more than likely to crack it before you get anywhere near any limits.

In my experience, a single scan using the default "2R on Pair 0 & 4" will be sufficient to extract KI, if you exhaust this I think its a V2/3 that will Woron can't crack. If you proceed to try another pass on another set of Pairs, this is when your likely to block the SIM!
At this point, its best to find a different type, I think all similar SIMs would fail in the same way.

[Gmany007]

can anybody help me
my magic key searching ends at gsm algorithm step 512:eek: :confused:

[healeydave]

Starting 2R attack on 0 pair....
No 2R attack collision found....
10:53:37
Starting 2R attack on 4 pair....
No 2R attack collision found....
Both pairs possibly non-collisions....

I'm getting the exact same thing as Ivcid & Migone....

what does it mean ?

You have started a default attack, this starts with Pair Zero. Woron probes the SIM with a series of requests looking for a collision which if successful leads to it discovering this Pair. Once its exhausted its probing for a single pair (around 31000+ attempts), it will move onto Pair Four where-by another 31000+ attempts will be made. If both pairs are exhausted, the attack will cease reporting no collisions detected.

You can choose to start it off on a different pair if you like but I don't believe the attack will be any more successful which ever pait you choose Woron to try and find first. It either will or it won't succeed through 1 attack.

[deadzone]

I having a similar problema. I got my infinity unlimited, but woroscan send me a com error on Pheonix or PC SC option, and on A38 emulator it scan returning 00 as Ki, also happends if no card is inserted. The default software that came with the Infinity does read the card. Also the Infinity does not change its light when i run it.

Windows XP recognizes the programmer as a read under Devices. Any ideas?

[Thaijames]

No, If its a version 1 SIM, Woron is more than likely to crack it before you get anywhere near any limits.

In my experience, a single scan using the default "2R on Pair 0 & 4" will be sufficient to extract KI, if you exhaust this I think its a V2/3 that will Woron can't crack. If you proceed to try another pass on another set of Pairs, this is when your likely to block the SIM!
At this point, its best to find a different type, I think all similar SIMs would fail in the same way.

Thanks you have been very helpful. My last option now is an old sim that I am using as my main phone, but I can't scan it because it says Pin one blocked. but I don't know how to unblock it.

[Holles]

must disable Pin befor scan ?

[matt77]

OK the same things for me 62 000 attemps in 6 hours (woron scan):

PIN1 is disabled
PIN1 remaining 3 attemps
PUK1 remaining 10 attemps
21:33:02
Starting 2R attack on 0 pair....
No 2R attack collision found....
00:35:28
Starting 2R attack on 4 pair....
No 2R attack collision found....
Both pairs possibly non-collisions....

What's the ATR number ?

And when i launch the KI search i was on "0", can i try with an another (1,2,3....9) ?

Sim emu search KI too ?

THX

[migone]

Finally I've succeded to extract KI with this soft : http://www.magicsim.com/files/MAGICSIM.exe

It comes with woronscan 1.09 and SIMdat_6an

Really easy to use. You'll find (here) http://www.magicsim.com/en/multi-sim.asp?new_id=5 the installation guide and the"how to" for extracting KI.

Hope that it will help you.

[matt77]

you find your KI in "strong mode" ?

[migone]

you find your KI in "strong mode" ?

In normal mode.

Strong mode can decrypt just a little part of v2 card but I do not recommand it, you risk to brick your sim...

[deadzone]

How long did it took you to get the Ki with MagicSIM. Did you get colilision in woroscan with the same sim?

Im going for 3 hours / 70000 now in MagicSIM, shoult it be displaying what he has found or does it give you the numbers at the end?

[migone]

How long did it took you to get the Ki with MagicSIM. Did you get colilision in woroscan with the same sim?

Im going for 3 hours / 70000 now in MagicSIM, shoult it be displaying what he has found or does it give you the numbers at the end?

Only 37minutes / around 8000... and it will display at the end of search.

[healeydave]

Only 37minutes / around 8000... and it will display at the end of search.

Hi Migone,
were you using a SIM on MagicSim that the regular Woron-Scan failed to find?

Its my understanding that MagicSim is wrapped around Woron-Scan anyway!

There is however a definite difference between the Scans because Magic just keeps going.
However the first SIM I tried in MagicSim was destroyed because it kept going until the SIM said no more!

I am trying a second SIM with MagicSim but in my experience, if Woron doesn't find it after the first attack, you are still left with a working SIM. If you then try to attack the same SIM starting with a different set of pairs, its fruitless and you end up destroying the SIM eventually because again you are exceeding the amount of attempts allowed before the SIM blocks.

I'm wondering if MagicSim simply doesn't stop like Woron and keeps going?

[deadzone]

do you suggest i stop or keep tring. Im on 87000 now going for 4 hours

[healeydave]

Its hard to say, it depends on how disposable the sim is to you.

I dont recall what the count got to on mine, it went over 70000, I doubt it got to much more than your already on!

I'd be interested to see if it succeeds or even if it doesn't, if your SIM has survived the attack.

[migone]

Hi Migone,
were you using a SIM on MagicSim that the regular Woron-Scan failed to find?

Its my understanding that MagicSim is wrapped around Woron-Scan anyway!

There is however a definite difference between the Scans because Magic just keeps going.
However the first SIM I tried in MagicSim was destroyed because it kept going until the SIM said no more!

I am trying a second SIM with MagicSim but in my experience, if Woron doesn't find it after the first attack, you are still left with a working SIM. If you then try to attack the same SIM starting with a different set of pairs, its fruitless and you end up destroying the SIM eventually because again you are exceeding the amount of attempts allowed before the SIM blocks.

I'm wondering if MagicSim simply doesn't stop like Woron and keeps going?

For me, woron scan failed to find KI, I've tried with magicsim and it found me KI in one time. I really don't know how and why. Woron scan has bricked a sim yesterday, maybe enough of attack.

And you're right when do you say that magicsim is wrapped around woron scan.

MagicSim stops only if KI is found otherwise it will go on indefinitely.

[matt77]

hey
i'm in 160 000 now in 20h ( strong mode )
always no KI...

i keep the faith ! ;)

[deadzone]

Mine went for 150,000 6 1/2h and stopped, did not find the Ki

[matt77]

350 000 now ! always nothing :(

[HiSoC8Y]

im using woron scan

its my 2nd or 3rd try ...

first time, it stopped at 33000

now, its on 45,000 and still going....

will it stop if it finds it, or keep going to the end, and then display?

might try magicsim if woron scan failed.

[HiSoC8Y]

didnt find the Ki with woron scan

im trying Sim Scan v2.0 now