280 lines
11 KiB
Plaintext
280 lines
11 KiB
Plaintext
Hacking
|
||
|
||
HACK AND PHREAK
|
||
=-=-=-=-=-=-=-=
|
||
FILE #2
|
||
|
||
BY: THE HYAENA
|
||
|
||
PLEASE BE CAREFUL WHO YOU GIVE THIS FILE TOO...
|
||
|
||
THE FOLLOWING IS AN EXTENDER LIST...
|
||
1-800-221-1950
|
||
1-800-221-5430
|
||
1-800-221-5665
|
||
1-800-221-5670
|
||
1-800-221-8190
|
||
1-800-223-7854
|
||
1-800-243-7650
|
||
1-800-255-2255
|
||
1-800-321-0327
|
||
1-800-321-0424
|
||
1-800-321-0845
|
||
1-800-323-4313
|
||
1-800-327-0005
|
||
1-800-327-0326 4444-9
|
||
1-800-327-2703
|
||
1-800-327-6713
|
||
1-800-327-9136
|
||
1-800-327-9895
|
||
1-800-328-1224 088759
|
||
1-800-331-4100
|
||
1-800-343-1319
|
||
1-800-343-1844
|
||
1-800-348-1800
|
||
1-800-356-0001 1-2-3...2-3-4
|
||
1-800-368-4222
|
||
1-800-368-5963
|
||
1-800-424-9826
|
||
1-800-521-8400
|
||
1-800-527-3511
|
||
1-800-543-7168
|
||
1-800-547-1784
|
||
1-800-547-6017
|
||
1-800-547-6754
|
||
1-800-553-8432
|
||
1-800-621-1506
|
||
1-800-621-1703
|
||
1-800-637-4663
|
||
1-800-638-6402
|
||
1-800-641-4713 3WAY 8-1-AC
|
||
1-800-654-8494
|
||
1-800-682-4000
|
||
1-800-843-0698
|
||
1-800-858-9000
|
||
|
||
AND NOW A LITTLE TUTORIAL ON PHREAKING...
|
||
REMEBER THAT IT IS ILLEGAL IN CANADA AND THE UNITED STATES TO MAKE USE OF LONG
|
||
DISTANCE LINES WITHOUT PAYING FOR THE SERVICE. I AM NOT TELLING YOU HOW TO
|
||
BREAK INTO, NOR WILL I SUGGEST THAT YOU SHOULD TRY IT, BUT IF YOU ARE STUPID
|
||
ENOUGH TO BREAK THE LAW, THEN YOU DESERVE TO BE CAUGHT FOR YOUR IGNORANCE OF
|
||
THE LAW.
|
||
|
||
HOW TO PHREAK WESTERN UNION'S EASYLINK.
|
||
FIRST A LITTLE INFORMATION ABOUT EASYLINK. EASYLINK IS A SERVICE PROVIDED BY
|
||
WESTERN UNION FOR THOSE PEOPLE WHO WANT A TELEX, BUT DON'T WANT TO GET A
|
||
SEPERATE LINE OR MACHINE FOR IT SINCE THEY HAVE A COMPUTER. ANY COMPUTER WITH
|
||
A COMMUNICATIONS PACK CAN USE IT.
|
||
THE SYSTEM IS VERY HARD TO PHREAK, BUT I WILL INCLUDE A SAMPLE ACCOUNT FOR
|
||
YOUR TESTING USE.
|
||
|
||
FIRST GET YOUR COMPUTER READY TO COMMUNICATE. NOW DIAL 1-800-325-4112. IT
|
||
SHOULD RING ONCE OR TWICE. AFTER IT PICKS UP YOU WILL HEAR A HIGH PITCHED
|
||
SOUND. ESTABLISH CARRIER.
|
||
IT SHOULD RESPOND:
|
||
|
||
EASYLINK
|
||
ID?
|
||
|
||
AT THIS POINT YOU ARE TO ENTER YOUR CODE.
|
||
THE CODE IS IN THE FORMAT:
|
||
|
||
01 ESL###### PASSWORD.PASSWORD
|
||
|
||
01 - SAYS THAT YOU ARE USING FULL DUPLEX.
|
||
ESL - SAYS YOU ARE USING EASYLINK.
|
||
###### - A 6 DIGIT ACCOUNT CODE.
|
||
PASSWORD - A NEEDED PASSWORD.
