307 lines
13 KiB
Plaintext
307 lines
13 KiB
Plaintext
*=============================================================================*
|
|
|
|
The 15-Minute CompuServe Hack
|
|
(or, Leeching Made Incredibly Easy)
|
|
|
|
by MacGyver
|
|
6-22-91
|
|
|
|
-----------------------------------------------------------------------------
|
|
|
|
OUR GUARANTEE:
|
|
|
|
If, after fifteen minutes, you don't have a fresh
|
|
CI$ password for use, you are obviously stupid!
|
|
|
|
-----------------------------------------------------------------------------
|
|
|
|
Courtesy of: The Shire BBS
|
|
(516) Private 19.2k HST
|
|
Tripple H World Headquarters
|
|
|
|
*=============================================================================*
|
|
|
|
Introduction: Why EFT?
|
|
|
|
Everyone knows the safest way to hack out a CI$ account is to get one
|
|
of those IntroPak thingies, get a credit card, and go have a ball, right?
|
|
Wrong. Ever since the phone company switched to digital networking and the
|
|
long-revered 2600 Hz tone all but disappeared, phreaking has gone the way of
|
|
the dinosaur as well as good old carding. Ever go to a department store, buy
|
|
something with your credit cards, and see those little computers? All they are
|
|
is little modems that call up Mr. Big Kredit Kard Kompany and make sure you're
|
|
not over you limit. When you call up CI$ and log on with a not-so-fresh credit
|
|
card number, all it takes is one little phone call and BANG the account's dead.
|
|
Especially if the number is on the "Hot" list. If the card is virgin, it will
|
|
last a little while, but since the verification is so fast, it will die too.
|
|
Credit cards are a bit dangerous to use nowadays, and not easy to come by. Not
|
|
to mention the fairly stiff penalty for credit card fraud. I mean, who wants
|
|
to spend a Friday night trashing behind Caldor when you could be out doing
|
|
something constructive like drinking beer?
|
|
The solution: use the Electronic Funds Transfer. This is CI$'s way of
|
|
getting people who don't even have credit cards. You give them your check
|
|
number, and they automatically take the cash out of your account every month.
|
|
Everyone know it takes a couple of days for a check to clear, right? Well,
|
|
this is because every two-bit piece-of-shit bank doesn't have an 800 line like
|
|
Mr. Big to verify all the checks their unloyal customers put out. And, lucky
|
|
for us, takes a *LOT* longer to detect. I have even had a few last for ten
|
|
days, which is when they switch to the second password, effectively cancelling
|
|
your account.
|
|
|
|
*=============================================================================*
|
|
|
|
BE SMART... HACK SAFELY! THIS IS THEFT OF SERVICE AND IT'S VERY ILLEGAL.
|
|
DO NOT ATTEMPT THIS IF YOU DON'T KNOW THE BASICS OF HACKING!
|
|
|
|
*=============================================================================*
|
|
|
|
What You Need:
|
|
|
|
1) A REAL, LEGAL checking account and ATM card from the bank you will
|
|
be hacking. The ATM card must be for the checking account. (Don't
|
|
worry - you'll just be using this as a template. We'll be sending
|
|
the bill to someone else, of course!)
|
|
|
|
2) Knowledge of where the bank and specific branch is. The smaller
|
|
the bank the better.
|
|
|
|
3) A CI$ IntroPak. (If you don't have one, read on.)
|
|
|
|
4) A bogus name, address, phone, social security number, and valid
|
|
zip code from the phone book. Make up the SSN.
|
|
|
|
5) A car, unless you want get a lot of exercise.
|
|
|
|
6) Rudimentary hacking knowledge. I am not going to explain many of
|
|
the terms and obvious safety guidelines in order to prevent rodents
|
|
from screwing up my system.
|
|
|
|
*=============================================================================*
|
|
|
|
Getting Started:
|
|
|
|
First of all, you need a local CI$ dialup. If you know yours, skip
|
|
this section.
|
|
|
|
1) Dial 1-800-346-3247 via modem.
|
|
|
|
2) When you connect, press <Return>.
|
|
|
|
3) After "Host Name:" prompt, type PHONES.
|
|
|
|
4) Follow the menus and select a phone number close to you. The ideal
|
|
number is NOT in your local exchange.
|
|
|
|
*=============================================================================*
|
|
|
|
Researching the Account:
|
|
|
|
Okay, what you are basically doing is "figuring" out the numbers on
|
|
someone else's check: the routing transit number, and the account number. This
|
|
is all you need to sign up with.
