March 28, 2024

How to Unlock Your 1.1.2 OTB iPhone With a SuperSIM

Posted January 3, 2008 at 2:43am by iClarified
With a SIM Card Programmer and a SilverSIM you can easily unlock your 1.1.2 OTB iPhone by making a SuperSIM!

Things You Need:
1. SIM Card Programmer (I used an Infinity USB Unlimited purchased from here). NOTE***: Do not purchase a programmer from Wizard Satellite. I learned that lesson the hard way.

2. Silver Card (I purchased mine at the same time as the programmer from here).


3. Your SIM Card (NOTE*** : This must be a V1 SIM Card. A V1 card is an older SIM card, probably a few years old that you can easily extract a KI number from. I will try to compile a list of SIM cards that are V1 in the near future.

4. SimEmu 6.01 (Download from: here)

5. Woronscan 1.09 (Download from: here)


Warning:
This tutorial makes a duplicate of your SIM Card. In some countries doing this may be against the law. Check to make sure you are legally allowed to do this before attempting the tutorial.


SETUP YOUR PROGRAMMER
I will take you through the steps to install the Infinity USB Programmer. If you plan on using a different programmer then skips these steps and refer to manual of your programmer.

Step One
Unpackage your Infinity USB Programmer and connect it to the computer via the included USB cable.
How to Unlock Your 1.1.2 OTB iPhone With a SuperSIM

Step Two
The Found New Hardware wizard will open. Click Locate and install driver software.
How to Unlock Your 1.1.2 OTB iPhone With a SuperSIM

A popup will appear asking you to permit this action. Click the Continue button.

Step Three
A popup will appear asking you to insert the disc that came with the programmer. Do this now.
How to Unlock Your 1.1.2 OTB iPhone With a SuperSIM

Step Four
Another popup will appear telling you that windows can't verify the publisher of this driver software. Click Install this driver software anyway.
How to Unlock Your 1.1.2 OTB iPhone With a SuperSIM

Step Five
You will now be notified that windows has successfully installed the software for this device. Click the Close button. Notice also that the light on your programmer will change from red to a bluish purple.
How to Unlock Your 1.1.2 OTB iPhone With a SuperSIM

Step Six
Open My Computer and go to your disc drive. Double click setup.exe to launch the programmers software setup.
How to Unlock Your 1.1.2 OTB iPhone With a SuperSIM

Complete the installation and at the end make sure to launch the program.

Step Seven
From the popup that appears select your language then click the Ok button.
How to Unlock Your 1.1.2 OTB iPhone With a SuperSIM

Step Eight
You may get a firmware updated message. Click the Ok button.
How to Unlock Your 1.1.2 OTB iPhone With a SuperSIM

Step Nine
You will then get a new software message popup. You must unfortunately click to Yes to update.
How to Unlock Your 1.1.2 OTB iPhone With a SuperSIM

Step Ten
You will be taken to a website to download the latest software. Download it and install it. Once it finishes you will be prompted to restart.
How to Unlock Your 1.1.2 OTB iPhone With a SuperSIM

Step Eleven
Once the computer has rebooted launch the Infinity USB Unlimited program from your desktop.
How to Unlock Your 1.1.2 OTB iPhone With a SuperSIM

Step Twelve
If you get prompted about a firmware update click the Ok button.
How to Unlock Your 1.1.2 OTB iPhone With a SuperSIM

Step Thirteen
Click to select Virtual COM port (VCP) mode from the Tools menu.
How to Unlock Your 1.1.2 OTB iPhone With a SuperSIM

How to Unlock Your 1.1.2 OTB iPhone With a SuperSIM

Step Fourteen
A popup window will appear. Take note of the COM port. Mine is COM port 2. Then click the Enable button.
How to Unlock Your 1.1.2 OTB iPhone With a SuperSIM

Step Fifteen
You will be notified that your programmer is in VCP mode. Click the Ok button.
How to Unlock Your 1.1.2 OTB iPhone With a SuperSIM



FIND YOUR IMSI, KI, and ICCID
Step One
Download Woronscan 1.09 using the link above.

