399 lines
14 KiB
Plaintext
399 lines
14 KiB
Plaintext
|
|
||
|
|
|
||
|
|
%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+
|
||
|
|
%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+
|
||
|
|
%+% UNDER SURVEILLANCE +%+
|
||
|
|
%+% - +%+
|
||
|
|
%+% PHONE TAPPING +%+
|
||
|
|
%+% - +%+
|
||
|
|
%+% BY +%+
|
||
|
|
%+% THE DARK KNIGHT +%+
|
||
|
|
%+% - +%+
|
||
|
|
%+% 11/3/90 +%+
|
||
|
|
%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+
|
||
|
|
%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+
|
||
|
|
|
||
|
|
DISCLAIMER:
|
||
|
|
The author takes no responsiblity for, nor does he assume any liability for,
|
||
|
|
damages resulting from the use of information in this document. This
|
||
|
|
document is for informational purposes only.
|
||
|
|
|
||
|
|
WARNING:
|
||
|
|
Connection of unauthorised equipment to a public (or indeed private system is
|
||
|
|
illegal and could lead to prosecution.
|
||
|
|
|
||
|
|
INTRODUCTION:
|
||
|
|
|
||
|
|
Now with the warnings over here is the equipment. Because of the highly
|
||
|
|
sophisticated nature of the modern telephone network, the installation of the
|
||
|
|
tap is a very tricky business indeed. It will take a capacitor (100nf), a
|
||
|
|
pair of high impedance headphones, anything up to two crocodile clips and at
|
||
|
|
least twelve seconds of concentrated effort. (See fig. 1)
|
||
|
|
|
||
|
|
FIG 1:
|
||
|
|
|
||
|
|
X---------------*---------------------------Y
|
||
|
|
phone lines |
|
||
|
|
|
|
||
|
|
X---------------|----------*----------------Y
|
||
|
|
| |
|
||
|
|
--- |
|
||
|
|
capacitor --- |
|
||
|
|
| |
|
||
|
|
|HEADPHONES|
|
||
|
|
|
||
|
|
|
||
|
|
One alternative to hanging around waiting for the telephone to answer is to
|
||
|
|
connect up a tape recorder. Now we come to the really sophisticated
|
||
|
|
electronics: since it is waste of tape to run the recorder continuosly, it is
|
||
|
|
useful to switch it on only when the phone is being used. Voice activated
|
||
|
|
switches? Why bother. A relay will do the trick, connected in series with
|
||
|
|
one of the lines. See plans on how to build a TAN box. There are plenty
|
||
|
|
around.
|
||
|
|
|
||
|
|
RADIO BUGS:
|
||
|
|
|
||
|
|
The next step up is some kind of radio bug. In the days not so long ago when
|
||
|
|
the BT issue phone was a wedge of cheese shaped affair with a dial on the
|
||
|
|
front, a favourite bugging device used to be the 'drop in' mike. The handset
|
||
|
|
microphone was a carbon granule device, quite bulky but easy to remove;
|
||
|
|
unscrew the mouthpiece, slip off a pair of wires from their terminals and its
|
||
|
|
out. The crafty buggers found a much better use for all that space than
|
||
|
|
filling it with carbon granuals. Buying microphones from the very same
|
||
|
|
people who supplied BT, they would empty out of the granuals, put in a much
|
||
|
|
smaller mike and would empty out the granuals, put in a much smaller mike and
|
||
|
|
a small radio transmitter, then seal the whole thing back together again.
|
||
|
|
Drop it into the handset and off you go. It is estimated that the numbers
|
||
|
|
made around the world ran into millions, so they were not uncommon! Still
|
||
|
|
used for bugging public telephones, but not much good for the wide varity of
|
||
|
|
office and home phones now in use.
|
||
|
|
|
||
|
|
SERIES AND PARALLEL BUGS:
|
||
|
|
|
||
|
|
Also very common and readily available are a variety of bugs which connect
|
||
|
|
either in series with one telephone wire or in parallel across the two.
