Copy Link
Add to Bookmark
Report
Modernz 69
><><><><><><><><><><><><><><><><><><><><><><><><><><><><>
* *
* Voice Mailbox Hacking *
* *
* *
* *
* Another Modernz Presentation *
* by Nereus *
* *
* (C)opyright July 23rd, 1993 *
*********************************************************
<><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><>
*******************************************************************************
The Modernz can be contacted at:
MATRIX Keep BBS
(908) 905-6691 (908) WOK-NOW! (908) 458-xxxx
<><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><
<*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*>
<><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><>
Voice Mail Systems are basically answering machines with a lot of
features. They are privately owned systems, usually for employees of a
certain company to exchange mail with. There are systems out there which are
there solely for the purpose of VMB's, but not many exist.. These systems
set up boxes for sale, and as a result usually are very tough to hack.
Company systems, however, are often very open, with low security.. I have
found that many of the system operators give slightly less than a fuck
whether the system is even there or not, so these are the ones you want.
Once you have your voice mail box, it can be used for a lot of
things.. You can leave it up for your friends to leave you messages on, or
if you run a business to have customers call you up. Hell, rent them out
to people you know, if you need some cash. VMB's are very versatile,
and can be used for anything you want.
There are many different kinds of systems out there.. The most
popular of which is probably the ASPEN system. (ASPEN is the computer
controlling the boxes) The ASPEN system is frequently updated, patched, and
modified by the company who sells them. They offer upgrades to current
owners, but in my experience most systems do not get the upgrades unless
they are commercial systems which try to make money off the boxes. Most
operators of company systems are perfectly satisfied with what they have,
and therefore do not upgrade. Resulting from this, of course, is that there
are a WIDE variety of systems out there, and every one is different..
but the one thing they have in common is their general vulnerabilities.
When you find your voice mail system (1-800 systems which answer
24 hours a day are optimum) look around and check it out. I called one
system which people couldn't hack, and hacked it just by listening to the
recording. The recording said "Press 1 for questions and comments, Press
2 for a service representative, etc etc, or enter the box number now." The
options went up to 8. This means that if you enter a box number lower than
900, it will go to a different option.. which means all boxes must start
with 9. No one could find empty (or even used, for that matter) boxes because
they were all scanning boxes 1XX and 2XX (which I commonly do, on normal
systems). If there is an option such as "Press 9 to leave a message to a box
owner" then the box number can be anything, and that doesn't give you much.
On systems with no option to enter the box number, you can usually leave
messages by pressing the "*" key on your phone. Boxes are usually populated
around 1XX and 2XX, but there are still empty boxes in higher numbers..
although there are many more where the other used boxes can be found.
Once you have your system, and narrowed down the box numbers (if
possible), it is time to do some scanning. On most systems I have
encountered, you press the "#" to enter "your own" mail box (it could be
different, though.. every system has it's own specifics). Once you get to
the "Enter your mailbox number" prompt, pick a number and start. I usually
start at 110, but it can be any number. One important thing: scan
SEQUENTIALLY. Never enter random box numbers. You'll end up with nothing. If
you go, say, straight from 110 to 200, trying every box, you are guaranteed
to find at least a few empty boxes. When you find a used box, it usually
plays a recording of the owner's name in the owner's voice. When it asks you
for the password, you can often abort it by pressing the "*" key.
One problem with VMB's is that they usually hang up on you after 3-5
invalid tries. There are ways of getting around this.. Find a used box (not
difficult, obviously). When you enter a box (say, 131) and it says "Box
Number 131 is not valid", it's ok. If you enter another box that isn't
valid, simply enter the used box next. If you enter a third invalid box, the
system will hang up on you.. Once it asks you for your password, just abort
by pressing the "*" and it will reset. Now you can have 3 more invalids
before it will hang up on you.
Your scan might go something like this:
[] = What you press
Everything else is the voice mail system's response
------------------------------------------------------------------------------
Please enter your mailbox number.
[220]
I'm sorry, box number 220 is invalid.
Please re-enter your mailbox number.
[221]
"John Hughes"
Please enter your password followed by the pound sign.
[*]
Please enter your mailbox number.
[222]
I'm sorry, box number 222 is invalid.
Please re-enter your mailbox number.
[223]
I'm sorry, box number 223 is invalid.
Please re-enter your mailbox number.
[221]
"John Hughes"
Please enter your password followed by the pound sign.
[*]
Please enter your mailbox number.
------------------------------------------------------------------------------
After entering invalid box numbers 222 and 223, you should enter a
valid box number (221 is used here) just incase, then just abort. This will
let you do all your scanning without having to call back every 3 invalids.
You do NOT want a used box. If you take a box which someone already
has, it will be taken away within DAYS. If you REALLY want a box which is
taken (say, box #666.. or #123, etc etc), then you can try logging in and
fucking up everything (deleting messages, etc) daily. The owner will
eventually complain and get a different box number.. But this takes a few
weeks.
Since you can't take used boxes, and invalid boxes aren't available,
there's only one kind of box left for you: Empty ones. These boxes are there
for people coming into the company. The system operator will usually give
them the password and then they can just take the box without the operator
doing anything.
To find the empty box, all you need to know is how to recognize it.
On systems which play a recording of the owners voice, if you enter a box
number and it just says "Box Number ###, enter your password." or just a
plain "Enter your password", then it is either empty, or the owner is too
lazy to change his recorded name. ASPEN systems are the easiest systems to
find empty boxes on. When you enter an empty box number, you will get a
message that says something like "Hello, mailbox owner! This is the ASPEN
voice mail system. You can use this system to send and receive messages from
both outside callers and other box owners." etc etc, until it gets up to
"Your system manager has given you a temporary password. Please enter it
now." Bingo. You have found your empty box.
