IMSI/ESN/IMEI change.

How do I change my sim IMSI number? I’m not very savvy with phones so excuse my retardation. I have figured out that changing my IMEI number is fairly simple and there are tutorials out there BUT I can’t find anything on IMSI. I read somewhere that the only way you can change your IMSI number is by cloning, if so, how do I do that? I did find something regarding the ESN number but will it work though? https://www.scribd.com/doc/67869272/How-to-Change-Your-ESN-Number

>>16851 You can't. The IMSI is used by your carrier to match subscriber data, including encryption / authentication keys to your SIM. So changing it will probably make the SIM unusable.

>>16870 Appreciate the info lainon. I am retarded when it comes to Telecommunications.

>>16851 >>16870 >>16946 I posted about this a while back. I'll come back to this thread (maybe) to dump what I know. Here's a QRD: >Obviously you need root for this >The baseband is its own thing, with its own CPU and soykaf >Your IMEI and IMSI do get broadcast. You only have an IMSI if your SIM is in. >The new Librem phone seems to fix this by allowing hardware killswitch >Without hardware killswitch you can't really be sure except by reading your broadcast signals with an SDR >You can make your phone much harder / impossible to stingray if you use telecom tower maps (also needs root) >Your IMEI and IMSI may be spoofed, but that part is actually quite hard. It requires reverse engineering proprietary manufacturer code. This is a serious hacker topic. I hope you got your big boy pants on OP.

>>17064 Also the IMEI/IMSI you give to apps can be spoofed much easier than the IMEI/IMSI your hardware has in it.

>>17064 I would love that. This is such an interesting topic.

>>17064 >>17124 Absolutely agreed. I know absolutely nothing about mobile yet. 10/10 thread, post.

>>17124 https://www.youtube.com/watch?v=LLWBaW4f38I https://www.youtube.com/watch?v=qhzU0NHIBrc&t=301s

>>16851 spoofing your IMEI is easy, just buy a old mediatek phone. its illegal in most countries tho

>>17337 What do you do with Mediatek, just run MTK-su to get root? Are you talking about a CPU vuln? What does Mediatek have to do with it?

>>17065 this. just use xprivacy lua >>16851 the wrong imsi will deactivate the sim. last I've heard about sim hacking, the guys who tried and successfully reverse engineered/hacked it were abducted. >>17337 mediatek can use engineering tools but most of the time it doesn't work >>17359 Not that lainon but it's not a vuln. The mtk 6580 is probably the most common and cheapest chipset but you can aim for 4G version (mtk 659X I think). The thing is you can run engineering mode and change a lot of stuff that you probably don't even know about. you can even disable certain frequency bands (gsm 900 800 3g 2100 etc) to save more battery. If you can't access engineer mode app there is a dial code put *#*#505#*#* *#*#3646633#*#* in the phone dialer or if it doesn't work use app to make shortcut of the hidden app, preferrably something like "more shortcuts (pic related)" or https://f-droid.org/en/packages/de.szalkowski.activitylauncher Another foolproof method for a true hackerman is to just get a marshmallow mtk device and wipe the nvram which usually resets the IEMI and give you a random one (be sure to back it up before though, make sure you have a copy of your recovery image and boot image and have multiple versions of mtk spflasher + winodws, protip open properties of the files and "unblock" dlls and exes if they have problem working). Pic related, it's a soykafmove by microsoft.

>>17416 Anons, please read my post before attempting to do what that anon said. It's for your safety. Thank you for telling me about the engineering options. Surely, I didn't know about those and I consider myself an experienced Android rooter. I do say I love Mediatek because those CPUs and their drivers are swiss cheese and easy to hack/root. Just look for models of that chipset when purchasing. >Dick move, Microsoft I used to think that, but it's a feature designed to protect you from malware. In this case, you'll totally 1000% get a virus by running executables such as spflashtool on Windows. >Using Windows Not memeing, but unironically hack phones strictly from your Ubuntu/Kali/Mint/Arch/Debian/whatever install, not Windows. On Windows you have to install gay device drivers, but on Linux it's all built into the kernel. Plus you'll get all these nasty viruses on Windows >How do you know it's a virus? You use Ghidra and disassemble it. Ain't no one got time. >Some activity launcher I mean, it might be cool, but what does it have to do with this? Was this just part of your setup? Do you happen to know more details about the hidden app? I'm the type to launch it all from terminal anyway. >Multiple versions of Windows Your other advice is probably sound, but this isn't. Windows takes forever to clean install, and is less suitable for this type of hacker work. All you need for this is a live Linux USB, not multiple versions of Windows. I recommend Mint or Ubuntu. >Spflashtool You do NOT NEED SPFLASHTOOL. Most/any spflashtool exes youll download WILL BE INFECTED! As usual, the only thing you need for full image backup is either twrp, adb, or dd. If you inspect the source code on spflashtool, you can actually see all the commands you need to run yourself. You just have to know how to read a partition table. >guys who reverse engineered the SIM thing got abducted sounds like a fun spooky campfire story to tell, can you share the tale?