|
||
|
|
The series bug has the advantage of only transmitting when the telephone is
|
||
|
|
used; the parallel one transmits continuosly in its crudest form (and most
|
||
|
|
commercial bugs are pretty crude) but can be a little more difficult to
|
||
|
|
detect by simple voltage measurements. Let's face it, it would be a trivial
|
||
|
|
matter to design a bug that is both triggered by use of the phone and
|
||
|
|
virtually impossible to detect by voltage measurements, but since almost
|
||
|
|
nobody takes seriously the idea that they may be a suitable target (do you
|
||
|
|
think you are, for instance?) and therefore won't be checking, why bother
|
||
|
|
with anything complicated?
|
||
|
|
|
||
|
|
See picture 1 and 2 for details. (End of file)
|
||
|
|
|
||
|
|
INFINITY TRANSMITTER:
|
||
|
|
|
||
|
|
The most exotic of the commonly used listerning devices is the 'infinity
|
||
|
|
transmitter', so called because once the victim can be snooped on from
|
||
|
|
anywhere in the world. Anywhere his phone can be reached by direct dialling,
|
||
|
|
that is. This is what you do: dial up the victim's number and hold your
|
||
|
|
little black mystery box close to the mouthpiece. In the simplest versions,
|
||
|
|
the mystery box just sends a tone down the line which is picked up by a
|
||
|
|
frequency selective circuit inside the bug. The mystery box activates the
|
||
|
|
infinity transmitter, which you previously attached to the victim's phone.
|
||
|
|
Once activated, the transmitter prevents the phone from ringing, and instead
|
||
|
|
sends down the line any sounds picked up by the victim's telephone, or by the
|
||
|
|
bug's own internal microphone.
|
||
|
|
|
||
|
|
This is how it works. On recieving the activating tone, the transmitter
|
||
|
|
passes enough current between the two lines to fool BT's equipment into
|
||
|
|
thinking that the phone has been answered, so the ringing tone is cancelled
|
||
|
|
and the line is opened. Once connection is made, all the bug has to do is to
|
||
|
|
modulate the line voltage in just the way the telephone itself would. Not
|
||
|
|
very difficult. The victim is entirly unaware of anything happening and,
|
||
|
|
with a hookswitch defeat installed, it could be his own telephone acting as
|
||
|
|
a microphone for the transmitter. The bug will automatically cut out if the
|
||
|
|
handset of the victim's phone is lifted, allowing it to be used normally.
|
||
|
|
|
||
|
|
See picture 2 for details. (End of file)
|
||
|
|
|
||
|
|
HOOK SWITCH DEFEAT:
|
||
|
|
|
||
|
|
Much simpler than the infinity transmitter, and used in much the same way, is
|
||
|
|
the hookswitch defeat. When you hang up the telephone, a switch disconnects
|
||
|
|
the handset... unless, that is, somebody has doctored the phone. The
|
||
|
|
simplest method is just to wire a resistor across the switch. In use you
|
||
|
|
phone the victim, apologise for having called up the wrong number, let him
|
||
|
|
hang up but keep your phone off the hook to hold open the connection.
|
||
|
|
Then you listen in. The sound level won't be very high, so you may need an
|
||
|
|
amplifier.
|
||
|
|
|
||
|
|
The difficulty with a plain hookswitch is that you need access to the
|
||
|
|
telephone itself and enough time to dismantle it. There is also the
|
||
|
|
possibility that an innocent caller may be slow to hang up and find himself
|
||
|
|
accidently eavesdroping. A bit of a giveaway. Hookswitch defeats are easy
|
||
|
|
to spot by anyone familiar with the insides of a telephone, but can often be
|
||
|
|
overlooked in inspection by a suspicious buggee since, unlike infinity
|
||
|
|
transmitters and the like, it could easily be part of the workings of the
|
||
|
|
phone.
|
||
|
|
|
||
|
|
Take the idea of 'looking as if it belongs' to its conclusion and you have
|
||
|
|
the 'lost' tranmitter. What you do is to find a large-ish component in the
|
||
|
|
telephone (or typewritter, calculator, or whatever) which itself uses any
|
||
|
|
signal you need access to. You then rush home to your garden shed and knock
|
||
|
|
up a device which not only does what this component does, but contains a
|
||
|
|
transmitter too. You package it to look exactly like the component you're
|
||
|
|
replacing. Then you pop back one night and swap the two around. Anyone
|
||
|
|
inspecting the phone or whatever will find it contains exactly the components
|
||
|
|
it should - no more and no less. The transmitter is really and truly lost.
