Fish Head Gang 03-07

Published in

· 4 years ago

  

       _______    __  ____  --------------------------------------------- 
    __/    ___|\ /  \/ ___\......Issue: FHG3-07.TXT..................    | 
   |     ___|  |_|   |/ __ .....Author: Zero.........................    | 
    \/|   |     _    || \  \...Subject: Theory's on how to Hack a BBS    | 
      |  _|    | |   | \_\  |..FHG Pak: 03                               | 
      \__/ \__/  \__/\_____/_____________________________________________| 

  
ok... here's my theory... you download a copy of whatever bbs software the  
board is running that you wanna hack.  make you're own account in it giving  
yourself sysop access.. i wouldn't suggestion using your real alias unless  
you wanted the victim to know it was you.  anyways.. back to the theory, so 
after you've made your account... make a batch file that tells the computer 
to copy your user file onto the end of the other boards user file.. the only 
problem is that you have to know the directory where the user keeps his board 
files, try the defaults... eg. maximus = \max or \maximus, renegade = \rg or 
\renegade, or try \bbs or \board, or the initials of the board might be a  
good place to try also.  Now to hide this from the sysop, you could right the  
batch file into the install program for some game and then tell the sysop to 
run it cause it's the most amazing game ever or something, i also suggest that 
you make it into a .com program using bat2exec or some other utils which  
accomplishes the same thing.. now if you have programming experience this  
could be easier or eliminate some of the guess work anyways.. you could right 
a program that will search for the user file and then copy the new one onto  
the end it.. i experimented with this a while back using maximus and it seemed 
to be able to read the user file that i had created, i don't know if this is 
the case for all bbs software or not, if i remember correctly pcb allows you 
to encrypt your user file so it probally wouldn't work in the case.. another 
hint, you may want to rename your user file to something else so that the  
sysop doesn't suspect anything... you may wanna write the batch file that so 
that it tries more then one directory, improving your chances for succes. 
now, this just a theory, it has only been tested on a locally <as in on com0> 
run board and it seemed to work... the trick may be in getting the sysop to 
actually run the file.  oh well, i'll leave figuring out how to get the sysop 
to run it to you guys.