SIMulator: SIM Tracing on a (Pico-)Budget

Fuente: arXiv
Gespeichert in:
Bibliographische Detailangaben
Hauptverfasser: Gegenhuber, Gabriel K., Frenzel, Philipp É., Dabrowski, Adrian
Format: Preprint
Veröffentlicht: 2025
Schlagworte:
Online-Zugang:
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
_version_ 1866912450388951040
author Gegenhuber, Gabriel K.
Frenzel, Philipp É.
Dabrowski, Adrian
author_facet Gegenhuber, Gabriel K.
Frenzel, Philipp É.
Dabrowski, Adrian
contents SIM tracing -- the ability to inspect, modify, and relay communication between a SIM card and modem -- has become a significant technique in cellular network research. It enables essential security- and development-related applications such as fuzzing communication interfaces, extracting session keys, monitoring hidden SIM activity (e.g., proactive SIM commands or over-the-air updates), and facilitating scalable, distributed measurement platforms through SIM reuse. Traditionally, achieving these capabilities has relied on specialized hardware, which can pose financial and logistical burdens for researchers, particularly those new to the field. In this work, we show that full SIM tracing functionality can be achieved using only simple, widely available components, such as UART interfaces and GPIO ports. We port these capabilities to low-cost microcontrollers, exemplified by the Raspberry Pi Pico (4~USD). Unlike other approaches, it dramatically reduces hardware complexity by electrically decoupling the SIM and the modem and only transferring on APDU level. By significantly reducing hardware requirements and associated costs, we aim to make SIM tracing techniques accessible to a broader community of researchers and hobbyists, fostering wider exploration and experimentation in cellular network research.
format Preprint
id arxiv_https___arxiv_org_abs_2506_20800
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle SIMulator: SIM Tracing on a (Pico-)Budget
Gegenhuber, Gabriel K.
Frenzel, Philipp É.
Dabrowski, Adrian
Cryptography and Security
SIM tracing -- the ability to inspect, modify, and relay communication between a SIM card and modem -- has become a significant technique in cellular network research. It enables essential security- and development-related applications such as fuzzing communication interfaces, extracting session keys, monitoring hidden SIM activity (e.g., proactive SIM commands or over-the-air updates), and facilitating scalable, distributed measurement platforms through SIM reuse. Traditionally, achieving these capabilities has relied on specialized hardware, which can pose financial and logistical burdens for researchers, particularly those new to the field. In this work, we show that full SIM tracing functionality can be achieved using only simple, widely available components, such as UART interfaces and GPIO ports. We port these capabilities to low-cost microcontrollers, exemplified by the Raspberry Pi Pico (4~USD). Unlike other approaches, it dramatically reduces hardware complexity by electrically decoupling the SIM and the modem and only transferring on APDU level. By significantly reducing hardware requirements and associated costs, we aim to make SIM tracing techniques accessible to a broader community of researchers and hobbyists, fostering wider exploration and experimentation in cellular network research.
title SIMulator: SIM Tracing on a (Pico-)Budget
topic Cryptography and Security
url https://arxiv.org/abs/2506.20800