|
||
|
|
|
||
|
|
This really is big league stuff - the kind of trick employees of rival
|
||
|
|
governments like to play on each other. Not the kind of thing you will
|
||
|
|
personally come across unless you have access to very valuable information
|
||
|
|
indeed. There's an American company called Fox which could be persuaded to
|
||
|
|
come up with the goodies if you approach them in the right way and have the
|
||
|
|
funds. They're in the phone book.
|
||
|
|
|
||
|
|
Okay that is about it for this document, but do bear in mind that BT are very
|
||
|
|
touchy about having alien equipment connected to their lines, even if it is
|
||
|
|
just a capacitor and headphones. And stay away from my phone, if you don't
|
||
|
|
mind!!
|
||
|
|
|
||
|
|
|
||
|
|
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
|
||
|
|
+ CIRCUIT DIAGRAMS: +
|
||
|
|
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
|
||
|
|
|
||
|
|
|
||
|
|
CIRCUIT 1:
|
||
|
|
|
||
|
|
SERIES PHONE BUG:
|
||
|
|
-=-=-=-=-=-=-=-=-
|
||
|
|
|
||
|
|
|
||
|
|
! ! W
|
||
|
|
! ! *-------*-------------*------* !
|
||
|
|
! ! ! ! C1 % TC & C4 %
|
||
|
|
! ! L1 &) R2 $ *------*----*
|
||
|
|
! ! ! ! ! !! ! ------ !
|
||
|
|
*------*-----(+)Q1 !
|
||
|
|
! *-*----! ~ + !-* ! ! ! !
|
||
|
|
! ! ! ! ! ! ! !
|
||
|
|
! R1 $ ! BR1 ! R3 $ C2 % R4 $ C3 %
|
||
|
|
! ! ! ! ! ! ! !
|
||
|
|
! *-*----! ~ - !---------*------*------*------*
|
||
|
|
! ! ------
|
||
|
|
! !
|
||
|
|
! !
|
||
|
|
! !
|
||
|
|
! !
|
||
|
|
! !
|
||
|
|
|
||
|
|
% = CAPACITOR
|
||
|
|
$ = RESISTOR
|
||
|
|
(+) = TRANSISTOR
|
||
|
|
& = TUNING COIL
|
||
|
|
&) = INDUCER
|
||
|
|
W = AERIAL
|
||
|
|
|
||
|
|
|
||
|
|
PARTS NEEDED:
|
||
|
|
|
||
|
|
R1 = 270K
|
||
|
|
R2 = 10K
|
||
|
|
R3 = 10K
|
||
|
|
R4 = 1K0
|
||
|
|
|
||
|
|
C1 = 15pF
|
||
|
|
C2 = 1nF0
|
||
|
|
C3 = 1nF0
|
||
|
|
C4 = 5pF0
|
||
|
|
|
||
|
|
Q1 = ZTX300
|
||
|
|
|
||
|
|
L1 = INDUCER 33uH
|
||
|
|
|
||
|
|
BR1= BRIDGE RECTIFIER
|
||
|
|
|
||
|
|
TC = TUNING COIL 3mm (4 OR 5 TURNS)
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
CIRCUIT 2:
|
||
|
|
|
||
|
|
PARALLEL PHONE BUG:
|
||
|
|
-=-=-=-=-=-=-=-=-=-
|
||
|
|
|
||
|
|
L1 W
|
||
|
|
! ! *-------*----*------&)----* !
|
||
|
|
! ! + = ! ! *---*--* ! !
|
||
|
|
! ! B1| ! R3$C2% C4%T1&--* %C6
|
||
|
|
! ! - = ! ! ! ! ! !
|
||
|
|
! ! R1 ! ! ! ! *--*-----*
|
||
|
|
*----+-$-*---+-%-*--(+)Q1 *--*--(+)Q2
|
||
|
|
! ! ! ! ! ! *--* *--*
|
||
|
|
! ! N1@ ! R2$ ! ! %C3 R4$ %C5
|
||
|
|
! ! ! ! ! ! ! ! ! !
