Woron Scan 1.09 Now
[ SIM Card ] ---> (RS232/USB Reader) ---> [ Woron Scan 1.09 ] ---> Cracks Ki Key | [ Target Device ] <--- (Programmable Silver/Green Card) <------------------+
However, the core functionality of interest was its interaction with the authentication command. In a legitimate network operation, the SIM receives a 128-bit random challenge (RAND) and computes a 32-bit Signed Response (SRES) and a 64-bit session key (Kc) using the Ki (individual subscriber key) and the A3/A8 algorithm.
Unlike modern plug-and-play USB smart card readers that handle high-level commands, the Phoenix interface was a simple hardware design that clocked the card and managed the serial communication. Woron Scan communicated directly with the microcontroller on the SIM, allowing for precise control over the timing and voltage of the communication. This granular control is a prerequisite for the timing attacks utilized to extract cryptographic keys.
: It attempts to "crack" the COMP128v1 encryption algorithm used on older SIM cards to find the Ki, which is necessary for cloning. SIM Management Woron Scan 1.09
: By obtaining the Ki and IMSI, users could program a "Silver Card" or blank SIM to mirror an existing one, allowing a second device to receive calls and messages meant for the original. Technical Limitations
Acknowledging limitations is as important as praising strengths. Version 1.09 lacks cloud integration, predictive failure alerts (SMART data interpretation might be rudimentary or absent), and a graphical timeline of disk health. It cannot undelete files or reconstruct partitions. Its user manual—if one exists—is probably a plain text file with terse instructions and warnings in broken English. For a modern user, such a tool feels archaeological: useful only in legacy environments or as a learning exercise in low-level I/O.
The software is primarily designed to work with SIM cards that use the algorithm. This hashing algorithm was widely used in older GSM SIM cards to protect the Ki. Over time, vulnerabilities in COMP128v1 were discovered, allowing tools like Woron Scan to potentially recover the Ki using known plaintext attack techniques. [ SIM Card ] ---> (RS232/USB Reader) ---> [ Woron Scan 1
: Because it is a legacy 32-bit (or sometimes 16-bit compatible) application, it often requires Compatibility Mode or a virtual machine running Windows XP/7 to function correctly on modern operating systems like Windows 10 or 11.
The SIM card calculates a response () using the secret Ki and the RAND via the COMP128 algorithm.
The software is a legacy Windows application. For use on older systems like Windows 98, it requires specific dynamic library files (like winscard.dll ) to be manually added to its directory. Security & Risk Assessment Woron Scan communicated directly with the microcontroller on
: Standard software would be used to get the first Ki value after a long scan. Woron Scan could then use this single known value to calculate the remaining seven Ki values in about 20 minutes.
While Woron Scan 1.09 is entirely obsolete for practical everyday smartphone use or modern cellular operations, it remains highly valuable as an . Security students and hardware reverse-engineers still study the software to understand the fundamentals of smart card communication, side-channel attacks, and the evolution of cellular security protocols.
is a classic, Windows-based utility program engineered to interface with external smart card readers via serial (COM) ports or USB-to-RS232 converters. Its primary capability is extracting the structural cryptographic keys hidden inside mobile SIM cards.
Its most famous feature was the ability to crack the KI of older SIM cards (Version 1) within minutes or hours, depending on the reader's speed.