173 lines
9.4 KiB
Plaintext
173 lines
9.4 KiB
Plaintext
|
/===================================v==============v==========================\
|
|||
|
|
| White and Silver Boxes | SILVERBX.TXT | from Tharrys Ridenow |
|
|||
|
|
| Lunatic Laboratories Unltd. | | Official Document |
|
|||
|
|
\===================================^==============^==========================/
|
|||
|
|
|
|||
|
|
WHITE BOX PLANS
|
|||
|
|
This article will tell you how to take a perfectly normal touch tone keypad
|
|||
|
|
and convert it into a portable unit, allowing remote phreaking.
|
|||
|
|
|
|||
|
|
First of all, the tones made by a touchtone telephone are not single tones,
|
|||
|
|
they are a combination of two different tones, making "DTMF" (Dual Tone Multi-
|
|||
|
|
Frequency). The normal tone telephone dials 12 different signals, but is capa-
|
|||
|
|
ble of dialling 16 different signals (see silver boxes.)
|
|||
|
|
|
|||
|
|
The power required by a keypad is about 25 volts, but they will work with as
|
|||
|
|
little as 15, thereby allowing the use of two 9-volt radio batteries. As you
|
|||
|
|
may have guessed, they are designed to operate with a telephone type speaker
|
|||
|
|
(and phone line), and not the standard 8-ohm speaker which needs to be used for
|
|||
|
|
adequate volume. To accomplish this, we use a matching transformer, one of
|
|||
|
|
those miniature ones available from Radio Shack. Enough of the theory, now for
|
|||
|
|
the circuit.
|
|||
|
|
|
|||
|
|
You will need:
|
|||
|
|
A touchtone keypad
|
|||
|
|
A miniature 1000 to 8 ohm transformer (Radio Shack #273-1380)
|
|||
|
|
A standard 8-ohm speaker
|
|||
|
|
Two 9-volt batteries
|
|||
|
|
Two 9-volt battery clips
|
|||
|
|
A case to put it all in (optional)
|
|||
|
|
|
|||
|
|
A few construction notes- I suggest that you solder and tape all connections.
|
|||
|
|
It is also important to read this entire file before attempting to construct
|
|||
|
|
this.
|
|||
|
|
|
|||
|
|
First, connect the red wire of the transformer to either terminal on the speak-
|
|||
|
|
er. Now connect the white wire from the transformer to the other terminal on
|
|||
|
|
the speaker. Next, connect the red (positive) wire of one battery clip to the
|
|||
|
|
black wire of the other battery clip. Now connect the remaining red wire on
|
|||
|
|
the second battery clip to the green wire from the touchtone pad. Connect the
|
|||
|
|
blue wire from the touchtone pad to the orange-and-black striped wire from the
|
|||
|
|
touchtone pad. To these two wires, now connect the remaining black lead from
|
|||
|
|
the first battery clip. You now have finished the power connection to the
|
|||
|
|
keypad.
|
|||
|
|
Connect the black wire from the keypad to the blue wire on the transformer.
|
|||
|
|
Next connect the red-and-green striped wire from the keypad to the green wire
|
|||
|
|
on the transformer. The black wire on the transformer should be unconnected,
|
|||
|
|
along with quite a few other wires from the keypad. The connection of the
|
|||
|
|
keypad is now complete.
|
|||
|
|
All you have to do is connect two nine volt batteries to the battery clips,
|
|||
|
|
and you'll be ready to go. I suggest that you stick the mess in a case for
|
|||
|
|
easy portability.
|
|||
|
|
Note that the silver box modification can be made to this unit, allowing com-
|
|||
|
|
plete remote phreaking (this unit is called a grey box). When none of the
|
|||
|
|
buttons are pressed, this unit uses no power, eliminating the need of a power
|
|||
|
|
switch, and extending the life of the batteries.