|
||
|
|
! *---*---*---*---)&(--*------*--*
|
||
|
|
! ! A1
|
||
|
|
! !
|
||
|
|
! !
|
||
|
|
! !
|
||
|
|
|
||
|
|
|
||
|
|
% = CAPACITOR
|
||
|
|
$ = RESISTOR
|
||
|
|
(+) = TRANSISTOR
|
||
|
|
& = TUNING COIL
|
||
|
|
&) = INDUCER
|
||
|
|
)&( = AUDIO TRANSFORMER
|
||
|
|
=
|
||
|
|
| = BATTERY
|
||
|
|
=
|
||
|
|
@ = NEON
|
||
|
|
W = AERIAL
|
||
|
|
|
||
|
|
|
||
|
|
NOTE: A * indicates a join or a corner and a + indicates a wire cross over.
|
||
|
|
|
||
|
|
|
||
|
|
PARTS NEEDED:
|
||
|
|
|
||
|
|
R1 = 10K
|
||
|
|
R2 = 220K
|
||
|
|
R3 = 12K
|
||
|
|
R4 = 220R
|
||
|
|
|
||
|
|
C1 = 10nF
|
||
|
|
C2 = 47pF
|
||
|
|
C3 = 1nF5
|
||
|
|
C4 = 25pF
|
||
|
|
C5 = 1nF5
|
||
|
|
C6 = 10pF
|
||
|
|
|
||
|
|
Q1 = ZTX500
|
||
|
|
Q2 = ZTX300
|
||
|
|
|
||
|
|
N1 = NEON
|
||
|
|
|
||
|
|
A1 = AUDIO TRANSFORMER 25K )&( 1K0
|
||
|
|
|
||
|
|
B1 = 9V BATTB
|
||
|
|
|
||
|
|
L1 = INDUCER 1.8uH
|
||
|
|
|
||
|
|
TC = TUNING COIL 3mm (4 OR 5 TURNS)
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
CIRCUIT 3:
|
||
|
|
|
||
|
|
INFINITY TRANSMITTER:
|
||
|
|
-=-=-=-=-=-=-=-=-=-=-
|
||
|
|
|
||
|
|
|
||
|
|
*---------*-----------------------------------*----------*----*
|
||
|
|
! ! ! ! !
|
||
|
|
IMP ! $R2 $R8 $R11 !
|
||
|
|
A1 ! ! ! R9 ! !
|
||
|
|
*--)&(-----+-----* *---* *---+----$-----+--* !
|
||
|
|
! ! -----+-* ! ! ! ! ! ! ! !
|
||
|
|
! ! ! ! %C2 $R3 ! ! *--* ! ! !
|
||
|
|
! %C1 ! ! ! ! ! !Q4 ! ! ! ! !
|
||
|
|
! ! ! ! *-$-*--(+)Q2 *--(+) ! ! ! !
|
||
|
|
! ! --- ! ! !R7 ! ! C5 R5 R7 ! ! ! ZD1 ! ! !
|
||
|
|
*--+--*-|~ +|-* ! *--(+)Q1*---*-%-$-*---*->>-*---*-$-(+)Q3! *-<_<--(+) ! !
|
||
|
|
! | | ! ! ! ! ! ! ! ! ! ! ! ! Q5 ! !
|
||
|
|
! |BR1| ! %C3 ! $R4 %C4 &)L1%C6 %C7 $R6 ! ! $R10 ! !
|
||
|
|
! | | ! ! ! ! ! ! ! ! ! ! ! ! ! !
|
||
|
|
*--*----|~ -|---*---*---*---*---*-----*---*----*---*----*---*--* ! !
|
||
|
|
--- ! ! !
|
||
|
|
! ! !
|
||
|
|
D2 R12 ! ! !
|
||
|
|
*------------------------------<<----$-------------+----------* !
|
||
|
|
! R13 ! !
|
||
|
|
*--------------------$---* ! !
|
||
|
|
! ! ! !
