ÜÜÜÜÜÜÜÜÜÜÜÜÜÜÜÜÜÜ Alternative Lifestyles ķ Anarchist Ū°±²±°±²±°±²±°±²²±°Ū Philosophies ķ Conspiracies Ū°±²²±°ŪßßßßßßßßßŪ°±Ū Destruction ķ Fiction ķ Freedom Ū°±ŪßŪ°±Ū Ū±°Ū Hacker Ethics ķ Hacking Tutorials Ū°±Ū Ū±°Ū Ū°±Ū Hacking Utilities ķ Individualism Ū°±Ū Ū°±Ū Ū±°Ū /\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/ Ū°±Ū Ū±°Ū ÜÜÜÜÜÜÜÜŪ°±Ū ś ÄÄÄ A N A R C H I S T ÄÄÄ ś Ū°±ŪÜÜÜÜÜŪ°±Ū Ū°±²±°±²²±°Ū ś ÄÄÄ P H I L O S O P H E R S ÄÄÄ ś Ū°±²±°±²±°±±°Ū ßßßßßßßßßßß ś ÄÄÄ U N I T E D ÄÄÄ ś Ū°±ŪßßßßßßßŪ°±Ū ÜÜÜÜ ÜÜÜÜ /\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/ Ū°±Ū Ū±°Ū Ū°±Ū Ū±°Ū Paranormal Phenomena ķ Political Ū°±Ū Ū°±Ū Ū±°Ū Ū°±Ū Opinions ķ Pranks ķ Religion Ū°±Ū Ū±°Ū Ū°±Ū Ū±°Ū Scams/Frauds ķ Scanning Results Ū°±Ū Ū°±Ū Ū±°ŪÜÜÜÜÜŪ°±Ū Security ķ Social Engineering Ū°±Ū Ū±°Ū Ū°±²±°±²±°±°Ū Telecommunications ķ Unix Support ßßßß ßßßß ßßßßßßßßßßßßß VAX/VMS Support St. Patrick's Day! A time when fags everywhere rise up and demand rights. Hide at home folks ... or better yet, go down to the demonstration your- selves. You have hundreds of fags all together who can be easily hosed with pressurised water. Nothing wrong with fags demanding rights; you're just there to exercise your anti-fag rights. Anyway ... I've been doing pretty well. Five releases in a month. I can't say the same about our other 'members,' however. Falstaff has been saying "I'm working on it" for the last several weeks. Virtuoso would rather chase around an ugly bitch (in my opinion) in his class than write. And I haven't heard from Excessive Mayhem since he first told me he wanted to join. From now on, you're not a member of APu until you complete your first phile. Falstaff, Virtuoso, and Excessive Mayhem have unofficially 'joined,' but they are not members until they finish (which won't be for a long time if things continue as they are). On a brighter note: Punker, sysop of an H/P board in 509, has agreed to write for us, and he is going to set up an APu file base for our official releases. Hopefully his writing about H/P topics will help APu lean more to H/P rather than Anarchy, which the 'mainstream' phile-writing groups do pretty well already. 'How to make a pipe bomb' and related stuff gets boring rather quickly, but good hacking guides can serve as references for months and years to come. This was a laugh ... Virtuoso showed me the phile he was working on, which supposedly is about "how anarchy rules". The header was 'Anarchist Philos- ophers Union'. He had read the previous APu releases, yet somehow couldn't get the name right. UNION? That's downright embarassing. His own version of the APu news followed, with this remark: "Sine tried to kick me out of APU, but I told him this was anarchy and I had freedom of speech. So he shut up." Yeah ... sure. You can rant and rave as much as you want, I don't care, but I don't have to slap the APu logo on it and distribute it around the world as an APu release. I also didn't try to kick you out, but I will if you don't get your phile done. Fortunately, under the new member system I won't have to worry about who's in and who's out. Here's a list of APu releases so far: ŚÄÄÄĀÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄĀÄÄÄÄÄÄÄÄÄÄÄÄĀÄÄÄÄÄÄÄÄÄÄæ ³ # ³ Title ³ Author ³ Date ³ ĆÄÄÄÅÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÅÄÄÄÄÄÄÄÄÄÄÄÄÅÄÄÄÄÄÄÄÄÄÄ´ ³001³ A Simple Unix Decoy (DCOY) ³ Sine ³ 95-02-05 ³ ³002³ Hacker Security (SAFE) ³ Sine ³ 95-02-17 ³ ³003³ Political Correctness (RACE) ³ Sine ³ 95-02-20 ³ ³004³ Young Hacker's Guide to X.25 Networks (X25)³ Sine ³ 95-02-27 ³ ³005³ Maintaining a G-Phile