SIMple

●

github help

Format

Commands

Expanded format

APDU hex

SD params tag

Connection parameters ('84')

Security parameters ('85')

PSK Identity (text)

KVN

KID

Retry policy ('86')

Retry counter (2 bytes, hex)

Hours

Minutes

Seconds

Report failure (vendor-specific TLV)

HTTP POST ('89', 8A=host,8B=agent,8C=URI)

Host (text→hex)

HTTP agent ID (text, X-Admin-From)

URI (text→hex)

Wrapped in Command Scripting template ('AA')

Command

Context

Response data (hex)

Card presets

SPI1 (Security Parameter Indicator)

SPI2 (PoR settings)

KIc (Ciphering Key Identifier)

KID (MAC Key Identifier)

KIc Key (hex)

KID Key (hex)

TAR (3 bytes)

Counter (5 bytes)

Padding byte

APDU (hex)

RAM operations perform atomic GlobalPlatform commands over SCP80. Card keys are taken from the saved preset.

Card preset

Operation

CAP file (max 48 kB)

SD AID (empty = ISD)

Privileges

Byte 1

Byte 2

Security Domain Trusted Path DAP Verification Authorized Management Delegated Management Token Verification Card Lock Global Delete Card Terminate Global Lock Card Reset Global Registry CVM Management Mandated DAP Verification Final Application

Receipt Generation

SIM/UICC Toolkit parameters

Toolkit mode

Priority

Timers (max)

Menu text length

Menu items

First menu position

First menu ID (hex)

Last menu position

Last menu ID (hex)

Channels (max)

MSL (SPI1, hex)

TAR (3 bytes)

Access domain (hex)

Max services

Install parameters (hex, optional) STK parameters (hex, optional) Make selectable LOAD block size (bytes, empty = auto-fit)

Splits the load file into LOAD APDUs that fit one SCP80 SMS; auto-fit picks the largest size that encodes into 140 octets.

Working...

Custom files are added in file manager tree and included in card scan.

Root (MF / ADF)

Parent DF

FID (4 hex)

Alias (EF. / DF.)

The parent may be any DF path — a standard DF from the tree or a custom DF, any depth; parents not yet seen in the tree are marked ⚠.

Only mismatches

Server URL

To access local card reader, you need pysim-simple-server running locally.

To connect, install pysim-simple-server: git clone https://github.com/anttro/simple.git and start it.
Refer to pysim-simple-server README files for details. Click Connect when pysim-simple-server is ready

Sort: FID Name

STK menu

No menu set by the card

STATUS and Polling

| Polling

TERMINAL PROFILE

Events that the card monitors (SET UP EVENT LIST):

Network simulation

Replays the write patterns a real phone performs on network-condition changes (EPS attach, service loss, roaming denial, 2G fallback, SMS delivery, cell-broadcast reconfiguration, AUTHENTICATE). Only UPDATE BINARY/RECORD, ENVELOPE and AUTHENTICATE are sent; FPLMN is appended only by the permanent "PLMN not allowed" rejection (TS 31.102 4.2.16, never duplicated), an attach to a listed PLMN clears its entry first (successful manual selection, TS 23.122), and the 5GS location files are never touched.

Parameters

Operator search (country / brand / MCC-MNC)

MCC

MNC

Sets the PLMN written to LOCI/PSLOCI/EPSLOCI. Used by EPS attach, 2G attach and SMS received (real LAI/RAI/TAI; SMS only when its location rewrite is enabled), and by Cold boot, Service lost, Limited service and Roaming denied (the dummy LOCI/PSLOCI keep this PLMN, the EPSLOCI dummy wipes the TAI PLMN). Churn, CB reconfig and AUTHENTICATE don't use it.

LAC

Cell ID

TAC

RAC

Advanced identity (empty = random)

TMSI

GUTI

KSI

KASME

Algorithm

RAND

AUTN

Send Location status event (if subscribed) Dummy location files Invalidate EPSNSC Keep KASME (KSI 07 only) Write/invalidate Kc Rejection: write FPLMN SMS: rewrite location too CB: clear lists instead of writing IDs Churn count Delay ms

Network state

Last refresh:

Fetched proactive commands:

PROVIDE LOCAL INFORMATION response data

The equipped card is not an eUICC

Chip

Profiles

Notifications

HTTP OTA listener

Mode

Host

Port

Script

PSK keys come from the card presets (Cards tab): the listener picks the key by the identity the card sends in the TLS handshake.

Redirect: every BIP channel the card opens is connected to this Host:Port (the external HTTP OTA platform); TLS is terminated there, and the address the card requests is only logged.

Pass-through: the terminal connects each BIP channel to the destination the card requests in OPEN CHANNEL (Other address + transport port, TCP client only); Host and Port above are not used, TLS is terminated by that platform, and the server's network is used (lab only).

Options (applied at Start)

HTTP framing

Chunked body (Transfer-Encoding: chunked)

Chunk size (bytes, 0 = one TLS record)

Connection header

Compact headers (omit the optional space after ':') Send X-Admin-Next-URI (required to continue the session)

Unchecked = one-shot: per GP Am. B §4.4.2 the card executes the command, returns no response string and closes the session.

Script framing

Comprehension-required tags

Send X-Admin-Targeted-Application

Show link events (Channel status ENVELOPEs, TS 102 223 7.5.11)

Script results (R-APDUs)

HTTP OTA log

New script from

Scripts are stored locally in your browser and sent to the server when a listener starts.

CAP file

SD AID (empty = ISD)

Install parameters (hex, optional)

STK parameters (hex, optional)

Make selectable

The .cap is only used to generate the APDUs: the script stores the APDU list, not the file.

AIDs to delete (one per line)

Delete parameters (P2)

APDUs (one hex C-APDU per line)

Name	Kind	APDUs	Created

Card presets are stored locally in your browser. JSON export/import buttons are below the card list.

SCP80 (GSM 03.48, ETSI TS 102 225)

ISD TAR

UICC RFM TAR

ADF RFM TAR

SCP81 (HTTP OTA)

SCP81 HTTP OTA: the listener picks the key by the PSK identity the card sends in the TLS handshake. Cards without a PSK are ignored by the listener.

Name	ICCID	KIc	KID	SPI1	SPI2	TAR (ISD/UICC RFM/ADF RFM)	Cntr	SCP81

TERMINAL PROFILE

Preset (device model)

Profile (hex)

Bits are decoded per TS 102 223 5.2; the hex field is authoritative and bytes/bits outside the table are preserved as-is.

Profile from card

Profile name

Ignore contents of files: All

FCP/FCI check

Select card snapshot

Compare snapshots

Master snapshot Snapshot to check