|
||
|
|
! *---*---*---*-------+-------------------------+------------*
|
||
|
|
! ! ! ! ! ! !
|
||
|
|
! $R15%C10! ! ! !
|
||
|
|
! *---*--(+)Q8! ! !
|
||
|
|
*----*---(+)Q7! ! ! ! !
|
||
|
|
! ! ! ! *--(+)Q9 ! !
|
||
|
|
$R14 ! ! ! ! R18! !
|
||
|
|
C8 ! ! ! ! *---*-$-* !
|
||
|
|
*-%--*---(+)Q6 ! $R16 ! ! ! !
|
||
|
|
! ! ! ! ! ! ! ! !
|
||
|
|
()MIC%C9 ! ! %C11 $R17%C12%C13 !
|
||
|
|
! ! ! ! ! ! ! ! !
|
||
|
|
*----*----*----*---*-------*---*---*-------------------------*
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
% = CAPACITOR
|
||
|
|
$ = RESISTOR
|
||
|
|
(+) = TRANSISTOR
|
||
|
|
&) = INDUCER
|
||
|
|
)&( = AUDIO TRANSFORMER
|
||
|
|
() = MICROPHONE
|
||
|
|
>> = DIODE
|
||
|
|
<< = DIODE (POLARITY REVERSED)
|
||
|
|
<_< = ZENER DIODE
|
||
|
|
|
||
|
|
|
||
|
|
NOTE: A * indicates a join or corner and a + indicates a wire cross over.
|
||
|
|
|
||
|
|
|
||
|
|
PARTS NEEDED:
|
||
|
|
|
||
|
|
R2 = 33K
|
||
|
|
R3 = 33K
|
||
|
|
R4 = 4K7R
|
||
|
|
R5 = 4K7
|
||
|
|
R6 = 1M0
|
||
|
|
R7 = 100K
|
||
|
|
R8 = 68K
|
||
|
|
R9 = 82K
|
||
|
|
R10= 270K
|
||
|
|
R11= 68K
|
||
|
|
R12= 1K0
|
||
|
|
R13= 10K
|
||
|
|
R14= 390K
|
||
|
|
R15= 390K
|
||
|
|
R16= 10K
|
||
|
|
R17= 56R
|
||
|
|
R18= 15K
|
||
|
|
|
||
|
|
C1 = 4nF7 unpolarised
|
||
|
|
C2 = 10nF unpolarised
|
||
|
|
C3 = 10nF unpolarised
|
||
|
|
C4 = 10uF polarised +'ve to top
|
||
|
|
C5 = 10nF unpolarised
|
||
|
|
C6 = CHOOSE TO TUNE
|
||
|
|
C7 = 4uF7 polarised +'ve to top
|
||
|
|
C8 = 4uF7 polarised +'ve to right
|
||
|
|
C9 = 1nF0 unpolarised
|
||
|
|
C10= 1nF0 unpolarised
|
||
|
|
C11= 2uF2 polarised +'ve to top
|
||
|
|
C12= 47uF polarised +'ve to top
|
||
|
|
C13= 1uF0 polarised +'ve to top
|
||
|
|
|
||
|
|
Q1-Q9 = BC108
|
||
|
|
|
||
|
|
A1 = AUDIO TRANSFORMER 500R )&( 10K
|
||
|
|
|
||
|
|
D1 = 1N4148
|
||
|
|
D2 = 1N4148
|
||
|
|
|
||
|
|
ZD1= 6V8 ZENER DIODE
|
||
|
|
|
||
|
|
L1 = INDUCER 40mH
|
||
|
|
|
||
|
|
|
||
|
|
%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+
|
||
|
|
% This document was written by The Dark Knight.+
|
||
|
|
% Contact me on ANGEL BBS - 0772 795476 24hrs. +
|
||
|
|
% or on EQUALISER BBS - 0923 662127 24hrs. +
|
||
|
|
%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+%+
|
||
|
|
|
||
|
|
|
||
|
|
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
|
||
|
|
+Sysops: Feel free to place this on your download section, but please ensure+
|
||
|
|
+that this document and credits remain intact and unchanged. Thank you. +
|
||
|
|
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
|
||
|
|
|