[Simsec] SIMTester error

Mahdiyeh Parham comet258 at gmail.com
Thu Dec 5 04:43:01 CET 2019


Hi all,
I'm testing some SIM cards and two of them show errors that stop the
fuzzing process. I handle the error to pas the problematic points of code.
How can I fix the error?



[de.srlabs.simtester.Fuzzer, generateCommandPacket]
called generateCommandPacket(keyset = 0, counterManagement = 0, KICAlgo =
 0, KIDAlgo = 0, TAR = SAT:505348, requestPoR = true, cipherPoR = true
first step command=02700000330D0031000050534800000000000042230121020744382E3130353105160604313035312D0C1003830607912143658709F02B00
[de.srlabs.simtester.Fuzzer, fuzzCard] smsdeliver data:
4405002143F57FF60000000000000000
[de.srlabs.simtester.Fuzzer, fuzzCard] Envelope content:
80C2000057D15582028381860500214365878B484405002143F57FF6000000000000003802700000330D0031000050534800000000000042230121020744382E3130353105160604313035312D0C1003830607912143658709F02B00
fuzzer: fuzzer9, TAR: SAT:505348, keyset: 0 - card responded with
FETCH, fetched_data =
D01D81030113008202818305008B10410005002143F500F606027100000C0A,
response word: 9000
...........command=02700000330D0031000050534800000000000042230121020744382E3130353105160604313035312D0C1003830607912143658709F02B00
...........response=D01D81030113008202818305008B10410005002143F500F606027100000C0A9000
Proactive command (SEND SHORT MESSAGE) identified, details:
"410005002143F500F606027100000C0A"; trying to handle it..
[de.srlabs.simlib.ResponsePacket,
 parse] Data provided don't seem to be valid, data should be at least 16
 bytes long for a valid ResponsePacket (027100000C0A)
[de.srlabs.simlib.ResponsePacket,
 parse] Not enough data! RPL = 12, real data length: 1, trying to set
RPL and RPH based on real length and continue, this may get ugly
[de.srlabs.simlib.ResponsePacket,
 parse] Unexpected Response Header Length (RHL), should be 10 bytes
without a CC or 18 bytes with a CC, current value: 0
Exception in thread "Thread-1" java.lang.NullPointerException
	at de.srlabs.simlib.ResponsePacket.getCounter(ResponsePacket.java:225)
	at de.srlabs.simlib.ResponsePacket.parse(ResponsePacket.java:173)
	at de.srlabs.simlib.ResponsePacket.parse(ResponsePacket.java:42)
	at de.srlabs.simtester.Fuzzer.handleResponseData(Fuzzer.java:376)
	at de.srlabs.simtester.Fuzzer.logic(Fuzzer.java:334)
	at de.srlabs.simtester.Fuzzer.run(Fuzzer.java:136)



-- 
------------------------------------------------------
Best regards
Mahdiyeh Parham
Security analyst and developer.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.srlabs.de/pipermail/simsec/attachments/20191205/d1973c24/attachment.html>


More information about the Simsec mailing list