Library (LBRY) ³ Sine ³ 95-03-04 ³ ³006³ Y.H.G. to XMUX Systems (XMUX) ³ Sine ³ 95-03-17 ³ ĄÄÄÄĮÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄĮÄÄÄÄÄÄÄÄÄÄÄÄĮÄÄÄÄÄÄÄÄÄÄŁ The four-letter word in brackets refers to the filename it was released as. For example, (DCOY) means that the file is APU-DCOY.ZIP. Upcoming from APu: My next phile will probably be another Young Hacker's Guide, this one for StarMaster systems. Falstaff plans to do his guide to Unix, but if he doesn't do it sometime in the next month I'll probably do a YHG to Unix myself. And Virtuoso's phile on the benefits of anarchy has been sitting around half-completed for weeks. As usual, APu's next phile will probably be written by me ... :( śSine -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6 mQCNAy9GqwgAAAEEALk/hjSprZ0bsVCHZUCn1dE+w3FKtnEVJUgY9CkEOy6IpBve hFFKeM4cSlJYrHoDKgRRLLe5NZ4jEHLqdIHbThMQH0rVI/73YaXsVN/2Msk07PkD yEzAKcqoLccSQrsNj3j/GQAUqY22tLBSbwyLb9gdFBVJfAeXh6tKuMCs+sFRAAUR tCtTaW5lIG9mIEFuYXJjaGlzdCBQaGlsb3NvcGhlcnMgVW5pdGVkIDxBUHU+ =knAI -----END PGP PUBLIC KEY BLOCK----- ÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄ 006 006 006 006 006 006 006 006 006 006 006 006 006 006 006 006 006 006 006 The Young Hacker's Guide to XMUX SYSTEMS by Sine Released Friday 17 March, 1995 ŚÄÄ ÄÄÄ ÄÄ Ä ś ³ Introduction Gandalf's XMUX is not usually considered an OS in and of itself; it merely provides support for other multi-user systems. It monitors channels, performs system maintenance, and other related tasks. The same goes for hacking; the main reason you'll be using an XMUX is to find other systems. I have only encountered XMUXen on Datapac; there are none on Telenet/ SprintNet, though I'm sure they exist on other packet-switching networks. I don't know know of their existence outside the networks. There are four separate services that come with the XMUX: CONSOLE (by far the most important), LOGGER (keeps logs), MACHINE (more logs), and FOX (test machine). There are almost always additional ones, though. IMPORTANT: When you get into an XMUX console, you will have almost unlim- ited destructive power over the network. DO NOT change anything. Avoid the temptation to change passwords, reset the logs, or delete users or serv- ices. Hacking is about exploring, not destroying. ŚÄÄÄÄ ÄÄÄ ÄÄ Ä ś ³ Finding XMUXen If you are looking for XMUXen by far the best place to go is Datapac. There are dozens of them. Often the XMUX console will be an address itself (e.g. 40600892), but most of the time it will be a subaddress, accessible through a mnemonic. (To access the console on 40600892, enter '40600892,CONSOLE'. FOX, MACHINE, and LOGGER are addressed the same way. For more information on Datapac, read APu #004, "The Young Hacker's Guide to X.25 Networks". You could scan Datapac yourself using readily available scanning programs, but in my opinion it's a waste of time. Get Deicide's "Complete Datapac NUA List". It was scanned in 1993 but most of the addresses still work. Using that list I found over a hundred valid XMUXen, at least a dozen of them unpassworded, and a half-dozen with easily guessed passwords. If you're having problems finding some XMUXen, you're obviously looking in the wrong place. There are *too* many of them. Ś ÄÄÄ ÄÄ Ä ś ³ Getting In XMUXen are unpassworded by default, and there's a good chance you'll find some systems without passwords. Don't bet on it. When you call an XMUX console you'll see something like this: DATAPAC: call connected to 3910 0498 (001) (n, remote charging, packet size: 256) Password > Sometimes there will be a one-line message