Hacking the box sounds like the toughest part, but it is really the
easiest step out of all of them. The system operator does not want to have
to make individual temporary passwords for each box which are hard to
remember, so he doesn't. On ASPEN systems, the system operator usually sets
the same 4 digit temporary password for ALL empty boxes. This temporary
password is almost ALWAYS one of the following.
BOX# = The 3 digit box number you are hacking. (Examples assume 666)
Three Digit Passwords:
123 000 333 666 999
321 111 444 777 (BOX#)
987 222 555 888 (BOX#+1)
Examples: 666, 667
Four Digit Passwords:
1234 0000 3333 6666 9999 1(BOX#)
4321 1111 4444 7777 0(BOX#) (BOX#)1
9876 2222 5555 8888 (BOX#)0
Examples: 0666, 6660, 1666, 6661
Five Digit Passwords:
12345 00000 33333 66666 99999 11(BOX#)
54321 11111 44444 77777 00(BOX#) (BOX#)11
98765 22222 55555 88888 (BOX#)00
Examples: 00666, 66600, 11666, 66611
Seriously; Try ALL of those. If the password is not any of them,
then the system probably has a random password for each box and is secure.
But do not try 1234 and then give up. It is almost ALWAYS one of the above.
If the password is 6 digits or more, don't bother.. There are other systems
out there.
Once you have hacked out your first box, do NOT change anything! Use
this as your scanning box; when you scan boxes from inside another box, it
will not hang up on you after 3 invalids. This makes scanning much easier.
All the empty boxes you find most likely have the same password your box did
when you hacked it out (so write it down, or make sure you remember it!).
That's about it as far as VMB's go. There are many different types
of systems, but in reality they're all the same. When hacking the password,
just think stupid. And when scanning boxes, think logical.
A few 1-800 voice mail boxes you can check out/hack:
(Yes, I only scan numbers which are easy to remember. <G>)
1-800-TAK-PISS
The password to EVERY box (including the sysop's box at box #100!) is "1111".
I believe it's only up after 7pm, though, so I don't want it. (These bastards
kept taking away my boxes anyhow) Fuck these guys over and take down their
system; they piss me off.
1-800-TIT-SUCK
Who knows. I didn't even scan this one.. But I know there are boxes on it.
Tell me if you hack out one.
1-800-GET-MAIL
Meridian Mail. I hacked out a box, but didn't like it.. I think that it is
an internal system, meaning that only people with boxes can send messages.
Fuck with it, tell me if you find anything useful.
If you have any questions/comments, you can leave me a message
on my VMB:
1-800-DART-801 (Hack, or even try to scan it and die.)
Box Number : 837
That's all for now.. More to come.
þ Nereus '93 þ
<><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><>
*******************************************************************************
The Modernz can be contacted at:
MATRIX KEEP BBS
WOK-NOW! / World of Kaos NOW! / World of Knowledge NOW!
St. Dismis Institute
Sysop: Digital-demon
(908) 905-6691 (908) WOK-NOW! (908) 458-xxxx
Home of Modernz Text Philez
<><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><
Castle of Illusion (214)690-6730 NUP: SIN
Sysop:The Master Mind
TerrorNet World HQ, RapeNet
-----------------------------------------------------------------------------
Realm of Warriors (201)728-0941 NUP: Darkness
Sysop: Dark Illusion
ApathyNet HQ, Entropynet, Toxicnet
Modernz Member Site
-----------------------------------------------------------------------------
Silicon Dreams (201)895-3754 NUP: Trojan
Sysop: Nereus
Apathynet, Nuke-net, VX-net, Nuke distro site, Afro distro site
Modernz Member Site
-----------------------------------------------------------------------------
Thieves' Guild BBS (201)703-1057 NUP: Hash
Sysop: The Guild Master
AbyssalNet Node @2118
Modernz Member Site
-----------------------------------------------------------------------------
Phibernetics Squared (818)821-6567
AbyssalNet Node @8850
too many damn nets
-----------------------------------------------------------------------------
Trekker's Tavern (413)737-2260 NUP: Tribble
Cosysop: Kodiak
Modernz Member Site
-----------------------------------------------------------------------------
Eve of Destruction (201)579-9387
-----------------------------------------------------------------------------
The Underworld (609)298-8854
Slaughter house (609)584-7662
-----------------------------------------------------------------------------
Skynet (404)296-2835
Sysop: Cyberchrist
Modernz Member Site
-----------------------------------------------------------------------------
|-|-|-|-|-|-|=|=|=|=|=|=|=|=|=|=|=|-|-|-|-|-|-|-|-|-|-|-|=|=|=|=|=|=|
Disclaimer
~~~~~~~~~~
This publication is for informational purposes ONLY.
In no way are the above authors, or organizations, liable for the
use or misuse of the information contained herein.
Distribution of these text files is allowed...and downright encouraged.
|-|=|-|=|-|=|-|=|-|=|-|=|-|=|-|=|-|=|-|=|-|=|-|=|-|=|-|=|-|=|-|=|-|=|-|=|-|=|-|
<*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*>
<*> <*>
<*> THIS HAS BEEN A MODERNZ PRESENTATION <*>
<*> <*>
<*> SEE YOU ALL AT MATRIX BBS (908)905-6691 <*>
<*> <*>
<*> NON-PURSUITABLE WITHOUT A GLOBAL <*>
<*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*>
