The THC Hack/Phreak Archives: PH29.TXT (286 lines) Note: I did not write any of these textfiles. They are being posted from the archive as a public service only - any copyrights belong to the authors. See the footer for important information. ========================================================================== HACK AND PHREAK =-=-=-=-=-=-=-= FILE #5 BY: THE HYAENA P/C/P -- PERFECTLY CRUMMY PIRATES NO PARTICULAR NAME ][ 416-480-1377 9600 BAUD 50 MEGS PANDEMONIUM GS 416-273-7619 9600 BAUD 60 MEGS PLEASE BE CAREFUL WHO YOU GIVE THIS FILE TOO... HACKING CAN BE DESCRIBED IN A NUMBER OF WAYS SUCH AS... 1) THE PROCESS OF ATTEMPTING TO OBTAIN AN ILLEGAL PASSWORD ON A FORIEGN COMPUTER SYSTEM. 2) THE PROCESS OF ATTEMPTING TO OBTAIN ILLEGAL ACCESS CODES TO LONG DISTANCE SERVICES THROUGH THE COMPUTER. HERE ARE SOME GENERAL HACKING TIPS THAT YOU, THE HACKER, SHOULD KEEP IN MIND. --USING THE SAME CODE FOR MANY CALLS AND OVER TWO WEEKS LONG IS HAZARDOUS TO YOUR HEALTH. --BE CAREFUL! IT PAYS TO BE CAUTIOS. --ALL OF MY HACK AND PHREAK FILES ARE FOR EXPERTS AND EXPERIENCED HACKERS ONLY, THEY ARE NOT FOR BEGINNERS. IF YOU DON'T KNOW WHAT YOU ARE DOING, YOU CAN GET INTO A LOT OF TROUBLE, SO DO NOT ATTEMPT TO USE THESE FILES IF YOU DO NOT UNDERSTAND THEM. --TO DETERMINE THE SERVICE FORMAT, YOU'LL HAVE TO DIAL THE NUMBER UP SEVERAL TIMES YOURSELF, AND EXPERIMENT WITH IT. TIME THE DELAYS, WRITE DOWN THE NUMBER OF DIGITS YOU DIALED, THE RESPONSES, ETC. IT'S ALL IMPORTANT. ALWAYS HAVE THE SPEAKER ON WHEN ATTEMPTING ANYTHING FOR THE FIRST TIME. --A BIT OF SCANNING CAN DO A WORLD OF GOOD, ESPECIALLY WHEN LOOKING FOR MULTI-PORTS. SCAN NEAR THE ORIGINAL PORT NUMBER YOU HAVE, BY HAND OR OTHER METHOD. --SOMETIMES A LOCAL CARRIER NUMBER WILL GET THROUGH A LOT FASTER THAN A LONG DISTANCE CARRIER NUMBER. TRY BOTH AND WRITE DOWN THE AMOUNT OF TIME IT TAKES FOR THE CALL TO GO THROUGH, FROM THE MOMENT THE LAST DIGIT IS DIALED, TO UNTIL IT GIVES YOU A CARRIER. ADD 1 OR 2 TO THE DELAY, AND USE IT (EITHER THE LOCAL OR THE LONG DISTANCE CARRIER, WHICHEVER ANSWERED THE QUICKEST) AS THE "WAIT FOR CARRIER DELAY" PLUS THE NUMBER. --GENERALLY, TO FIGURE OUT THE NUMBER OF DIGITS, YOU CAN DIAL IN 10 DIGITS, THEN KEEP DIALING A DIGIT AND COUNT UNTIL IT STOPS YOU. THE NUMBER YOU DIALED AFTER THE 10 IS THE DIGITS. I SHOULD LET YOU KNOW THAT THIS DOESN'T ALWAYS WORK. --YOU CAN ALWAYS USE 800 AND 950 CODES AT PAYPHONES. --THERE ARE CERTAIN NUMBERS THAT CAN SUPPOSEDLY TELL YOU IF YOU ARE BEING TRACED. I DON'T