134 lines
5.8 KiB
Plaintext
134 lines
5.8 KiB
Plaintext
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
|
||
|
|
Chaos Inc - PBX Hacking Part I
|
||
|
|
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
|
||
|
|
|
||
|
|
|
||
|
|
Written by : Instinct
|
||
|
|
05/20/90
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
This File will Contain basic methods of finding, hacking, and
|
||
|
|
using PBX's. I will not assume any liability written in this text
|
||
|
|
file, in other words, it is for INFORMATION purposes only.
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
Ok, as phreaking continues to become more of a hazard,
|
||
|
|
Safer ways of obtaining 'free' calls are highly sought after.
|
||
|
|
A While back, a friend of mine gave me a PBX, and it has lasted
|
||
|
|
ever since. But the more I used it, the more I wanted others,
|
||
|
|
"Just in case" <the other went down>, therefore, I created
|
||
|
|
My own method of finding, hacking, and using various other
|
||
|
|
PBX's (Private Branch eXchange)
|
||
|
|
|
||
|
|
A PBX quite simply, is a company owned 'Service' that allows
|
||
|
|
Employee's or anyone with the correct code, to call Long Distance
|
||
|
|
and speak with others as far away as China. These PBX's generally
|
||
|
|
do not contain anything like ANI, or tracing methods, so they are
|
||
|
|
more the likely safer then hacking codes.
|
||
|
|
|
||
|
|
PBX's serve other purposes such as to allow intra-building
|
||
|
|
paging and PA system use. Finding the codes to access the PA
|
||
|
|
system can be fun/useful too. Some owner's pay a flat fee for
|
||
|
|
the PBX because of the sheer number of legitimate calls made
|
||
|
|
on the services by employees. This is great for the PBX hacker,
|
||
|
|
because this means they are less likely to be caught or have any
|
||
|
|
CLID or ANI services on the line.
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
The Set-Up - You're gonna need for this -
|
||
|
|
|
||
|
|
(1) Phone Book
|
||
|
|
(1) CPU
|
||
|
|
(1) Scanner Program (FHacker)
|
||
|
|
(1) Hacking Program (Code Thief)
|
||
|
|
(1) Telefone - for Information (411)
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
The Approach -
|
||
|
|
Larger Companies (such as IBM, NEC, USR) are more
|
||
|
|
Then likely the targets which you will want to hit.
|
||
|
|
Open your phone book places like 'IBM' and 'NEC' etc,
|
||
|
|
until you find a listing of their different services,
|
||
|
|
such as Billing Information, Repair, Support, etc.
|
||
|
|
Once finding these, list them, and find which Digits
|
||
|
|
are occuring the most (like is repair was 777-2345, and
|
||
|
|
information was 777-8375). In that example, their PBX
|
||
|
|
Would probably be on the '777' Number.
|
||
|
|
|
||
|
|
Scanning -
|
||
|
|
The Next thing you wanna do, is load up your scanner
|
||
|
|
and when it asks you for the random `Template' Put something
|
||
|
|
to the effect of '777-XXXX'. Start scanning, and keep a record
|
||
|
|
of 'Tones' you get (That's right, they don't produce carriers,
|
||
|
|
therefore you must MANUALLY listen, and record them). After
|
||
|
|
Acquiring a sufficient number of tones, go to you code hacker.
|
||
|
|
|
||
|
|
Hacking -
|
||
|
|
This takes about 10 minutes to perfect. Enter the number
|
||
|
|
in the set-up, when it asks for time between dialing, and
|
||
|
|
inputting the code, experiment with 1, then 2, etc. once you
|
||
|
|
get that right, it'll ask you for the 'code length'. When you
|
||
|
|
get to this part, it is easiest to try 4 first, then 5, etc.
|
||
|
|
Companies will generally only have 6 digit codes on their PBX.
|
||
|
|
After putting in the code, PBX's will usually have a digit to
|
||
|
|
get an outgoing line on. Most use '9', but I'm sure it can
|
||
|
|
differ. After finding which one produces a '2nd tone' that's
|
||
|
|
all you need <bear in mind that when looking for the 2nd tone,
|
||
|
|
you MUST have already hacked out a code in which to call out
|
||
|
|
with>. Next set your hacking time, attempts, etc.
|
||
|
|
|
||
|
|
|
||
|
|
Using the PBX -
|
||
|
|
This is the most tedious part of using a PBX. You're
|
||
|
|
Going to need a macro, in the macro, put something to
|
||
|
|
the effect of 'ATDT PBXHERE,,,,CODE,9, . After doing
|
||
|
|
this, you can look LEGIT to your parents, by entering
|
||
|
|
the Board numbers as such 1(XXX)XXX-XXXX. No need in
|
||
|
|
having those little +'s, or !'s. Now, you MUST have a
|
||
|
|
telephone hooked up with your Modem. Hit the macro, the
|
||
|
|
modem will dial, and the code will go, etc. While it is
|
||
|
|
doing this, Pick up the phone, when it is done spewing out
|
||
|
|
the last digit (the 9), Hit return (to disconnect it) and
|
||
|
|
immmediately dial your destination. The PBX I use gives you
|
||
|
|
roughly 4 seconds to dial after pressing 9.
|
||
|
|
|
||
|
|
(Look for a PBX scanner from Chaos Inc in the near future)
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
Closing -
|
||
|
|
Enjoy the file, it is easy to understand, easy
|
||
|
|
to do, and was VERY fun to write.
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
|
||
|
|
Chaos Inc - 199O
|
||
|
|
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
|
||
|
|
|
||
|
|
The Boards -
|
||
|
|
Solsbury Hill
|
||
|
|
The Iron Curtain
|
||
|
|
Ends of Sanity
|
||
|
|
Infinite Intoxication
|
||
|
|
The Late-Night Prowl
|
||
|
|
The Rocky Mts.
|
||
|
|
The Metal's Edge
|
||
|
|
|