-(Exploring the further regions of experience...)-
###################################################################
## _____________ __________ __________ ##
## /____ ____/\ / ______/\ / ______/\ ##
## \__ / /\___\/ / /\_____\/ / /\_____\/ ##
## / / / / / / / /_/___ ##
## / / / / / / / ______/\ ##
## / / / / / / / /\_____\/ ##
## ____/ /_/__ / /_/____ / /_/____ ##
## /____________/\ /__________/\ /__________/\ ##
## \____________\/ \__________\/ \__________\/ ##
## ##
####### Headquarters: (416) 934-4055 #######
## ##
#########################################################
## INNER CIRCLE ELITES (ICE) Presents: ##
## -- The Guide to Hacking & Phreaking [Issue #2] -- ##
## by Liquid Jesus ##
#########################################################
_______CONTENTS___________________________________________________________
PART I.......Introduction
PART II......PHreak PHile Extract (Guidelines by The Mentor - LOD/H)
PART III.....Datapac, PADs, and X.25
PART IV......DNIC Listing
PART V.......NUA Examples (Extracted from PHrack vol.3 issue 27)
PART VI......Questions & Answers
PART VII.....End of Transmission
__________________________________________________________________________
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
______ ______ ______ _________ _______
| __ | | __ | | ___ \ |___ ___| |_______|
| |__| | | | | | | |__/ / | | | |
| ___| | |__| | | / | | | |
| | | __ | | |\ \ | | __|_|__
|__| |_| |_| |_| \__\ |_| |_______|
-+- Introduction -+-
First off I want to thank all the people who left me feedback
after the release of the first issue. It's a hellova lot easier to talk
about things people ask about then by picking stuff out of the blue. It's
only been a couple of days since I finished the first issue but the great
response has prompted me to get my ass hauling an the second. This issue
will probably have a *large* Q&A section but I'll try and limit the ones I
answer to the ones being most important. Most people who leave me
feedback on my BBS will have their questions answered in this guide and
I'll have their name at the beginning of the question. If you ask me
something and you feel it's just such a dumb question that you don't want
to be labelled as the one who asked it, just tell me and I'll change you
to "anonymous".
Ok, I *was* planning on getting into new aspects of h/ping this
issue (credit card fraud, how an NUAs and X.25 works, details about
specific systems, etc..) but most of the feedback I've recieved so far
has had to do with either 800 services and Datapac. Another large area of
concern is the risk of getting caught. Well, I'm not going to lie to
anyone... law enforcement is a LOT tougher on phreaks then on pirates.
With pirating they figure "Ok, the guy probably wouldn't have bought the
game in the first place anyways so it's not like the company is LOOSING
money because he made a copy for himself". Also, it's a lot more
widespread. Hack/Phreaks charge money *directly* to places such as
telephone companies and other pay services. They can get into the corners
of large systems and read about someones personal data until they find it
time to have some fun and start changing things. When people start
feeling insecure about their own private belongings, they find it VERY
easy to slam the person who made them feel this way. You've probably
already heard numerous stories about hackers being caught and charged with
computer crimes. "Computer hackers crack credit codes", "Israeli hacker
cracks military, credit codes", "Fone Phreaks charge millions in unpaid
bills", etc, etc... it's no longer just the 95% average "nerd with taped
glasses" doing it. So how do you manage to stay out of trouble? Well
that's easy, be cautious. If you find something new you haven't seen
before, ask an experience hacker if it's safe to use. Also, keep a low
profile. So what if you feel great about cracking your first system.
Keep your discussions to h/p-designated BBS's and don't start blabbing
specifics to people you don't know. Instead of saying "I just got into
General Motors VAX mainframe" you could limit it to "I just hacked a big
VAX" or something. Just watch what you say.
As for what you CAN use, just about anything that someone else
says. Someone will tell you if something isn't safe, and if it isn't most
of the time they'll also tell you how to use it without getting in di-hoe.
Generally, everything is safe that is posted to the public (eg: on
Alliance, VMB's, BBS's, chat lines, etc..). Someone also asked me if ALL
950's were unsafe. Ok, here's the definition of a 950 from the PHreak's
Glossary:
950 - (pronounced nine-five-oh, not nine-fifty) A nationwide access
exchange in most areas. Many LD companies have extenders
located somewhere on this exchange; however, all services on
this exchange are considered dangerous due to the fact that
they ALL have the ability to trace. Most 950 services have
crystal clear connections.