|
|
|
|
1) Drive to your local bank. Inside, there should be an ATM. And under
|
|
the ATM should be a whole shitload of transaction receipts that no
|
|
one ever cares about. SUCKS FOR THEM! Grab a handful. Now you don't
|
|
know if the slip was made with the bank's own card, so go to an
|
|
out-of-the-way bank that people don't use for quick withdrawals.
|
|
An ATM in the mall or next to a bar is no good. Keep in mind that
|
|
the best kind is a DEPOSIT slip because it assures you that the
|
|
person is a customer of the bank!
|
|
|
|
2) Make a balance inquiry on YOUR card, or someone else's. Keep the
|
|
receipt. You must have a matching check for the account.
|
|
|
|
3) Compare YOUR receipt with the account number on your check. The
|
|
account number on your check is the second group of numbers. You
|
|
see, the ATM prints an incomplete version of the account number on
|
|
the receipt to prevent just this. Find where your numbers match;
|
|
note the placement of dashes. Ignore any other funky symbols you
|
|
might see. For example, if your check looks like 12-3456789-0 and is
|
|
printed on the receipt as 5815961234567890, you know to lop off the
|
|
first six digits, place a dash between the the second and third
|
|
digit and a dash before the last. Thus, if the victim's receipt
|
|
looked like 1324359876543210 and your check looks like above, the
|
|
checking account number AS IT APPEARS ON HIS CHECK is 98-7654321-0.
|
|
|
|
4) Find the routing transit number on your check. This is the leftmost
|
|
number on the check. This number is the bank's number.
|
|
|
|
+--------------------------------------------------------------+
|
|
| Dick Hymen No. 432 |
|
|
| 1234 Cherry Road _______ 19__ |
|
|
| Intercourse, Virginia 12345 |
|
|
| ________ |
|
|
| Pay To.. ____________________________________| $ |________| |
|
|
| |
|
|
| ___________________________________________________ Dollars |
|
|
| |
|
|
| Ass Chesse Bank of Virginia, etc. |
|
|
| _______________________ |
|
|
| :123466689: 98=7654321=0: 0432 |
|
|
+--------------------------------------------------------------+
|
|
^ ^ ^
|
|
Routing Transit No. Account No. Check No.
|
|
|
|
Congratulations! You have now figured out EXACLY what the victim's
|
|
check number looks like. Since he is (hopefully) a member of the same
|
|
bank, the routing transit number is correct. And since you decoded the
|
|
info on the receipt by using your check as a template, you're all set!
|
|
|
|
*=============================================================================*
|
|
|
|
Locating an IntroPak:
|
|
|
|
You get an IntroPak whenever you buy a modem. It comes with a temporary
|
|
password and a $15.00 credit. The credit is designed to sucker new modemers
|
|
into spending a lot of money, because most new users say "$15.00! Wow!" and
|
|
don't actually know that it's only 75 minutes of connect time. I usually have
|
|
four or five laying around because my modems have the unfortunate tendency to
|
|
attract lightning. If you don't have one, there are two ways to get them:
|
|
|
|
1) Buy a modem with your credit card from a BIG DEPARTMENT STORE. Then
|
|
simply remove the IntroPak and return the modem. It is a small
|
|
pamphlet and will go unnoticed when returned. Use a credit card to
|
|
expedite the return.
|
|
|
|
2) Go to any computer store and buy an IntroPak. These usually run from
|
|
$20 to $30, but think of the money you'll save when you run up a
|
|
$500 bill...
|
|
|
|
*=============================================================================*
|
|
|
|
Signing Up:
|
|
|
|
1) Call your local dialup and follow the instructions in your
|
|
IntroPak.
|
|
|
|
2) Enter the bogus name and address. A good one is local to the bank
|
|
but a few towns away from you. Remeber, the name will never match
|
|
the checking account number, so make it look good!
|
|
|
|
3) Use an always-busy or always-ringing number for the day phone. If
|
|
you don't have one, use the bogus name's actual phone. Do NOT leave
|
|
a night phone number. This way, if CI$ calls, the victim will
|
|
probably be at work. Make sure the prefix matches the area you
|
|
claim you're from.
|
|
|
|
4) Enter the checking information as you have deduced. Make up a check
|
|
number, a good one is in the range of 500 or so.
|
|
|
|
5) Do NOT select the executive service option. It makes the account
|
|
last longer if you don't.
|
|
|
|
There - that's all there is to it! Now go the file areas and LEECH!
|
|
|
|
*============================================================================*
|
|
|
|
Tips and Hints:
|
|
|
|
Here's how to make the most out of your "limited stay" on CI$ and make
|
|
it last longer.
|
|
|
|
1) Sign up for the password on Friday, after 6:00 pm.