KNOW HOW MUCH TRUTH THERE IS TO THIS, BUT IF YOU DO WANT TO EXPERIMENT WITH THIS, FIRST DIAL A CODE, AND THEN DIAL UP THE FOLLOWING NUMBERS: 617-890-9900, 415-284-1111, 305-324-3333, OR 213-935-1111. THERE IS A GENERAL RULE FOR ESTIMATING CODE LENGTHS, SO HERE ARE SOME CODE LENGTHS OF A FEW SERVICES... MCI - 5 SPRINT - 8 METRO - 6 SKYLINE - 6 (OTHER) - USUALLY 6 NOW HERE ARE SOME MORE EXTENDERS, THAT I FOUND OUT RECENTLY, THAT ARE NOT INCLUDED IN THE EXTENDER LIST IN HACK AND PHREAK FILE #2... 1-800-238-1740 1-800-242-1424 1-800-323-3027 1-800-325-7222 1-800-448-8989 1-800-523-3511 1-800-882-2255 NOW HERE'S SOME 950 NUMBERS. 950 NUMBERS ARE VERY SPECIAL NUMBERS, THAT WERE PLANNED TO BE OUTMODED. IN GENERAL, 950 NUMBERS ARE REASONABLY SAFE AS FAR AS I KNOW, AND THEY GIVE EXCEPTIONALLY GOOD CONNECTIONS. BUT NOT ALL OF THESE 950 NUMBERS CAN BE REACHED FROM ALL AREAS. ALLNET 950-0444 950-1044 AT&T 950-0288 SPRINT 950-0777 ITT 950-0488 MCI 950-0222 950-1022 RCI 950-0211 SKYLINE 950-0888 950-1088 US-TEL 950-0333 950-1033 METRO 950-0220 LEXITEL 950-1066 NOW IF YOU WANT TO GET THE LOCAL SPRINT, MCI, ETC. ACCESS NUMBER FOR YOUR LOCAL AREA CODE, JUST CALL UP ON OF THE BELOW CUSTOMER NUMBERS AND TRICK THEM INTO GIVING THEM TO YOU. JUST TELL THEM THAT YOU'RE A BUSINESS MAN ON A TRIP TO WHERE EVER IT IS THAT YOU ARE GOING (IE. CITY, STATE) AND THAT YOU NEED THE ACCESS NUMBER TO USE YOUR CODE. AND ABOVE ALL, SOUND PROFESSIONAL. ALLNET 1-800-922-8888 AT&T 1-800-222-0300 SPRINT 1-800-521-4949 ITT 1-800-526-3000 MCI 1-800-624-2222 SKYLINE 1-800-235-2001 US-TEL 1-800-527-4105 METRO 1-800-235-5303 AND I HAVEN'T FORGOT ALL YOU PEOPLE WHO LIKE TO HACK COMPUSERVE, HERE ARE A BUNCH OF COMPUSERVE PORTS. THIS IS THE MOST RECENT LIST THAT I HAVE MADE, BUT I WOULD CHECK THEM OUT BEFORE USING THEM, SINCE SOME OF THEIR NUMBERS MAY HAVE CHANGED. 201-484-2275 203-236-5931 205-879-2280 206-634-1713 207-236-8505 208-384-5660 209-252-1892 212-758-4114 213-591-8392 214-761-9040 215-776-6960 216-867-1237 219-447-0573 301-254-7113 302-652-8732 303-629-5563 304-736-2231 305-771-8074 312-443-1250 313-964-4745 314-241-3101 316-689-8765 317-638-2517 318-424-4460 401-781-8500 402-895-5288 404-237-8113 405-946-4799 408-249-5361 412-391-8818 413-256-8194 414-258-5616 415-961-7242 416-752-4150 501-666-8464 502-581-9526 503-232-1072 504-948-9542 505-345-3631 512-444-7234 513-721-2691 515-270-1581 516-681-7240 517-321-2388 601-982-0463 602-256-2951 603-883-0884 604-687-6043 605-341-4580 606-259-3446 607-772-1225 