All 950's have the number 800-950-xxxx (the prefix is 950 hence
it's name.. duhh). Not ALL are unsafe but there are more unsafe 950's
then other forms of 800 services. As I said before, you'll hear if one
isn't safe.
Another thing, before we get started, someone asked me to name
some things that would be good for beginner hackers to start on. Things
that are very safe. Well...
(1) university/colledge computers: most have relatively low external
security and don't keep logs of unsuccessful entry attempts. An
example is the Lincoln County Board of Education VAX at 641-1295
(2400 baud - use VT100 emulation for best results). Some other
examples of local small business systems are:
641-2973 (1200bps) - O.R. MFAS Complex [run on a VAX/VMS] Very SLOW.
641-5002 (1200bps) - System 288 ISOETEC Communications Inc.
687-1655 (2400bps) - Q&O Corporate Division (Quebec and Ontario
Paper Company) [use VT-100 emulation]
687-8788 (1200bps) - Hotel Dieu (send hard break after connect. This
one is very hard to hack... I don't even know the
format of the login)
687-3954 (2400bps) - hit ESCape to get menu of companies
(2) computers connected through networks: as there are a massive amount
of people connected to a network at any given time it isn't practible
for the network to run traces on everything. And, through network
systems you can usually jump around to other systems. The closest
network dialups are for Datapac. Here's a few:
357-4695 2400 baud - ICE also has a list of about 50 or so other
687-1104 2400 baud Datapac dialups for both 1200 and 2400 baud.
687-1115 2400 baud Just ask!
688-5640 1200 baud
..and remember, after you connect enter two periods and hit return
(EG: .. <cr> ) and from there you enter the system address (which is
8 digits long) For some systems to check out see the first release
of this article (filename: ICE001.TXT)
What to stay away from? Well.. usually government computers
aren't safe to hack unless you know what you're doing (more on this in a
future issue), as well as systems to SOME big companies. Like calling
direct to AT&T's mainframe and hacking it for hours on end wouldn't be
something you'd wanna do.
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
______ ______ ______ _________ ___________
| __ | | __ | | ___ \ |___ ___| |___________|
| |__| | | | | | | |__/ / | | | | | |
| ___| | |__| | | / | | | | | |
| | | __ | | |\ \ | | __|_|_|_|__
|__| |_| |_| |_| \__\ |_| |___________|
-+- PHreak PHile Extract: Guidelines by The Mentor - LOD/H -+-
The following was extracted from P/HUN Issue #2 by The Mentor (Legion of
Doom/Legoin of Hackers). I know I posted my own guidelines in release #1
of this guide but these are a few more you may want to keep in mind:
As long as there have been computers, there have been hackers. In the
50's at the Massachusets Institute of Technology (MIT), students devoted
much time and energy to ingenious exploration of the computers. Rules and
the law were disregarded in their pursuit for the 'hack'. Just as they
were enthralled with their pursuit of information, so are we. The thrill
of the hack is not in breaking the law, it's in the pursuit and capture of
knowledge.
I. Do not intentionally damage *any* system.
II. Do not alter any system files other than ones needed to ensure your
escape from detection and your future access (Trojan Horses, Altering
Logs, and the like are all necessary to your survival for as long as
possible.)
III. Do not leave your (or anyone else's) real name, real handle, or real
phone number on any system that you access illegally. They *can* and
will track you down from your handle!
IV. Be careful who you share information with. Feds are getting trickier.
Generally, if you don't know their voice phone number, name, and
occupation or haven't spoken with them voice on non-info trading
conversations, be wary.
V. Do not leave your real phone number to anyone you don't know. This
includes logging on boards, no matter how k-rad they seem. If you
don't know the sysop, leave a note telling some trustworthy people
that will validate you.
VI. Do not hack government computers. Yes, there are government systems
that are safe to hack, but they are few and far between. And the
government has inifitely more time and resources to track you down than
a company who has to make a profit and justify expenses.
VII. Don't use codes unless there is *NO* way around it (you don't have a
local telenet or tymnet outdial and can't connect to anything 800...)
You use codes long enough, you will get caught. Period.
VIII. Don't be afraid to be paranoid. Remember, you *are* breaking the law.
It doesn't hurt to store everything encrypted on your hard disk, or
keep your notes buried in the backyard or in the trunk of your car.
You may feel a little funny, but you'll feel a lot funnier when you
when you meet Bruno, your transvestite cellmate who axed his family to
death.
IX. Watch what you post on boards. Most of the really great hackers in the
country post *nothing* about the system they're currently working
except in the broadest sense (I'm working on a UNIX, or a COSMOS, or
something generic. Not "I'm hacking into General Electric's Voice Mail
System" or something inane and revealing like that.)