Open the zip file(ws109.zip) that downloads and drag Woron_Scan.exe to your desktop.
How to Unlock Your 1.1.2 OTB iPhone With a SuperSIM

Step Two
Insert your working SIM into the programmer. The card must be insert with the gold part down and completely inside the programmer.

Step Three
Double click to launch Woron_Scan.exe from your desktop.
How to Unlock Your 1.1.2 OTB iPhone With a SuperSIM

Step Four
Click to select Settings from the Card Reader menu.
How to Unlock Your 1.1.2 OTB iPhone With a SuperSIM

Step Five
Choose the COM port of your programmer that we found above and click the Ok button.
How to Unlock Your 1.1.2 OTB iPhone With a SuperSIM

Step Six
Select IMSI select from the Tasks menu.
How to Unlock Your 1.1.2 OTB iPhone With a SuperSIM

Step Seven
Woron_Scan will display your IMSI number. Take note of this. (I've blanked some of my numbers out)
How to Unlock Your 1.1.2 OTB iPhone With a SuperSIM

Step Eight
Select ICC select from the Tasks menu.
How to Unlock Your 1.1.2 OTB iPhone With a SuperSIM

Step Nine
Woron_Scan will display your ICCID number. Take note of this. (I've blanked some of my numbers out)
How to Unlock Your 1.1.2 OTB iPhone With a SuperSIM

Step Ten
Select KI Search from the Tasks menu.
How to Unlock Your 1.1.2 OTB iPhone With a SuperSIM

Step Eleven
A dialog box will open called Magic Key searching. Click the Start button.
How to Unlock Your 1.1.2 OTB iPhone With a SuperSIM

Step Twelve
This could take a really long time; however, eventually the program will find a KI value. You will notice the series of questions marks in the Magic Key searching... window will slowly change to numbers. Once all the question marks have turned into numbers you have found your KI number. Write it down. (I've blanked some of my numbers out)
How to Unlock Your 1.1.2 OTB iPhone With a SuperSIM

How to Unlock Your 1.1.2 OTB iPhone With a SuperSIM

NOTE***: This process took me almost an hour. It might take more or less time.

NOTE***: If you do not have a V1 SIM you might get a message similar to this when trying to find your KI number. Starting 2R attack on 0 pair....
The GSM algorithm is not comp128-1 ...Scanning stoped...
.

Step Thirteen
Take your working SIM card out of the programmer and insert the SIM card that came with your iPhone.

Step Fourteen
Select ICC select from the Tasks menu. Then once you get an ICCID select IMSI select from the Tasks menu. Take note of the IMSI. (I've blanked some of my numbers out)
How to Unlock Your 1.1.2 OTB iPhone With a SuperSIM

How to Unlock Your 1.1.2 OTB iPhone With a SuperSIM

How to Unlock Your 1.1.2 OTB iPhone With a SuperSIM

Step Fifteen
Exit Woron Scan.

Step Sixteen
Remove the SIM Card from the programmer.



MAKE THE SUPERSIM
Step One
Download SIM_EMU_6.01_CFG_v2.1.zip from: here

Launch the SIM_EMU_6.01_CFG_v2.1.exe file from the zip to install it.
How to Unlock Your 1.1.2 OTB iPhone With a SuperSIM

Step Two
Download SIM_EMU_6.01_iphone_u1.rar from: here

Extract the two HEX files onto the desktop.
How to Unlock Your 1.1.2 OTB iPhone With a SuperSIM

Step Three
Put your Silver Card into the programmer. Do not break the card apart. Put the large card into the programmer with the gold part facing up and completely inserted.