|
||
|
||
ONCE YOU GET A CODE TO WORK, IT WILL RESPOND WITH A CONNECTION NUMBER, DATE
|
||
AND TIME. THEN YOU WILL GET:
|
||
|
||
PTS
|
||
|
||
THAT MEANS PROCEED TO SELECT. ENTER IN A TELEX NUMBER THAT YOU WANT IT TO GO
|
||
TO, FOLLOWED BY A "+". THE SYSTEM WILL RESPOND WITH A GA. <GO AHEAD.> NOW
|
||
ENTER THE TEXT OF THE MESSAGE. IT CAN BE UP TO 80 CHARACTERS LONG. WHEN YOU
|
||
ARE DONE ENTER:
|
||
|
||
MMMM
|
||
|
||
IT WILL THEN GIVE YOU AN ACCEPTANCE NUMBER, EASYLINK, THEN THE CONNECTION
|
||
NUMBER, DATE AND TIME AGAIN. THEN IT WILL HANG UP. YOUR MESSAGE HAS BEEN
|
||
SENT.
|
||
|
||
WHAT'S THAT YOU SAY? YOU'VE TRIED EVERYTHING YOU CAN THINK OF, AND YOU CAN'T
|
||
GET ON? WELL WHAT KIND OF A PERSON WOULD I BE IF I DIDN'T INCLUDE SOME SAMPLE
|
||
INFORMATION?
|
||
|
||
ID : 01 USR999999 TEST.TEST
|
||
SAMPLE TELEX # : 62901234,624123
|
||
SAMPLE TWX # : 7101234567
|
||
|
||
NOW WHAT?! WANT TO SEND A MAILGRAM? WELL, THEN TRY THIS LITTLE PROCEDURE. AT
|
||
THE PTS ENTER:
|
||
|
||
/ZIP
|
||
WHO TO
|
||
STREET ADDRESS 1
|
||
STREET ADDRESS 2
|
||
CITY,STATE ZIP +
|
||
|
||
AT THE GA, JUST TYPE IN THE MESSAGE AND TERMINATE IT WITH THE "MMMM".
|
||
|
||
WHAT? YOU WANT TO SEND AN OVERSEAS TELEGRAM NOW. GEE ARE YOU EVER CURIOUS.
|
||
TO SEND AN OVERSEAS TELEGRAM, THE FORMAT IS:
|
||
|
||
/INT NAME
|
||
ADDRESS
|
||
CITY (COUNTRY)+
|
||
|
||
BEFORE YOU ASK MORE QUESTIONS, I MIGHT AS WELL GIVE YOU THE FOLLOWING HINTS.
|
||
|
||
* USE CTRL-H TO BACKSPACE
|
||
* USE CTRL-X TO DELETE ENTIRE LINE
|
||
* TYPE EEEE TO DELETE ENTIRE TEXT AND ADDRESS; EEEE MUST BE TYPED AT THE LEFT
|
||
HAND MARGIN FOLLOWED BY A C/R.
|
||
* END-OF-MESSAGE INDICATEOR <MMMM> MUST BE TYPED IN AT THE LEFT HAND MARGIN
|
||
FOLLOWED BY A C/R.
|
||
|
||
WELL, I'VE TOLD YOU ENOUGH ON EASYLINK NOW, SO DO WHAT YOU WANT, AND MOST OF
|
||
ALL DON'T GET CAUGHT.
|
||
|
||
AND NOW THE FOLLOWING WILL TELL YOU HOW TO CRASH SOME BBS'.
|
||
|
||
THE FOLLOWING TUTORIAL WILL TELL YOU WAYS OF CRASHING GBBS II SYSTEMS AND ALSO
|
||
GIVE THE SOLUTIONS ON HOW THE SYSOP CAN PROTECT HIS BOARD AGAINST THE CRASH.