X. Don't be afraid to ask questions. That's what more experienced hackers
are for. Don't expect *everything* you ask to be answered, though.
There are some things (LMOS, for instance) that a begining hacker
shouldn't mess with. You'll either get caught, or screw it up for
others, or both.
XI. Finally, you have to actually hack. You can hang out on boards all you
want, and you can read all the text files in the world, but until you
actually start doing it, you'll never know what it's all about. There's
no thrill quite the same as getting into your first system (well, ok,
I can think of a couple of bigger thrills, but you get the picture.)
One of the safest places to start your hacking career is on a computer
system belonging to a college. University computers have notoriously lax
security, and are more used to hackers, as every college computer depart-
ment has one or two, so are less likely to press charges if you should
be detected. But the odds of them detecting you and having the personel to
committ to tracking you down are slim as long as you aren't destructive.
If you are already a college student, this is ideal, as you can legally
explore your computer system to your heart's desire, then go out and look
for similar systems that you can penetrate with confidence, as you're already
familar with them.
So if you just want to get your feet wet, call your local college. Many
of them will provide accounts for local residents at a nominal (under $20)
charge.
Finally, if you get caught, stay quiet until you get a lawyer. Don't
volunteer any information, no matter what kind of 'deals' they offer you.
Nothing is binding unless you make the deal through your lawyer, so you
might as well shut up and wait.
- The Mentor: LOD/H
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
______ ______ ______ _________ _______________
| __ | | __ | | ___ \ |___ ___| |_______________|
| |__| | | | | | | |__/ / | | | | | | | |
| ___| | |__| | | / | | | | | | | |
| | | __ | | |\ \ | | __|_|_|_|_|_|__
|__| |_| |_| |_| \__\ |_| |_______________|
-+- Datapac, PADS, and X.25 -+-
Ok, to start off, Datapac is a network with dialups ONLY in Canada
(a dialup is the number you call to get into the network eg. 687-1115) that
has all sorts of neat little services you can screw around with. After you
connect you type two periods and hit return ".. <cr>" and that will tell
Datapac you're their. From here you can enter any valid 8-digit address
to connect to a host systems. An example is "74600268" (a VAX system).
There are thousands of systems connected with Datapac all across Canada.
If you want to get the specifics on Datapac and how it works enter the
address "9160 0086" (no space in between though...) and it will give you
menus and texts of all sorts of things. So what's so special about Dpac?
Well, most of the systems connected to it allow access to other networks
around the world via packet assember/disassembers (PADs). What a PAD does
is group the data into 128 or 256 byte chunks (normally, this can be
changed. Using smaller packet sizes reduces PAD delay but may also cost
the company more money because some networks charge by the packet... but
hey, whatever makes your journey easier). The packet is now transmitted
at speeds ranging from 9600bps to 19200bps (or even faster) to another PAD
where it then takes the data and hands it down to whatever computer
system it's connected to. A PAD allows two computers that have different
baud rates or communication protocals to talk to each other over a long
distance.
Although the systems connected directly to Datapac are located in
Canada you can access any system in the world from it via the X.25 network.
All of the major networks (Telenet, Tymnet, Datapac, ItaPAC, etc..) offer
connections with X.25 as well as many private companies. (I don't wanna
confuse anyone here but I might..). Ok, as I said before, Datapac
connects to host systems by their 8-digit addresses. Now pretend this
8 digit number is like a normal 7 digit phone number (eg. 9344055) without
the area code. To call outside of Datapac (using an X.25 PAD) you must
add the DNIC in front of it. The DNIC (Data Network Identification Code)
is kind of like an areacode for networks. It tells Datapac the area of
the world and which network inside it, that you're calling to. Currently
Datapac connects DIRECTLY to the U.S. packet switching networks (PSN's) of
SprintNet, BT Tymnet, AT&T Accunet, Fedex, Net Express and Western Union.