609-665-6244 612-375-9163 614-457-2105 615-366-1947 617-267-2569 619-487-6648 714-520-9724 702-878-0056 703-352-7500 703-841-9834 713-225-2550 716-458-3460 717-657-9633 801-521-2890 803-762-1740 804-461-6128 805-499-0371 806-763-5081 813-875-0633 814-453-3624 817-870-2461 818-982-1813 901-452-8530 904-246-9961 914-949-4510 915-565-4661 918-749-8801 919-878-8870 OK, I'LL NOW LIST SOME OF THE DIFFERENT TONES THAT BELL USES, AND WHAT THEY ARE, AND A LITTLE ABOUT THE BOXES ASSOCIATED WITH THEM... BLUE BOX FREQUENCES: THESE TONES, WHICH I HAVE PUT IN MATRIX FORM, ARE FOR A BOX WHICH GENERATES TONES THAT OPERATORS USE TO DIAL. ROTARY WORKS AS WELL, BUT THIS IS TECHNOLOGICAL. FIRST YOU DIAL DIRECTORY ASSISTANCE, OR AN OPERATOR, ETC. THEN YOU BLAST THE LINE WITH A 2600 HZ TONE.THIS GIVES YOU THE LINE, AND THIS IS ALSO HOW BELL TRACKS DOWN BLUE BOXERS. THERE ARE 2600 HZ DETECTOR SYSTEMS, AND THIS IS EVEN ON OLD #4 CROSSBARS. ONCE ONE AN OPERATOR TRUNK LINE, YOU USE YOUR BLUE BOX/ROTARY TDO DIAL. 2600 HZ - USED TO GET ON/OFF TRUNK AND HERE IS A THE TONES TO USE AFTER 2600 HZ, IN MATRIX FORM 700 900 1100 1300 1500 700 1 2 4 7 11 900 + 3 5 8 12 1100 + + 6 9 KP 1300 + + + 10 KP2 1500 + + + + ST USE KP (1500+1100) TO START A CALL AND ST (1500+1500) TO STOP A CALL USE 2600 HZ TO DISCONNECT. IT IS ALSO SAID THAT 2600 HZ RESETS SPRINT NODES AND GIVES YOU THEIR INITIAL TONE. IF YOU DON'T KNOW WHAT TO CALL FROM AN OPERATOR TRUNK, WELL I'LL INCLUDE THIS HERE TO HELP YOU OUT... XXX+101 - TOLL SWITCHING XXX+121 - LOCAL OPERATOR XXX+131 - INFORMATION XXX+141 - RATE & ROUTE XXX+181 - COIN REFUND OPERATOR XXX+11501 - MOBILE OPERATOR XXX+11521 - MOBILE OPERATOR XXX+11511 - CONFERENCE OPERATOR BY THE WAY, THESE WILL WORK WITH ROTARY OR OPERATORS TO NES, BUT ONLY ON OPERATOR TRUNK LR*ZII)X ALL OF THE TONES MENTIONED SO FAR, DEALING WITH BLUE BOXES ARE CORRECT, BUT I DIDN'T MENTIONED ANYTHING ABOUT THE TIMING SPECS. THE TONE PAIRS ARE TO REMAIN ON FOR 1/10 SECONDS, WITH 1/10 SECONDS OF SILENCE BETWEEN DIGITS. THE KP TONES SHOULD BE SENT FOR 2/10 SECONDS. A WAY TO DEFEAT THE 2600 HZ TRAPS, IS TO SEND, ALONG WITH THE 2600 HZ, SOME PINK NOISE, WHERE MOST OF THE ENERGY IN THIS SIGNAL SHOULD BE ABOVE 3000 HZ. THIS SIGNAL DEAL WON'T MAKE IT OVER THE TOLL NETWORK, BUT IT SHOULD CARRY AS FAR AS YOUR LOCAL TOLL CENTER. THIS SHOULD MAKE IT SO THAT THE TRAPS WON'T FIND PURE 2600 HZ ON THE TRUNK. THIS ISN'T TOO SAFE OF A WAY OF BOXING, BUT IT SHOULD SLOW DOWN THE DISCOVERY. AS FOR THE USE, THE FIRST