before the prompt. Now you have four chances to enter the correct password (no username is required). Sometimes it is set to one chance, but these are probably run by security- conscious sysadmins who actually *read the logs*, so you should probably stay away from them. There are so many easy XMUXen, you don't need to bother with the tough ones. I've found that the most popular password is SYSTEM, so try that first. Other passwords to try are GANDALF, XMUX, CONSOLE, MUX, PASSWORD, and SYS. Another excellent password choice is the XMUX's node name, which is often the company name (always a popular password choice). The node name is available from the LOGGER (read the part about LOGGER near the end of the phile). If none of those work, your best bet is to move on to the next system. ŚÄÄÄÄÄÄÄÄÄÄÄÄ ÄÄ Ä ś ³ CONSOLE: Main Menu Now that you've either found an unpassworded system or guessed your way in, you will see the following lines: Gandalf XMUX 13-MAR-1995 Rev B1 4553L Primary Console Menu 14:28:53 Node: BCE The only interesting thing here is the node name (BCE), which might (or might not) give you an idea of where the system is located. Often the date will be sometime in early 1980, meaning that some loser probably stumbled on it and reset the system. Don't follow in his footsteps. Primary Menu: 1. Define 2. Display 3. Maintenance 4. Supervise 5. Exit Primary selection > The only menus you should be interested in are 1 and 2 (and 5 of course). Maintenance and Supervise provide nothing interesting except the ability to bring down the network without even knowing what you're doing. Check them out, but don't do anything! At any time you can press ? to get the current menu and to return to the previous menu. ŚÄÄÄÄÄÄÄÄÄÄÄÄÄÄ ÄÄ Ä ś ³ CONSOLE: Define Menu Define Menu: 1. System 2. Message 3. Profile 4. Remote Profile 5. Billing Group 6. Closed User Group Simulation 7. Abbreviated Command 8. User 9. Link 10. Channel 11. Service 12. Console Password Define selection > 1 Option #1 is mildly interesting, allowing you to change the node name, date, time, and other vital data. If you're in a bad mood, by all means fuck around with the options. Just don't be surprised when the admins order a trace on your Datapac indial. On the other hand, if you're feeling noble, you can change the date and time back to their correct settings, as the date is often several days - or years - off. Selecting 'All' will, in this and the other menus, go through each option in sequence. Option #7 is very helpful. You'll get a prompt: Abbreviated command name > Here enter a ? to get a list of aliases. Names must consist of 1 to 8 alphanumeric characters Current abbreviated commands are: CNCP,ENVOY,CEZ,PRIME,NORANDA,NCIS,BMS,OAG,MTL,INFO,DB,LONDON,CWC, CONSOLE,RUDY,VAN,CCI,DUNN,MELLON,TYMNET,KLEIN,KIDD,FIN,NSCUK,GATX Abbreviated command name > This XMUX has a lot of aliases; some may only have two or three. Pick one and enter it at the prompt. For example, CNCP. Define Abbreviated Command CNCP: [81100233] As you might have guessed, this aliases hold Datapac addresses. This one is not particularly interesting, but some aliases also have mnemonic sub- addresses in them. They're written with a 'D' in the place of a comma, so if you see the alias '20300083DGEORGE' you would enter 20300083,GEORGE in Datapac. This way you will be able to find previously hidden subaddresses. Option #8 is another thing to take a look at if you're interested. You'll get a 'User ID > ' prompt. Enter '?' and you'll get a list of users. Names must consist of 1 to 8 alphanumeric characters Current