Also, through Teleglobe Canada it can connect to more than 100 networks
throughout the world. So now you know what a NUA is (well... kinda). A
NUA (Network User Address) has been conformed to X.121 standards (what's
X.121? It's the standard set by Study Group 7 of the CCITT (International
Telegraph and Telephone Consultative Committee - you don't have to
remember that) that says an NUA takes the form of a 4 to 14 digit number
with the first four digits being the DNIC. In this manner X.121 ensures
unique addresses for all data terminal equipment in the world. Another
thing that you don't need to know is X.75 which defines the signalling
system between to PSN's, but can basically be defined as a network to
network interface (makes sure both networks are talking in the same
"language" so to speak). Ok got all that? Remember it for the test on
Friday (hohoho 8-) I'm just tellin yah how things work in case anyone
actually cares. Quick review:
X.121 - standard of how NUA's are made up
X.75 - network to network interface (the "language")
Sooo... an NUA is like this:
(1) (DNIC) (FOREIGN ADDRESS)
: : :
One defines the Datapac International.: : :
Prefix (tells Dpac yur callin outside : :
of the network) : :
: :
Packet networks are identified by a ........: :
four digit number called a DNIC :
(data network identification code) :
:
The foreign national address is .......................:
expressed as an eight to ten digit
address.
Also, as I stated before, when in Dpac you can change the packet size, but
when calling internationally the packet must be 128 characters. You
cannot change this. Ok, an example NUA is QSD:
1 2080 57040540
: : :
: : :
Identifies international..: : :
call (1) : :...this is the address within
: Transpac - the host system you're
DNIC: 2080 - identifier for..: connecting to.
the network TRANSPAC in
France - the network your
connecting to
Note: every PSN has a DNIC. Datapac's is "3020" so if you lived in
Italy and hooked up to ItaPAC and wanted to call a VAX at 12345678
connected with Datapac the NUA would be 1302012345678. Easy eh?
So what's so great about all this? Well just think, if there's
some tiny little company with a little desktop computer in the basement
of some small building in Japan, you can connect with it if it's hooked
up to a packet switching network, or even if it's hooked up to a LAN
(local area network) providing the LAN server is connected with a PSN.
Also, unlike placing a normal phone call with which you can only be
connected to one place per line, X.25 PADs can have multiple lines
(actually, called channels) so sitting on your one line-one modem micro,
you could be connected to five or more mainframes in different countries
around the world simultaneously.
Well now you know a little bit more about about 45% of the hacker
world (the other 45% is codes - 800 services (eg: PBX's) and the remaining
10% is the anarchy bit which I've never really been interested in. Most
people are H/P but their's also the H/P/A (hack/phreak/anarchy) dudez who
spend time trying to construct the atomic bomb from household supplies...
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
______ ______ ______ _________ ________________
| __ | | __ | | ___ \ |___ ___| |________________|
| |__| | | | | | | |__/ / | | | | \ \ / /
| ___| | |__| | | / | | | | \ \/ /
| | | __ | | |\ \ | | __|_|___\__/____
|__| |_| |_| |_| \__\ |_| |________________|
