The hacker's field guide to the SIM card in your pocket — anatomy, pinout intel, and a full digital infiltration lab. 100% client-side.
That tiny gold chip is a tamper-resistant computer that decides who you are to the network. Corporations want you to ignore it. This page teaches you to read it, control it, and kill-switch it.
| Module | What it does |
|---|---|
| Bootloader intro | Typed boot sequence → ACCESS GRANTED. Click-to-skip, toggleable in settings |
| Interactive chip diagram | Clickable C1–C8 SVG contact block wired to a live pin dossier (tech specs, exploit vector, defense tactic) |
| APDU trace log | Frame-by-frame decoded ISO 7816 capture: SELECT MF → DF_GSM → EF_IMSI → READ BINARY → RUN GSM ALGO |
| MOD_01 — Handshake visualizer | Run a normal AKA auth, or simulate an IMSI catcher and watch it harvest the IMSI |
| MOD_02 — Port scanner | Simulated loopback sweep with progress bar + live hex memory dump |
| MOD_03 — RF sweep | Animated radar spawning UK-grid tower blips, with a GO DARK airplane-mode toggle |
| MOD_04 — Sandbox shell | Working guest terminal: help, scan, trace, cloak, score, theme, manifesto, sudo… |
| MOD_05 — APDU builder | Forge ISO 7816 frames (CLA/INS/P1/P2/Lc/Data), execute simulated SW1/SW2 responses, copy hex |
| KIT_01 — Exposure calculator | Six-habit checklist → live 0–100 opsec score with prioritized fixes |
| KIT_02 — Rotation budget | Rotation interval × prepaid cost → SIMs/year, annual & monthly privacy budget (£) |
| KIT_03 — Field notes | PBKDF2×100k → AES-256-GCM encrypted scratchpad, stored locally, passphrase never saved |
| Protocol checklists | Interactive opsec steps — click to complete, click again for the why; progress persists |
| Sound engine | WebAudio synth blips (click / select / success / alert / radar ping), toggle with m |
| Keyboard ops | ? cheatsheet · / shell · 1–6 sections · d dark · c cloak · t theme · m sfx · b reboot |
| Themes & settings | CYBER / OLED / LIGHT themes, rain & scanline toggles, reduced-motion, persisted to localStorage |
| Atmosphere | Matrix rain, SIGINT ticker, scanlines, HUD grid-ref + RF status, scramble headings, themed 404 |
| Accessible | Skip link, ARIA roles on pads/modals, keyboard-operable checklists, prefers-reduced-motion |
Everything is simulated or computed in-browser. Zero packets leave the page.
This release fuses the zero-dependency site with the best modules from the companion React prototype
(LIN4CRE/simroot, Google AI Studio build): the interactive chip
dossier, APDU builder, exposure calculator, rotation budget, encrypted field notes, WebAudio sound
engine, keyboard shortcuts, and settings/themes — all re-implemented in vanilla JS, still one file, zero deps.
No build step, no dependencies:
git clone https://github.com/DLinacre/sim-root.git
cd sim-root
# just open it
open index.html # macOS
xdg-open index.html # Linux
# …or serve it
python3 -m http.server 8000 # → http://localhost:8000- Fork / copy this repo
- Settings → Pages → Source:
mainbranch,/root - Wait ~60s →
https://<you>.github.io/sim-root/
sim-root/
├── index.html # the whole site (single file, zero deps)
├── 404.html # themed not-found node
├── image.png # SIM pinout schematic ("intel" image)
├── assets/
│ ├── banner.png # GitHub social card / README banner
│ ├── logo.svg # chip mark
│ └── favicon.svg # tab icon
├── README.md
└── LICENSE # MIT
Educational security content. The "lab" is JavaScript theater — it sends no traffic. Scanning or intercepting networks you don't own, or lack written permission to test, is a crime (UK: Computer Misuse Act 1990, Investigatory Powers Act 2016). No instructions for cloning, billing fraud, or interception are included. Hack your own gear.
- Base pinout reframe inspired by @tipsfcworld telecom training material (remixed)
- Fonts: JetBrains Mono + Share Tech Mono (Google Fonts)
- Built for the Bradford, UK node. Stay free.