THING THAT YOU NEED TO UNDERSTAND IS THAT THERE ARE 2 TYPES OF TOLL COMPLETING TRUNKS, INWARD AND OUTWARD. THESE NAMES ARE REFERENCE TO THE OFFICE THAT IS SWITCHING THE CALL, OR OTHERWISE KNOWN AS THE TOLL SENTER THAT SERVES THE WATS LINE THAT YOU CALLED, AND EACH TYPE OF TRUNK HAS A DIFFERENT CLASS OF SERVICE. FROM AN INWARD TOLL COMPLETING TRUNK, YOU CAN REACH THE DIFFERENT SERVICE OPERATORS, THE TOLL TEST BOARD, AND THE INWARD OPERATOR. SOME OFFICES ALSO ALLOW REMOTE TESTING AND IT IS IN THESE OFFICES THAT YOU CAN ACCESS THE OUTWARD TOLL COMPLETING TRUNKS, WHICH ALLOWS YOU TO MAKE VARIFICATIONS. RED BOX FREQUENCIES: 1700 HZ AND 2200 HZ MIXED TOGETHER. A NICKEL IS 66MS ON (1 BEEP). A DIME IS 66MS ON, 66MS OFF, 66MS ON (2 BEEPS). A QUARTER IS 33MS ON, 33MS OFF REPEATED 5 TIMES. MS STANDS FOR MILLISECOND. FOR THOSE OF YOU THAT DON'T KNOW, A RED BOX SIMULATES MONEY BEING PUT INTO A PAY PHONE. YOU MUST PUT IN SOME MONEY FIRST THOUGH, SINCE THE OPERATOR CAN TELL IF MONEY WAS PUT IN, BUT AS TO HOW MUCH, SHE LETS THE COMPUTER ANSWER THAT. TASI LOCKING FREQUENCIES: TASI, WHICH STANDS FOR TIME ASSIGNMENT SPEECH INTERPOLATION, IS USED ON SATELITE TRUNKS, AND BASICALLY ALLOWS MORE THAN ONE PERSON TO USE A TRUNK BY PUTTING THEM ON WHILE THE OTHER PERSON ISN'T TALKING. BUT OF COURSE YOU WOULD NEVER HEAR THE OTHER PERSON TALKING ON YOUR TRUNK. HOWEVER, WHEN YOU START TO TALK, THE TASI SONTROLLER HAS TO FIND AN OPEN TRUNK FOR YOU. BECAUSE OF THIS DELAY IN FINDING A TRUNK, SOME OF YOUR SPEACH IS LOST. THIS IS CALLED CLIPPING. NOW, IF YOU WERE TRANSMITTING DATA OVER A TRUNK, CLIPPING WOULD REALLY MESS UP THE DATA. SO THERE IS SOMETHING CALLED A TASI LOCKING FREQUENCY, WHICH KEEPS THE TASI FROM PUTTING ANYONE ELSE ON YOUR TRUNK, OR YOU ON ANYONE ELSE'S TRUNK. IN ANY CASE, THE FREQUENCY IS 1850 HZ, AND THIS IS SNED BEFORE THE TRANSMISSION. EARLIER TODAY, I WAS DOING SOME INTENSE HACKING, AND I EVENTUALLY OBTAINED A CERTAIN DATA NUMBER. IN ADDITION, I OBTAINED THE PASSWORDS, AND OTHER IMPORTANT DATA FOR A MAJOR WORLD-WIDE COMPANY. I WON'T MENTION THE COMPANY NAME, OR THE NUMBER THAT I OBTAINED, SINCE I COULD GET INTO A LOT OF TROUBLE FOR THIS, AND I PROBABLY WILL. AS FOR THIS CERTAIN COMPUTER NUMBER, THERE MAY BE ONLY A FEW THAT KNOW ABOUT IT, IF ANYONE AT ALL. THIS IS DEFINATELY THE BIGGEST THING THAT I EVER HACKED. WELL AS FOR THE NUMBER, I'LL GIVE YOU PART OF IT...***-***-96**. WELL THAT'S ALL THAT I CAN SAY ABOUT IT, SINCE I'M NO FOOL, I DON'T WANT TO SPEND MY YEARS BEHIND BARS.