|
||
<A> THE MOST COMMON AND MOST ELEMENTARY METHODS OF CRASHING A GBBS II SYSTEM
|
||
IS BY WHAT IS KNOWN AS "THE OLD SPACE TRICK". WHAT IS DONE IS THAT A PERSON
|
||
ENTERS AS A "NEW" USER AND USES THE SYSOP'S NAME WITH A SPACE BEFORE THE FIRST
|
||
NAME. THIS BYPASSES ALL THE "NAME IN USE" CHECKS BUT AWARDS THE PERSON A
|
||
SYSOP SECURITY OF 64 UPON ENTRY. THE SIMPLE REMEDY WOULD BE TO NOT ALLOW
|
||
SPACES IN A NAME THAT AREN'T INBEDDED. FOR EXAMPLE:
|
||
510 O$=EL$+"LAST NAME-->":GOSUB 7000:GOSUB 8200:A2$=I$...ETC.
|
||
AND THE LINE:
|
||
515 IF LEFT$(I$,1)=" " THEN 510
|
||
THIS SHOULD ALSO BE ENTERED ON A LINE AFTER THE FIRST NAME IS INPUTTED.
|
||
<B> ANOTHER COMMON METHOD IS TAKING ADVANTAGE OF THE SYSOP'S MODS, ESPECIALLY
|
||
THE ONERR GOTO STATEMENTS. WHAT A PERSON CAN DO IS TO PURPOSELY MAKE AN ERROR
|
||
TO GET HIM TO WHERE THE ONERR GOTO STATEMENT IS POINTING. THIS MIGHT BE AN
|
||
AREA THAT THE USER DOES NOT NORMALLY HAVE ACCESS TO. TO PREVENT THIS,
|
||
NULLIFY ALL YOUR ONERR GOTO STATEMENTS AFTER YOU'RE DONE WITH THEM WITH A
|
||
"POKE 216,0". WHEN THE ONERR FLAG IS RESET WITH THIS STATEMENT ALL ERRORS
|
||
WILL RESULT IN A PROMPT LOGOFF.
|
||
COMMON MENTHODS OF CREATING ERRORS ARE:
|
||
1) WHEN THE PROGRAM ASKS FOR A NUMBER, ENTERING A "99E99".
|
||
2) WHEN ASKING FOR A PASSWORD, ENTERING A NEGATIVE NUMBER IMBEDDED IN THE
|
||
LETTERS. (IE. G-99FFF, OR A-01AAA)
|
||
3) THEN THERE ARE THE FATAL ERRORS THAT WILL BE COVERED IN SECTION C.
|
||
<C> NOW HERE IS THE GOOD PART. THE GBBS II DRIVER IGNORES THE ENTRY OF ALL
|
||
CHARACTERS WITH AN ASCII EQUIVALENT OF HEXADECIAMAL ($20) AND BELOW, EXCEPT...
|
||
A BIG EXCEPT...FOR A FEW. NOW THESE FEW CHARACTERS WHEN ENTERED, GOES
|
||
UNNOTICED, THAT IS, UNLESS ENOUGH OF THEM ARE ENTERED. IF A SUFFICIENT NUMBER
|
||
OF THEM IS ENTERED, (WHICH WOULD TAKE A LONG TIME WITH OUT A REPEAT KEY), THEN
|
||
THE BUFFER SUFFERS WHAT CAN BE CALLED A "FATAL ERROR" WHICH WILL PROMPTLY PUT
|
||
THE USER INTO MACHINE LANGUAGE WITH DOS INTACT. OH NO! BUT THERE IS GOOD
|
||
NEWS. IF THE FOLLOWING POKES ARE ENTERED DIRECTLY AFTER THE GBBS II DRIVER IS
|
||
LOADED, LET'S SAY ON LINE 60, THEN IT WILL TREAT THOSE CERTAIN CHARACTERS LIKE
|
||
ALL THE REST OF THE TRASH AND IGNORE THEM.
|
||
60 POKE 36942,37:
|
||
POKE 36943,208:
|
||
POKE 36944,35:
|
||
POKE 36945,76:
|
||
POKE 36946,95:
|
||
POKE 36947,255:
|
||
POKE 36948,234
|
||
AND THAT'S IT. ALL OF THE ABOVE HAS BEEN CAREFULLY TESTED AND RETESTED SO THE
|
||
INFORMATION IS VALID.
|
||
|
||
THE FOLLOWING IS A METHOD ON HOW TO CRASH GBBS 'PRO'.