|
|||
|
|
|
|||
|
|
Dual-Tone Multi-Frequency (Touch-Tone) Frequencies
|
|||
|
|
Key Freq. #1 Freq. #2 [] Key Freq. #1 Freq. #2
|
|||
|
|
--- -------- -------- [] --- -------- --------
|
|||
|
|
1 697 1209 [] 4 770 1209
|
|||
|
|
2 697 1336 [] 5 770 1336
|
|||
|
|
3 697 1477 [] 6 770 1477
|
|||
|
|
A 697 1633 [] B 770 1633
|
|||
|
|
|
|||
|
|
7 852 1209 [] * 941 1209
|
|||
|
|
8 852 1336 [] 0 941 1336
|
|||
|
|
9 852 1477 [] # 941 1477
|
|||
|
|
C 852 1633 [] D 941 1633
|
|||
|
|
Note: A, B, C, and D are the special frequencies generated by silver boxes.
|
|||
|
|
|
|||
|
|
HOW TO TURN YOUR TOUCH-TONE FONE INTO A SILVER BOX
|
|||
|
|
|
|||
|
|
Tools and Materials: Soldering iron, some solder, some 22 Ga. wire, an SPDT
|
|||
|
|
switch, and a screwdriver.
|
|||
|
|
|
|||
|
|
1> Unscrew your phone (it must be a touch tone, desk type).
|
|||
|
|
2> Remove the mounted pad and take the clear plastic cover from the bottom.
|
|||
|
|
3> Hold the pad with the numbers *, 0, and # facing you, and turn it upside
|
|||
|
|
down so you can see the yellow PC board. You should see 2 round black
|
|||
|
|
doughnuts.
|
|||
|
|
4> Position the board so the solder points for the left doughnut face you.
|
|||
|
|
5> Count over 4 points from the left and attach a (GREEN) wire to that
|
|||
|
|
point.
|
|||
|
|
6> Between you and the doughnuts, there should be 2 long yellow capacitors.
|
|||
|
|
To the right of these, and on the edge of the board there should be 3 gold con-
|
|||
|
|
tacts. We will use the one on the left.
|
|||
|
|
7> The contact originally is spot welded, so snip it open.
|
|||
|
|
8> To the one nearest you, attach a (RED) wire, to the other one, a (YEL-
|
|||
|
|
LOW) wire.
|
|||
|
|
9> Run the wires out of the phone, and solder the switch.
|
|||
|
|
10> The orientation should be (RED) to center. The switch will now alter-
|
|||
|
|
nate between normal and 1633Hz fourth column tones.
|
|||
|
|
|
|||
|
|
From BIOC Agent 003's Course in Basic Telecommunications: Part V
|
|||
|
|
|
|||
|
|
Dual Tone Multi Frequency (DTMF) is a modern day improvement on pulse dial-
|
|||
|
|
ing in several ways. First of all, it is more convenient for the user since it
|
|||
|
|
is faster and can be used for signalling after the call is completed (ie SCC's,
|
|||
|
|
computers, etc.). Also, it is more up to par with modern day switching equip-
|
|||
|
|
ment (such as ESS) since pulse dialing was designed actually to move relays by
|
|||
|
|
the number of digits dialed (in SXS offices).
|
|||
|
|
Each key on a DTMF keypad produces 2 frequencies simultaneously (one from
|
|||
|
|
the high group and another from the low group).