Step Four
Run Sim-Emu 6.01 Configurator from your programs list.
How to Unlock Your 1.1.2 OTB iPhone With a SuperSIM

Step Four
Click on the Configure tab.
How to Unlock Your 1.1.2 OTB iPhone With a SuperSIM

Step Five
Click the Read from disk button.
How to Unlock Your 1.1.2 OTB iPhone With a SuperSIM

Step Six
Select the SIM_EMU_6.01_iphone_u1.HEX file we saved to the desktop, then click Open.
How to Unlock Your 1.1.2 OTB iPhone With a SuperSIM

A popup will appear saying Flash read from file click the Ok button.
How to Unlock Your 1.1.2 OTB iPhone With a SuperSIM

Step Seven
Another popup will appear. Select the SIM_EMU_6.01_iphone_u1_EP.HEX file we saved to the desktop and then click Open.
How to Unlock Your 1.1.2 OTB iPhone With a SuperSIM

A window will popup saying EEPROM read from file. Click the Ok button.
How to Unlock Your 1.1.2 OTB iPhone With a SuperSIM

Step Eight
You will notice that positions 0 and 9 are colored red. That is good.
How to Unlock Your 1.1.2 OTB iPhone With a SuperSIM

Step Nine
Make sure position 0 is selected type in the data which you got from your carrier SIM with Woronscan (IMSI,Ki & ICCID).

For ADN/SMS/FDN# type 161, 15, 4

For SMS Centre type in your Carrier SMS center number. This is the number you dial for voicemail. Make sure you include the +1 in front for North America.

Type in 1111 for PIN1 and 11111111 for PUK1.
How to Unlock Your 1.1.2 OTB iPhone With a SuperSIM

Step Ten
Now select position 9. Enter the IMSI from the SIM card that came with your iPhone (AT&T) and set PIN1and PUK1 to the exact same thing as your entered for position 0.
How to Unlock Your 1.1.2 OTB iPhone With a SuperSIM

Step Eleven
Click the Write to disk button.

Step Twelve
A write flash file window will appear. Name the flash file SuperSIM.HEX and click the Save button. I saved the file to the desktop.
How to Unlock Your 1.1.2 OTB iPhone With a SuperSIM

You will be notified that the Flash was written to file. Click the Ok button.
How to Unlock Your 1.1.2 OTB iPhone With a SuperSIM

Step Thirteen
A write EEPROM file window will appear. Name the EEPROM file SuperSIM_EP.HEX and click the Save button. I saved the file to the desktop.
How to Unlock Your 1.1.2 OTB iPhone With a SuperSIM

When notified that the EEPROM was written to file click the Ok button.
How to Unlock Your 1.1.2 OTB iPhone With a SuperSIM

Step Fourteen
Close Sim-Emu and launch the Infinity USB Unlimited program from your desktop or the system tray.
How to Unlock Your 1.1.2 OTB iPhone With a SuperSIM

Step Fifteen
Select SilverCard from the dropdown list.
How to Unlock Your 1.1.2 OTB iPhone With a SuperSIM

Step Sixteen
You will see two file fields in the center of the window. Load SuperSIM.HEX into the top one. Then load SuperSIM_EP.HEX into the bottom one.
How to Unlock Your 1.1.2 OTB iPhone With a SuperSIM

Step Seventeen
Now click the Write button. You will be shown the status of the write process. Click the Done button when it is complete!
How to Unlock Your 1.1.2 OTB iPhone With a SuperSIM

Step Eighteen
Pop the small SIM card out of the large card carefully. If you didn't buy the SilverSIM I did you might have to cut it manually. Follow these instructions to do that: http://www.mobileshop.org/usertech/simcutting.htm


JAILBREAK YOUR IPHONE
Step One
Place your AT&T SIM into your iPhone and follow this tutorial to Jailbreak your iPhone!
How to Activate and Jailbreak Your OTV 1.1.2 iPhone Using Windows


MAKE YOUR SUPERSIM WORK
Step One
Place your SuperSIM into your iPhone.

