The RebelSIM card is a type of Proxy SIM that can be put between the SIM card reader and the actual SIM card
The proxy is able to manipulate any message from the phone to the card or vice versa, as the SIM Card protocol (TS 11.11)
is not encrypted or authenticated.
The RebelSIM is typically used for SIM unlocking phones. However, as it is a general proxy SIM, it can be used for
any purpose, e.g. for filtering any STK commands between SIM and ME (to fully SIM toolkit)
RebelSIM comes in multiple flavors.
This model has not been analyzed yet.
The two SIM card interfaces are wired with the F300 controller the following way:
The F300 controller can be programmed using a two-wire protocol known as C2.
However, the C2 programming pins are not wired to the SIM Card itself but only to test pads.
It is suggested that the official RebelSIM firmware images probably contain some alternate
(but unknown) means of flashing via the actual SIM card interface.
It is not known if any of the LOCK bits have been set on the card. Nobody has yet tried
to re-program it with custom firmware.
The SDCC compiler claims to support the F300.