|
|||
|
|
|
|||
|
|
-------------------------------------------------
|
|||
|
|
LOW GROUP | Q | ABC | DEF | |
|
|||
|
|
697 Hz -| 1 | 2 | 3 | A |
|
|||
|
|
|-----------|-----------|-----------|-----------|
|
|||
|
|
| GHI | JKL | MNO | |
|
|||
|
|
770 Hz -| 4 | 5 | 6 | B |
|
|||
|
|
|-----------|-----------|-----------|-----------|
|
|||
|
|
| PRS | TUV | WXY | |
|
|||
|
|
{ 852 Hz -| 7 | 8 | 9 | C |
|
|||
|
|
|-----------|-----------|-----------|-----------|
|
|||
|
|
| | OPERATOR | | |
|
|||
|
|
941 Hz -| * | 0 | # | D |
|
|||
|
|
|-----------|-----------|-----------|-----------|
|
|||
|
|
HIGH GROUP 1209 Hz 1336 Hz 1477 Hz 1633 Hz
|
|||
|
|
|
|||
|
|
A portable NORMAL DTMF keypad is known as a white box; a touch-tone fone
|
|||
|
|
converted for use of 1633 Hz is known as a silver box; a portable FULL touch-
|
|||
|
|
tone keypad is known as a grey box.
|
|||
|
|
The fourth column (1633 Hz) is not normally found on regular fones but it
|
|||
|
|
does have several special uses. For one, it is used to designate the priority
|
|||
|
|
of calls on Autovon, the military fone network. These keys are called: Flash,
|
|||
|
|
Immediate, Priority, and Routine (with variations) instead of ABCD. Secondly,
|
|||
|
|
these keys are used for testing purposes by the Telco. In some areas you can
|
|||
|
|
find loops as well as other neat tests (see Part II) on the 555-1212 Directory
|
|||
|
|
Assistance exchange. For this, you would call up a DA in certain areas [that
|
|||
|
|
have an Automatic Call Distributor (ACD)] and hold down the "D" key which
|
|||
|
|
should blow the operator off. You will then hear a pulsing dial tone which in-
|
|||
|
|
dicates that you are in the ACD internal testing mode. You can get on one side
|
|||
|
|
of a loop by dialing a 6. The other side is 7. Some phreaks claim that if the
|
|||
|
|
person on side 6 hangs up, the equipment will screw up and start directing
|
|||
|
|
directory assistance calls to the other side of the loop. Another alleged test
|
|||
|
|
is called REMOB which allows you to tap into lines by entering a special code
|
|||
|
|
followed by the 7 digit number you want to monitor. Then there is the possi-
|
|||
|
|
bility of mass conferencing.
|
|||
|
|
ACD's are becoming rare, though. You will probably have to make several
|
|||
|
|
NPA-555-1212 calls before you find one.
|
|||
|
|
You can modify regular fones quite readily so that they have a switch to
|
|||
|
|
change between the 3rd and 4th columns. This is called a silver box (aka grey
|
|||
|
|
box) and plans can be found in TAP as well as on many BBS's.
|
|||
|
|
|
|||
|
|
Word processed and nroff'ed by Tharrys Alaric Ridenow
|
|||
|
|
Uploaded by
|
|||
|
|
|
|||
|
|
|
|||
|
|
Downloaded from Just Say Yes. 2 lines, More than 500 files online!
|
|||
|
|
Full access on first call. 415-922-2008 CASFA
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
Another file downloaded from:
|
|||
|
|
|
|||
|
|
!
|
|||
|
|
-$- & the Temple of the Screaming Electron
|
|||
|
|
! * Walnut Creek, CA
|
|||
|
|
+ /^ |
|
|||
|
|
! | |//^ _^_ 2400/1200/300 baud (415) 935-5845
|
|||
|
|
/^ / @ | /_-_ Jeff Hunter, Sysop
|
|||
|
|
|@ _| @ @|- - -|
|
|||
|
|
| | | /^ | _ | - - - - - - - - - *
|
|||
|
|
|___/____|_|_|_(_)_| Aaaaaeeeeeeeeeeeeeeeeee! /
|
|||
|
|
|
|||
|
|
Specializing in conversations, E-Mail, obscure information,
|
|||
|
|
entertainment, the arts, politics, futurism, thoughtful discussion,
|
|||
|
|
insane speculation, and wild rumours. An ALL-TEXT BBS.
|
|||
|
|
|
|||
|
|
"Raw data for raw minds."
|
|||
|
|
|