Step Two
A popup message will appear letting you know that a locked SIM has been inserted. Press the Unlock button.
How to Unlock Your 1.1.2 OTB iPhone With a SuperSIM


Step Three
Enter 1111 as the pin and press Ok.
How to Unlock Your 1.1.2 OTB iPhone With a SuperSIM

Step Four
The iPhone will now connect to your wireless carrier and you are good to go!
How to Unlock Your 1.1.2 OTB iPhone With a SuperSIM

Step Five
Whoops wait a minute. I noticed the Voicemail button doesn't work for me. Go to your keypad and call this number: *5005*86*yourvoicemailphonenumber#

Obviously replace yourvoicemailphonenumber with your full voicemail number ie. 15196971123.

Wait a few seconds after pressing call (It won't actually call anyone) and then your Voicemail button will work!


NOTES***:
I'd like to send a big thanks to Viper who help me get through this! Thanks for your help!

Also, please do not take this tutorial and copy it elsewhere. Please link to it. Not only are you stealing my bandwidth but putting to waste the many long hours I worked on this. Thank you.
Add Comment
Would you like to be notified when someone replies or adds a new comment?
Yes (All Threads)
Yes (This Thread Only)
No
iClarified Icon
Notifications
Would you like to be notified when we post a new Apple news article or tutorial?
Yes
No
Comments (46)
You must login or register to add a comment...
Scottw
Scottw - August 12, 2014 at 2:56am
Anyone have link that works for Woron Scan 1.09, free of viruses? It's impossible to find a copy of it. So if anyone knows how to get it, then please post it. And SimEmu 6.01 for that matter.
Scottw
Scottw - August 12, 2014 at 2:36am
Anyone have link that works for Woron Scan 1.09, free of viruses? It's impossible to find a copy of it. So if anyone knows how to get it, then please post it. And SimEmu 6.01 for that matter.
iphonebrk
iphonebrk - February 8, 2008 at 8:33am
Hi Chus, I can store 250 contacts in my SIM card, so I think it could be 32K...
CHUS
CHUS - February 7, 2008 at 9:22am
to iphonebrk: If your SIM card is a 2002 Movistar card it´s probably a V1 Card, so if you are not beeing lucky obtaining the KI, it´s probably a Card Reader problem.... or not, who knows... I can´t tell you if your PC SC Card Reader is going to work, because I don´t know the device. The only think I can tell you is that, if your card is a 16K SIM (150 contacts) and is Movistar is for sure a V1 card. If it´s a 32K SIM could be V1 or V2... In any case is your Card Reader only a reader or it´s also a programer? If it´s only a reader you have to buy a new equipment anyway... Sorry that I can´t help you more...
ntliks
ntliks - February 7, 2008 at 8:46am
to Pipas: Yes, install octoprep, upgrade to 1.1.2, jailbreak and your supersim should work.
Pipas
Pipas - February 6, 2008 at 3:51pm
I followed your tutorial exactly and my Silver Sim is programed but i will only work in my old unlocked iphone, in the 1.1.2 OTB iPhone it just does not work.What could be wrong? Any ideas? I jailbreaked it and it is on 1.1.1, must I update it to 1.1.2 again? But why does it work in my old 1.0.2 that is now 1.1.1.
tomas jonson
tomas jonson - February 6, 2008 at 2:46pm
How can I tell in advance if my IMSI can be found in advance of buying the equipment? I have a Globe SIM from the Philippines I want to use when I go there.
iphonebrk
iphonebrk - February 6, 2008 at 11:07am
I'm sorry Chus, I was worng. My SIM is from 2002... My phone is from 2004! I hope my SIM could crackable, I think my problem is I don't have a Phoenix Card Reder... Could I do this with a PC SC Card Reader?
CHUS
CHUS - February 6, 2008 at 9:21am