user-IDs are: SYSTEM,PILOT,TEST And the 'User ID > ' prompt again. Choose one of the current users, or enter a new name (in which case a user will be set up with default values in place). I'm not sure what users are used for (since you're only asked for a password when you log in) but it's good for impressing your non- hacker friends. :) Option #11 is probably the most interesting command of all. You'll get a 'Service name > ' prompt. Enter '?': Names must consist of 1 to 8 alphanumeric characters Current services are: CONSOLE,FOX,LOGGER,MACHINE,TST,CH12,FOR Service name > Each of these services is accessible through mnemonic subaddresses of the XMUX's NUA. In this case, the XMUX is at 39100498,CONSOLE, so the service 'TST' is at 39100498,TST. Voil…, as if Datapac didn't have enough systems to hack, you now have a bunch more. (CONSOLE, FOX, LOGGER, and MACHINE are always there. Sometimes they will be the only ones listed; if that's the case, slam your head into the monitor a few times, and move on to the next one.) At the prompt you can also select the individual services and modify them. The same applies for all the other possible modifications, though: 'caveat utilitor' (user beware). ŚÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄ ÄÄ Ä ś ³ CONSOLE: Display Menu Though perhaps not as interesting as the Define menu, the Display menu has a few curiosities of its own. Display Menu: 1. Diagnostics 2. Channel Configuration 3. Channel Status 4. Call Status 5. Link Statistics 6. System Statistics 7. Billing Group Statistics Display selection > Option #3 will display a chart of channel usage. Most channels will be idle (an XMUX is a lonely place) but for the ones that are active, you will get the User ID (usually SYSTEM), and receive / transmit data. At the end of the list it will ask you if you want to reset the figures, which you will kindly refrain from doing. Option #4 is another thing to check out. It will display the Datapac add- ress of the system that called it, which is useful if you are calling from a private PAD and you want to know its address. Other information includes the channel the call is on, the duration of the call, and the billing group (again, usually SYSTEM). It also prints an 'R' at the end if the calling charges were reversed (if not, it's probably from a private PAD, and now you know its address.) Option #7 allows you to look at billing statistics, if for some reason you're interested in that information. ŚÄÄÄÄÄÄÄÄÄÄÄÄÄÄ ÄÄ Ä ś ³ CONSOLE: Other Menus The Maintenance menu has options every vengeful, socially disturbed cra- sher will love. 1. Channel Loopback Test 2. Force Disconnect 3. Restart Unit #1 sounds innocent enough, I have no idea what it does (beyond what I can tell from its name). It's not a hacker's job to be performing system maintenance, that's for the suit-wearing 9-5 office grunts. But go ahead if it gives you a thrill. I've never tried #2, because I've never seen anyone else on a channel, and so there's nobody to disconnect. My first time on an XMUX I chose #3 out of ignorance, and the date reset to January 1980. (I'm not sure what else was reset, and I don't want to repeat my mistake to find out.) The Supervise Menu holds more possibilities for the crasher, except here he must erase things one by one instead of bringing the whole network down with a single command. 