|
|
|
|
2) Make sure only one person uses it at a time. Ignoring this will
|
|
get your account suspended in four or five days.
|
|
|
|
3) Join all the forums you attend, use the bogus name. It looks fishy
|
|
if you leech from the forums without joining, since joining doesn't
|
|
cost anything.
|
|
|
|
4) Use password only at night, from 6:00 pm to 6:00 am.
|
|
|
|
5) Change the password every once in a while.
|
|
|
|
6) Don't be profane in any messages or on the CB Simulator.
|
|
Being an asshole on the CB is the quickest way to get cut.
|
|
|
|
7) Keep it to yourself for a few days before you give it to your
|
|
friends (if at all).
|
|
|
|
8) For downloading, always use the Quick B protocol in the IBM
|
|
Communications Forum. I believe it is called OZBEXT.ARC.
|
|
Apparently they're too cheap to get Zmodem.
|
|
|
|
9) CI$ doesn't have batch download. However, by spending a few
|
|
minutes with the script commands of your terminal, you can make it
|
|
do the same thing. I highly recommend BOYAN version 5 for this.
|
|
See appendix A.
|
|
|
|
10) If you see "% Checking your account information..." you will most
|
|
likely see a "Your account has been temporarily suspended." This
|
|
means you used too much, too fast. Then again, you may not care,
|
|
because the next password is only 15 minutes away.
|
|
|
|
*============================================================================*
|
|
|
|
Appendix A: Simple Batch Downloading
|
|
|
|
Here is a BOYAN version 5 script that will batch download for you. All
|
|
you have to do is use a simple editor to copy the first section to how many
|
|
files you wish to download. (Bear with me, I spent about 5 minutes writing
|
|
this script.) This should easily translate to any other script language: SV1
|
|
set var V1 to the file name, BL goes to the leech block, WF waits for the
|
|
specified string, %V1 sends the filename to CI$, and DLB is the command to
|
|
invoke the Quick B download.
|
|
This script will only download out of one category at a time, and uses
|
|
the B protocol. You will have to modify the script if you want more...
|
|
After you have placed all of the filenames into the file, go to the
|
|
forum's library menu. Select the category you want to d/l from, and then
|
|
use Alt-R to run the script.
|
|
|
|
------------------------------------------------------------------------------
|
|
|
|
\SV1[file1.ext]
|
|
\BL[leech]
|
|
|
|
\SV1[file2.ext]
|
|
\BL[leech]
|
|
|
|
\SV1[file3.ext]
|
|
\BL[leech]
|
|
|
|
\HU
|
|
|
|
|leech
|
|
\TO[20]
|
|
\WF[Enter choice !]4{
|
|
\WF[File name: ]%V1{
|
|
\WF[` name for your computer: ]%V1{
|
|
\DLB-[]
|
|
{
|
|
|
|
*============================================================================*
|
|
|
|
Appendix B: Hip Places to Check Out
|
|
|
|
CB simulator . . . . . . . . . . . . . . . . . . . . . . . . . . . GO CB
|
|
FAX mail . . . . . . . . . . . . . . . . . . . . . . . . . . . . . GO FAX
|
|
AP sports wire . . . . . . . . . . . . . . . . . . . . . . . . . . GO SPORTS
|
|
Atari forums . . . . . . . . . . . . . . . . . . . . . . . . . . . GO ATARI
|
|
IBM forums . . . . . . . . . . . . . . . . . . . . . . . . . . . . GO IBM
|
|
Human Sexuality forum . . . . . . . . . . . . . . . . . . . . . . GO HUMAN
|
|
GIF pictures . . . . . . . . . . . . . . . . . . . . . . . . . . . GO CORNER
|
|
|
|
*============================================================================*
|
|
|
|
Acknowledgements
|
|
|
|
- To CI$, for falling for this trick every single time;
|
|
- To Radio Shack ("Yesterday's Technology at Tomorrow's Prices"), for
|
|
all those free IntroPaks;
|
|
- To everyone whose checking account I "borrowed";
|
|
- To my friendly bank, for being so small that verification takes
|
|
way more than a week;
|
|
- To whoever uploaded the GIF of the babe in the red teddy on the
|
|
beach to CI$. 'Nuff said;
|
|
- To "Tom Righteous", for always encouraging me to do illegal things;
|
|
- To "Al My Pal", who knows every legality & technicality about
|
|
everything in said universe;
|
|
- To Lord Rheinhold, for being the hip dude you are, here's the BBS
|
|
plug;
|
|
- To Dark Knight, for locating those great GIF files and the tacos.
|
|
May every GIF be an ANNHONG, a-zhe?
|
|
|
|
*============================================================================*
|