>>17422 >Multiple versions of Windows I misquoted that but just the multiple spflasher versions would suffice and vista if possible (less telemetry). I keep windows installs disconnected from wan. There is spflashtool on linux too but it's outdated even on arch repos, been there and met a messy dependency hell which still doesn't work properly. I assume for a quick and easy method OP can just buy a throwaway mediatek marshmallow version and wipe the efs or nvram partition. I found out about it randomizing imei when I bricked my phone but if that phone is pre-kitkat it will be stuck with invalid imei although I've no use for these findings so just sharing here. Another reason is the use of spflashtool is much better since you can always accidentally wipe the boot or reformat the partition table and have it bricked but you're right, it's better to just use raw open source tools for backups (in case you suspect the spflasher binary to be injecting your rom with something). I only use it for pic related, disabling GPS and some mobile bands. I've been debloating way before snowden came out and before privacy was "cool" for energy efficiency reasons mainly. >Some activity launcher There are hidden apps installed on most phones. Official firmware may even have calibration tool for example I calibrated a phone with problematic accelerometer using official rom which had the calibrator hidden in it. Assuming you have a custom lineageos rom, you can copy even those apks and have it work on your new rom (including engineer tools). The activity launcher just enables you to interact with APKs that have no app executables like say custom widget and wallpaper apps that don't even show on your home launcher. >sounds like a fun spooky campfire story to tell, can you share the tale? Check out the last defcon (or ccc if not) who tried hacking sim and even baseband. I guess they just went private. (abducted part is just for attention but I guess either this or that).

>>16870 Could you potentially highjack someone else's telephone plan by changing yout IMSI?

>>17484 IMSI is tied to a processor inside a SIM card, which is really hard to extract without possession of severe backdoors or access to electron scanning microscope for 1-to-1 recreation of the inside circuitry. But an attacker can request a SIM card reissue. Certain people, knowing your phone number or private information, can issue a new SIM card with your plan and phone number and use it to receive calls or messages intended for you. Old SIM will be deactivated permanently or temporarily depending on what they want to achieve. There is also a way to do this from SS7 telecom backbone without reissuing new SIM cards

>>17337 The Gerda CFW for KaiOS devices also supports changing/randomizing your IMEI. Nokia 8110 is cheap and supports 4G. It's Snapdragon 210(?) based. MTK 65XX devices are common, but only 659X SoC's support 4G. These hard hard to find nowadays.

>>17480 I've got a few questions. First of all, thanks for replying and educating. >no use for these findings You're educating cybersec-minded people which is a use unto itself. I am grateful for the knowledge, even though I have little to pay you back with. >apk files from official firmware for sensor calibration Where would I check if I wanted to look for such libraries on my device, or libraries which control the bands, or the GPS, or whatever? I know it's different on modern Android and between OEM, but you see I'm actually going to design a lab on this. Sorry if you already posted the answer to this, I'll check what you wrote closer after I post this. I'm getting into embedded programming so this is extremely interesting to me. >>17485 You don't need much info to get a SIM card, and you totally could sign up in someone else's name. It won't get you in trouble though, the government tracks you hard enough to know that SIM isn't yours. Yes, they know that much. SIM card is the main thing they track when you're a wanted criminal now too. It's the easiest way to track location. >>17484 Technically yes, although it will never happen to you. The carrier's network would get suspicious if two of the same IMSI connected and they would see the anomaly and recognize the two phones as several distinct devices. "You can pretend to be me, but only when I'm(my phone) is sleeping" This type of soykaf is more used for interception of calls and texts and soykaf as well as proximity tracking. >>17488 Based information

>>17586 >You don't need much info to get a SIM card, and you totally could sign up in someone else's name. It won't get you in trouble though, the government tracks you hard enough to know that SIM isn't yours. Yes, they know that much. SIM card is the main thing they track when you're a wanted criminal now too. It's the easiest way to track location I meant if your SIM gets spoofed, they know it is and you won't get in trouble for it.