1. Default Parameters 2. Copy Profile 3. Copy Remote Profile 4. Copy User 5. Copy Link 6. Copy Channel 7. Copy Service 8. Delete Profile 9. Delete Remote Profile 10. Delete User 11. Delete Service 12. Delete Abbreviated Command 13. Delete Billing Group I presume #1 restores the system to default parameters, but I've never tried it. The others are a waste of time; there really isn't any reason to copy anything, and deleting is equally pointless. That's it for the console. While the console is the most important part of the XMUX, there are three other systems that are also worth inpsecting: LOGGER, MACHINE, and FOX. Ś ÄÄ Ä ś ³ LOGGER The LOGGER function is accessible by the mnemonic subaddress LOGGER on the XMUX's address. I've already explained mnemonics, if you don't understand you obviously haven't read this whole phile, so go back and ponder over it. Anyway, upon calling the LOGGER you'll get something like this: BCE 14:58:39 X7CON0002 L 0 LC 1 CH LOG A 92404107 SERV LOGGER CG R SPD CALL IN FROM LINK The most important part here is the first word, the node name (BCE). Since the console password is often a variation of the node name, you can call the logger, find the node name, then go back to the console and try it. I'm not quite sure what all the other information means. There's the time of connection, 92404107 which is the caller's address, SERV LOGGER which means you're calling the logger, R for reverse charging ... you figure out the rest. ŚÄ ÄÄ Ä ś ³ MACHINE MACHINE is accessible, as usual, on the mnemonic MACHINE. This is another service whose purpose eludes me. You'll get a '#' prompt when you call. As far as I know only two commands work here: L and S (short and long). Entering S gives a list like this: BCE 15:00:00 X8STA0002 CH 0 RP 0 TP 0 RC 0 TC 0 R 0 13 With one of these lines for each channel. The L command is much more int- eresting: BCE 05:56:53 X5CLROR01 CH 4 L 0 LC 14 RC 81 TC 3839 DF BCE 05:56:53 X7CLROR01 CH 4 L 0 LC 14 RP 44 TP 34 R 0 I 0 CA PAD D 0 6C This continues for 50-100 lines. This information is available from the Display menu on the console, but using MACHINE you can get it without the console password. Ś Ä ś ³ FOX FOX is a test service, accessible - you guessed it - on the mnemonic sub- address of FOX. You'll get something like this when you call: THE QUICK BROWN FOX JUMPS OVER THE LAZY DOG 1234567890 DE THE QUICK BROWN FOX JUMPS OVER THE LAZY DOG 1234567890 DE THE QUICK BROWN FOX JUMPS OVER THE LAZY DOG 1234567890 DE This continues until you hang up. This service is so boring it probably won't even serve to impress your non-hacker friends. I wonder if this test system has ever helped administrators detect an error in the network; more likely, it was put there as some sort of private joke by the XMUX system programmers. ŚÄÄÄÄ ÄÄ Ä ś ³ Conclusion XMUX systems make it easy for you to bring down an entire network, and hopefully you will overcome the urge to do so. More positively, they allow you to find new systems hidden in the maze of mnemonic subaddresses, the 'hidden layer' of Datapac. Have fun, śSine ĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶĶ Originally released to 416/905's largest library of H/P information: ŚÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄ ŚÄÄÄÄ ŚÄÄÄÄ ś ÜÜ ° ÜÜ ŚÄÄÄÄ ŚÄÄÄÄÄÄ ŚÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄ ŚÄÄÄÄ ŚÄÄ ß ž Ž²Ż ßßÜś ŚÄÄÄÄ ŚÄÄÄÄÄÄÄ ŚÄÄÄ ŚÄÄ ŚÄÄ ŚÄ ŚÄÄÄÄ Ś ±ÄÄ Ū Ū ° ±ŚÄÄÄÄ ŚÄÄÄÄÄÄÄÄ ŚÄÄ ŚÄÄÄ Ś ŚÄÄÄÄ ŚŽŻÄÄ ŽŻ ŽŻÜܲ ß ÄÄÄ ŚÄÄÄÄÄÄÄÄ ŚÄ ŚÄÄÄ ŚÄÄÄÄ Śž ÄÄ ÜÜŪßŻß² ± Ż ÄÄ ŚÄÄÄÄÄÄÄ Ś ŚÄÄÄ ŚÄÄÄÄÄÄÄÄÄ ÄÄÄß° ŽŻ ž ŽŻ Ū ÄÄ ŚÄÄÄÄÄÄ ŚÄÄÄ ŚÄÄÄÄÄÄÄÄÄŽŻÄÄ ² Ū ß ÄÄ ŚÄÄÄ ŚÄÄÄÄ Ś ±ÄÄ ŽŻ ŽŻ ž ÄÄÄ ŚÄÄÄ ŚÄÄÄÄ ŚÄÄ Ä Ū Ū ° ŚÄÄÄÄ ŚÄÄÄ ŚÄÄÄÄ ŚÄÄÄÄ° ° ܲÜÜÜ žŻß ŚÄÄÄÄ ŚÄÄÄ ŚÄÄÄÄ ŚÄÄÄÄ Ż ° ŚÄÄÄ ŚÄÄÄ ž -/- The Largest H/P Board in 905/416 -\- The Hayden Andre Project - 905.513.9726