|
||
FIRST, I SUGGEST THAT YOU LOG ON AS A NEW USER AND USE A GARBAGE NAME, SINCE
|
||
YOU DON'T WANT THE CRASH TO BE TRACED BACK TO YOU. GOOD NOW THAT YOU HAVE
|
||
ACCESS TO THE SYSTEM, GOTO EITHER THE MESSAGE BASE TO POST A MESSAGE, OR SEND
|
||
FEEDBACK, OR IN E-MAIL. THEN JUST TYPE IN A FEW LINES OF GARBAGE. THEN TYPE
|
||
IN THE WORD "DONE" AND EDIT ONE OF THE LINES. NOW THAT YOU ARE ABOUT TO EDIT
|
||
ONE OF THE LINES, JUST PRESS CTRL-I AND HOLD IT DOWN AND YOU WILL BEGIN TO SEE
|
||
THE CURSOR GOTO THE RIGHT OF THE SCREEN AND THEN BEGIN TO BEEP LIKE CRAZY
|
||
WITHOUT AN END. SO NOW YOU HAVE SUCCESSFULLY CRASHED A GBBS "PRO" BBS, AND
|
||
THE SYSOP HAS TO REBOOT HIS SYSTEM. IF WHEN YOU PRESS CTRL-I AND NOTHING
|
||
HAPPENS, THEN THE SYSOP HAS ALREADY PROTECTED HIS BOARD AGAINST THE CTRL-I
|
||
CRASH, SO GO PHONE UP ANOTHER GBBS 'PRO' BBS AND SEE IF YOU CAN CRASH THAT
|
||
ONE.
|
||
NOW FOR THE SYSOP, IF YOU WANT TO PROTECT YOUR COPY OF GBBS 'PRO' FROM THE
|
||
CTRL-I CRASH THEN DO THE FOLLOWING:
|
||
BLOAD ACOS.OBJ
|
||
CALL -151
|
||
528E
|
||
IF THE RESULT GIVES YOU 528E- 09 THEN TYPE 528E:FF
|
||
BSAVE ACOS.OBJ,A$1800,L$4900
|
||
OTHERWISE
|
||
TYPE 528B
|
||
THE RESULT SHOULD BE 528B- 09 THEN TYPE 528B:FF
|
||
BSAVE ACOS.OBJ,A$1800,L$4900
|
||
NOTE: MAKE ONLY ONE OF THESE MODS, BUT NOT BOTH. THE 528E AND 528B ARE ONLY
|
||
USED TO CHECK WHICH VERSION OF ACOS YOU ARE USING.
|
||
|
||
NOW THIS IS A TUTORIAL ON HOW TO CRASH NET-WORKS.
|
||
NICK NAIMO (THE AUTHOR OF NET-WORKS) LEFT QUITE A FEW BUGS IN HIS PROGRAM, AND
|
||
HERE ARE A FEW OF THEM.
|
||
TO MILDLY ANNOY THE SYSOP, TYPE "G" AT THE MAIN MENU PROMT. WHEN IT ASKS YOU
|
||
FOR A NUMBER, ENTER A VALID NUMBER PLUS A DECIMAL. FOR INSTANCE, 3.5. THIS
|
||
WILL CREATE A ONE SECTOR FILE CALLED "J.3.5.SYS" WHICH WILL NEVER BE ERASED
|
||
UNLESS THE SYSOP HIMSELF CATALOGS THE DISK AND DELETES THEM ALL BY HAND.
|
||
TO DESTROY ALMOST ANY SYSTEM FILE, THERE MUST BE A BOARD SHARING DRIVE 1,
|
||
WHERE MOST OF THE SYSTEM FILES ARE KEPT. POST A MESSAGE CALLED:
|
||
USERS.SYS
|
||
TITLES OR TITLES1 OR TITLES.1
|
||
MENU.SYS
|
||
WITH A SPACE IN FRONT OF IT. FOR INSTANCE, TO DESTROY THE PASSWORD FILE, POST
|
||
A MESSAGE CALLED " USERS.SYS", THE SPACE IN THE FRONT IS LOST WHEN THE FILE IS
|
||
RE-READ. NOW GOTO ANOTHER BOARD, AND THEN BACK TO THE BOARD YOU POSTED ON,
|
||
THEN REMOVE THE MESSAGE THAT YOU JUST POSTED. THIS WILL DELETE "USERS.SYS"
|
||
AND LEAVE " USERS.SYS" ALONE.
|
||
IF YOU WANT TO GET INTO MONITOR (THIS IS THE BEST CRASH THERE IS, I THINK).
