                ͻ
                   Audix Voice Mail Systems                     
                        July 28, 1993                           
                           By Phax                              
                ͼ                   
                      Revised 1/23/96


     Audix Voice Mail System is the best Voice Mail System that I
have come across.  It has many features and is very powerful.  The
best one that I have seen is kind of like a hub with extensions
branching out all over the United States from one simple 800
number.  But for right now we aren't worried about calling all over
the United States from a Voice Mail System.  This article will
concentrate on getting VMB's <Voice Mail Boxes> and the system
commands.  I am writing this file because I have never seen a file
on Audix Voice Mail Systems before and it is a topic that I feel
should be covered.  This article will include my complete list of
commands for once you actually get into a box also.

        Where to start.  Well first off you need a system to start
with.  I just find them by scanning the 800 prefix by hand.  I know
that it takes a long time but it is worth it in the end.  You could
look through the phone book and find a VMS <for now on VMS in this
article will stand for Voice Mail System.  Not to be confused with
VAX/VMS the operating system> company and try to social engineer
the dial in for the system from the person working there <Cereal
Killer is writing a file right now on Social Engineering so look
for it soon.>.  Basically what you are looking for is a
computerized recording <most often a woman> saying "Welcome to
_______ Corporation.  Blah, blah, blah."  Once you find this
message you will then want to hit *7.  If it says "Welcome to Audix
Voice Power." or something similar you have found what you want. 
If it doesn't say that keep the number incase later on you find out
what kind of system it is and want to go back and hack on it later.

     Now that you have the number comes the hard part.  Finding an
open box.  Some times you might get lucky and the system will
prompt you with a message like, "Please enter your 5 digit box
number and # sign."  Well from that message you know that the boxes
on the system are 5 digits long.  You might be able to access a
company directory and input Smith or any other common name and it
will take you to the box and you it might say how many digits in
the box number but don't count on it.  You can try entering a 1
digit box and it will either tell you to enter your password or
tell you that it is not a valid box.  I have never been told a box
was invalid because I guessed too low but I have gotten that
message when I guessed too high. ie. on a 5 digit system when I put
in a 6 digit box number.  This isn't a 100% sure way but it will
narrow down your choices.  If you have no other option you can
always start at 1 and work your way up.  But remember two things. 
No one said this was going to be easy and you only get about 2-4
chances before it hangs up on you.  Having a little luck doesn't
hurt either.

     After you find a valid box number it will prompt you for your
password.  Now you should first try the box number as the password
<most common on an unused box but sometimes used on active boxes
too>.  If that doesn't work try XXXX with the number of X's being
equal to the number of digits in the box number and all the X's
being the same digit.  Don't get distressed because most people
don't just find a system and instantly get lots of open boxes.  The
system that I am dealing with right now I have only found one open
box and I have scanned about 100 numbers.  Now granted this system
is a little hardcore <where do you think the example of being able
to call anywhere in the US from one number came from?> and it has
5-15 digit passcodes.  Okay sooner or later you are bound to come
across a valid box.  That is where the fun starts.

     You have been hacking forever getting sick of hearing,
"Invalid attempt please try again. <BEEP> Enter your box number and
# sign.  Now enter your password and # sign."  What do you know?
Someone actually left their password to default or you found an
empty box!  Well if it's an empty box there probably won't be any
messages and it will prompt you to enter a password.  Okay now if
you find that it is in use don't worry about it.  Once you have a
box hacking the rest of the system is pretty easy.  

        The easiest way to scan the system is to make a mailing list
which is option 5 from the main menu then 1.  It will ask if you want
to administer a previous list or create a new list.  Select create a
new list.  It will then ask you to enter an extention, this is how you
scan.  You will get one of three messages.  1, the extention will be
invalid, therefore you just enter another extention.  2, the extention
will be an active extention (ie you will hear someone's greeting).  or
3, (and most important, this is what you are looking for) it will just
read off the extention number.  If it reads off the extention number
it means one of two things.  One, the extention has not been assigned
yet and odds are the password is still default (box number), or two,
it has been assigned but the person has been too lazy to do anything
with it (common among big companies).

        You should have enough info to get started so here is a list
of the basic commands to get you going.  Remember that Audix has one
of the best help menu's ever made so if you get stuck use that to your
advantage.

MAIN MENU:

   1. Record Messages.
      
 
        Record Messages then press 1 when finished.
       
        Press 2 3 to play your message back.
       
        Press * # to approve the message.  
       
        Press 1 to keep recording.
       
        Press * D to delete/abort the message.


   2. Get Messages.


        Press 0 to listen to message.

        Press 1 to respond or forward.
     
        Press * D to delete message.

        Press # to skip current message.


    3. Administer Greeting

        
        Press 1 to administer your personal greeting.

        Press 2 to administer your alternate greeting.

        Press * # to select the greeting in use. <3 on some       
        systems>


    4. Check Outgoing Messages.

  
        Just simply lists your out going messages and the boxes   
        that you are sending them to.


    5. Personal Options


        Press 1 to administer mail lists.

        Press 2 for your personal mail directory. <If you are on an 
        active box good for finding other boxes to hack on.>      
  
        Press 4 to administer your passcode.

        Press 5 to administer your name. <Don't bother with this  
        one.  If someone is going through the system and they hear 
        "Phax" or something they will get suspicious and check out 
        the box.  Better left alone.>


     6. Change Out Calling Information


         Allows you to dial out.  Kind of like a PBX.


     7. Automatically Scan Incoming Messages 


         Scans all incoming messages.  Similar to get messages.


     **7.  Relog Onto System


         Lets you relog onto Audix for more hacking.


      *8. Transfer to another extension


         Simply transfers you to another VMB on the system.  Good 
         for finding other valid boxes.


      **N. Access The Names Directory 


         Allows you to transfer to another extension by name      
         instead of having to enter a box number.  Bad thing is   
         it doesn't tell you what box you transfer to.


      **X. Log Off Audix

         
         Logs off of Audix and gives you a nice little good bye   
         message. :)



     Now that you have a list of all the commands I will go back
and explain how some systems are different from others.  As stated
in the description the commands for selecting which out going
greeting you use is different on some systems.  I've only seen two
variations but there might be more out there you never know so look
for them.  If any of you get a system that lets you dial out
explore it and please get in contact with me.  The only boxes that
I have don't have high enough access to dial out.

     Just some tips for finding valid boxes to hack.  It all comes
with experience but one trick that I have just been told is once
you have a valid box just record a message and blow into the phone
so that it sounds like static.  Now enter as many extensions as you
want to send it to and write them all down.  It will either send it
or tell you that the extension is not valid.  Also you can just try
to transfer to other extensions from a valid box by just entering
box number sequentially until you find one and then try it using
the default passwords.  Check if there are any mailing lists. 
Those will contain valid boxes.  Once you have a valid box it's
just a matter of time until it turns into 10 valid boxes or even
more.  Just don't be a dick and change the passwords on boxes that
people are using.  They are using the system just like you are and
have every right to it if not more <after all they work there and
you don't>.