K = Kbytes.... is the memory of the SIM card used to store names and phone numbres. At the beginning the cards use to have 16Kbytes that was enough for 100 contacts, with 32Kbytes you have more or less 150 Contacts.... If your Card is a Movistar 2004 it´s for sure a V2 SIM with 32 or 64Kbytes..... V1 SiMs where sold in Spain till the midle of 2003 more or less... I´m afraid your SIM card is not going to be crackeable..... sorry.... :-(
iphonebrk
iphonebrk - February 6, 2008 at 8:55am
Hi Chus, what do you mean when you ask "How many K´s do you have in your SIM card?" What's that? I've got my SIM card since 2004 (I think) and it's from Movistar, so I think it coluld be a V1.
tomaselterrible
tomaselterrible - February 5, 2008 at 12:09pm
I bought a stealth sim and tried to use it, got "no sim" , under microscope could see that the through hole vias in the stealth sim wee not connected. Could see scratches on the coating on the stealth sim chip. Gotta be real careful how you insert it, it's delicate. I sent it back to get a new one because of the through hold via issue.
CHUS
CHUS - February 5, 2008 at 10:52am
iphonebrk, How old is your SIM card? Wich Company? How many K´s do you have in your SIM card? As I have read in forums, here in spain, v1 SIM cards were sold till 2002 and they usually are 16K or 32K cards... that is, MOVISTAR, AIRTEL or AMENA cards only. If your card is newer than that or is from one of the new comapies, Orange, Vodafone or Yoigo, be sure that is not going to be V1, and therefore is not going to be crackeable. Also take note that the error you see in the tutorial when WoroScan detects that it is not an V1 SIM card, is produced with the Infinity device. Who knows what error are you going to recive with your device.....
iphonebrk
iphonebrk - February 5, 2008 at 8:59am
So... my question is: what happen if I've got a PC SC Card Reader instead a Phoenix Card Reader? Could I do something? Because I would like to extract my Ki number before buying something...
iphonebrk
iphonebrk - February 5, 2008 at 8:45am
Hola Chus, I don't know if my SIM is a V1 card, but when I try to extract the KI number I don't get the error you can find in the tutorial. So I think it could be a V1 card... Now I'm looking for a VCP to "connect" my USB smart card reader via COM port. Thanks... I'm from Spain too ;-)
CHUS
CHUS - February 5, 2008 at 8:15am
iphonebrk, are you sure that your SIM card is an V1 card??? Obtaining the KI is only possible in v1 Cards.... :-(
iphonebrk
iphonebrk - February 5, 2008 at 6:39am
I've got a different smart card programmer than Infinity. I configure Woroscan as PC SC Card, it begins to scan (for an hour, more or less) and finally it says "No collisions found". Why? Whats the difference between select Phoenix Card or PC SC Card?
iphonebrk
iphonebrk - February 4, 2008 at 8:00am
Could I use any smart card programmer to do this? In this case, where could I buy silver cards?
wombat
wombat - February 1, 2008 at 5:00pm
As none of my SIMS are V1: anyone interested in buying the USB Infinity from me? I'm selling at less than the incurred costs + delivering fee = still less than my costs. Hoping to make someone happy. Just post a message here.
CHUS
CHUS - February 1, 2008 at 5:31am
Thanx Received yesterday my WB_Electronics survival package and now my iPhone is fully operative her in Spain..... :-)
rap165
rap165 - January 28, 2008 at 2:24pm
Fantastico! Works like a charm, on Belgium's Mobistar with Silvercard II and Infinity USB unlimited. Fun cards DON'T work so stick to silver like in this excellent manual. Thanxs iC! Cheers,
Recent. Read the latest Apple News.
RECENT
Tutorials. Help is here.
TUTORIALS
Where to Download macOS Sonoma
AppleTV Firmware Download Locations
Where to Download macOS Ventura
Where To Download iPad Firmware Files From
Where To Download iPhone Firmware Files From
Deals. Save on Apple devices and accessories.
DEALS