|
||
IF THE BOARD YOU ARE CRASHING HAS NOT BEEN PROTECTED FROM IT, THEN IT WILL
|
||
ALWAYS A) HANG TOTALLY OR B) GO INTO THE MONITOR. WHAT YOU WANT TO DO IS TYPE
|
||
"E" AT THE MAIN MENU PROMT, AND THEN WHEN IT ASKS YOU FOR A NAME, ENTER
|
||
GARBAGE, OR A REAL NAME, IT REALLY DOESN'T MATTER. WHEN IT SAYS "50 LINES
|
||
MAX., TO END TYPE --> /EX <--" YOU DO THE FOLLOWING:
|
||
A) HIT <RETURN> ONCE.
|
||
B) TYPE /EX
|
||
C) TYPE 'F' AT THE CHOICES.
|
||
D) ENTER "99E99" FOR THE LINE NUMBER TO FIX.
|
||
E) GOTO STEP A WHEN IT SAYS "50 LINES...ETC" AGAIN.
|
||
AFTER ABOUT 6-10 TIMES OF DOING THIS, YOU WILL HEAR A BEEP AS IT GOES INTO THE
|
||
MONITOR. IF CTRL-C WORKS, THEN YOU'RE INTO BASIC. IF IT DOESN'T WORK, THEN
|
||
YOU'LL JUST HAVE TO WAIT FOR THE SYSOP TO COME ALONG AND RE-RUN HIS BOARD.
|
||
NOW IF YOU GET INTO BASIC, THEN CHECK TO SEE IF HE HAS HIS PROGRAM SAVED ON
|
||
HIS DISK. IF HE DOES, THEN MAKE A FEW "BACKDOORS" SO YOU CAN GET INTO BASIC
|
||
ANYTIME YOU WANT TO, AND THEN SAVE IT ONTO HIS DISK, AND THEN TYPE RUN.
|
||
YOU'LL LOSE CARRIER, AND HE'LL NEVER KNOW WHAT HIT HIM, WHEN SUDDENLY HIS
|
||
PASSWORD FILE GETS DELETED EVERY NIGHT.
|
||
ANOTHER USEFUL THING TO KNOW IS, IF YOU ENTER A SYSOP PASSWORD, YOU CAN GET
|
||
VERY HIGH ACCESS. FOR INSTANCE, LET'S SAY YOU LOG ON AND SEE THE NORMAL LOG
|
||
ON:
|
||
|
||
CONNECTED TO: SNIFFLES' BBS
|
||
|
||
ENTER ACCOUNT NUMBER OR THE WORD 'NEW'.
|
||
|
||
--->
|
||
|
||
AT THAT POINT, YOU SHOULD ENTER SOMETHING LIKE: E1EL (THAT IS A COMMON SYSOP
|
||
PASSWORD). WHEN IT SAYS "INVALID PASSWORD", YOU SHOULD TYPE THE WORD "NEW".
|
||
ENTER WHATEVER YOU WANT FOR THE NAME, AND WHEN IT ASKS YOU FOR A PHONE NUMBER,
|
||
JUST HIT <RETURN>, IT WON'T ASSIGN YOU A PASSWORD, BUT WHO CARES. WHEN YOU
|
||
GET INTO THE BBS, TYPE "Y". YOU SHOULD EITHER HAVE A LEVEL OF 9 OF SPECIAL
|
||
DOWNLOAD ACCESS (ON T-I-M-E-C-O-R YOU GET SPECIAL DOWNLOAD ACCESS). THE ONLY
|
||
PROBLEM IS THAT YOU ARE NOT VALIDATED. IF THE SYSOP IS STUPID ENOUGH, HE MAY
|
||
VALIDATE YOU IF YOU CHAT SO YOU CAN JUST "LOOK AROUND". THE MAIN USE FOR THIS
|
||
SMALL TIP, IS TO LOOK AT A HIGH LEVEL "G" SECTION THAT YOU DON'T NEED TO BE
|
||
VALIDATED TO LOOK AT.
|
||
NOTE: ON BOARDS REQUIRING ACCOUNT NUMBERS, YOU SHOULD ENTER 1 AS THE ACCOUNT
|
||
NUMBER.
|
||
|
||
END OF FILE #2...
|
||
|
||
|
||
[Time Left 00:40] 1. the_NeoPsychedelic_UnderGround_ Computer Philes:
|
||
Command ? I DRIVER IS
|
||
LOADED, LET'S SAY ON LINE 60, THEN IT WILL TREAT THOSE CERTAIN CHARAC |