-+- DNIC List -+-
Well seeing as how I babbled on so much the last section about
them, I thought it might be worthwhile to include a DNIC listing because
chances are you'll need it in the future. Soo, straight from Datapac's
Information Service....
DATAPAC INTERNATIONAL IDENTIFICATION CODES (DNIC)
A comprehensive list of the International Packet-Switched networks
which are accessible via the Datapac-Teleglobe gateway is provided
below. It is current as of 1992 06 09.
COUNTRY NETWORK DNIC DIRECTION
------- ------- ---- ---------
ANDORA ANDORPAC 2945 BI-DIR
ANTIGUA AGANET 3443 INCOMING
ARGENTINA ARPAC 7220 BI-DIR
ARPAC 7222 BI-DIR
AUSTRIA DATEX-P 2322 BI-DIR
DATEX-P TTX 2323 BI-DIR
RA 2329 BI-DIR
AUSTRALIA AUSTPAC 5052 BI-DIR
OTC DATA ACCESS 5053 BI-DIR
AUSTPAC 5054 BI-DIR
BAHAMAS BATELCO 3640 BI-DIR
BAHRAIN BAHNET 4263 BI-DIR
BARBADOS IDAS 3423 BI-DIR
BELGIUM DCS 2062 BI-DIR
DCS 2068 BI-DIR
DCS 2069 BI-DIR
BELIZE BTLDATAPAVC 7020 BI-DIR
BERMUDA BERMUDANET 3503 BI-DIR
BRAZIL INTERDATA 7240 BI-DIR
RENPAC 7241 BI-DIR
RENPAC 7248 INCOMING
RENPAC 7249 INCOMING
BULGARIA BULPAC 2841 BI-DIR
CAMEROON CAMPAC 6242 BI-DIR
CAYMAN ISLANDS IDAS 3463 BI-DIR
CHAD CHAD 6222 BI-DIR
CHILE ENTEL 7302 BI-DIR
CHILE-PAC 7303 INCOMING
VTRNET 7305 BI-DIR
ENTEL 7300 INCOMING
CHINA PTELCOM 4600 BI-DIR
COLOMBIA COLDAPAQ 7322 BI-DIR
COSTA RICA RACSAPAC 7120 BI-DIR
RACSAPAC 7122 BI-DIR
RACSAPAC 7128 BI-DIR
RACSAPAC 7129 BI-DIR
CYPRUS CYTAPAC 2802 BI-DIR
CYTAPAC 2807 BI-DIR
CYTAPAC 2808 BI-DIR
CYTAPAC 2809 BI-DIR
DENMARK DATAPAK 2382 BI-DIR
DATAPAK 2383 BI-DIR
DJIBOUTI STIPAC 6382 BI-DIR
DOMINICAN REP. UDTS-I 3701 INCOMING
ESTONIA ESTONIA 2506 BI-DIR
EGYPT ARENTO 6020 BI-DIR
FIJI FIJPAC 5420 BI-DIR
FINLAND DATAPAK 2441 BI-DIR
DATAPAK 2442 BI-DIR
DATAPAK 9358 BI-DIR
DIGIPAK 2443 BI-DIR
FRANCE TRANSPAC 2080 BI-DIR
NTI 2081 BI-DIR
TRANSPAC 2089 BI-DIR
TRANSPAC 9330 INCOMING
TRANSPAC 9331 INCOMING
TRANSPAC 9332 INCOMING
TRANSPAC 9333 INCOMING
TRANSPAC 9334 INCOMING
TRANSPAC 9335 INCOMING
TRANSPAC 9336 INCOMING
TRANSPAC 9337 INCOMING
TRANSPAC 9338 INCOMING
TRANSPAC 9339 INCOMING
FR ANTILLIES TRANSPAC 2080 BI-DIR
FR GUIANA TRANSPAC 2080 BI-DIR
FR POLYNESIA TOMPAC 5470 BI-DIR
GABON GABONPAC 6282 BI-DIR
GERMANY F.R. DATEX-P 2624 BI-DIR
DATEX-C 2627 BI-DIR
GREECE HELPAK 2022 BI-DIR
HELLASPAC 2023 BI-DIR
GREENLAND KANUPAX 2901 BI-DIR
GUAM LSDS-RCA 5350 BI-DIR
PACNET 5351 BI-DIR
GUATEMALA GUATEL 7040 INCOMING
MAYAPAC 7042 INCOMING
GUATEL 7043 INCOMING
HONDURAS HONDUTEL 7080 INCOMING
HONDUTEL 7082 BI-DIR
HONDUTEL 7089 BI-DIR
HONG KONG INTELPAK 4542 BI-DIR
DATAPAK 4545 BI-DIR
INET HK 4546 BI-DIR
HUNGARY DATEX-P 2160 BI-DIR
DATEX-P 2161 BI-DIR
ICELAND ICEPAK 2740 BI-DIR
INDIA GPSS 4042 BI-DIR
INDONESIA SKDP 5101 BI-DIR
IRELAND EIRPAC 2721 BI-DIR
EIRPAC 2724 BI-DIR
ISRAEL ISRANET 4251 BI-DIR
ITALY DARDO 2222 BI-DIR
ITAPAC 2227 BI-DIR
IVORY COAST SYTRANPAC 6122 BI-DIR
JAMAICA JAMINTEL 3380 INCOMING
JAPAN GLOBALNET 4400 BI-DIR
DDX 4401 BI-DIR
NIS-NET 4406 BI-DIR
VENUS-P 4408 BI-DIR
VENUS-P 9955 INCOMIMG
VENUS-C 4409 BI-DIR
VENUS-C 4410 BI-DIR
KENYA KENPAC 6390 BI-DIR
KOREA REP HINET-P 4500 BI-DIR
DACOM-NET 4501 BI-DIR
DNS 4503 BI-DIR
KUWAIT BAHNET 4263 BI-DIR
LEBANON SODETEL 4155 BI-DIR
LIBANPAC 4150 BI-DIR
LUXEMBOURG LUXPAC 2704 BI-DIR
LUXPAC 2709 BI-DIR
MACAU MACAUPAC 4550 BI-DIR
MADAGASCAR INFOPAC 6460 BI-DIR
MALAYSIA MAYPAC 5021 BI-DIR
MAURITIUS MAURIDATA 6170 BI-DIR
MEXICO TELEPAC 3340 BI-DIR
MOROCCO MOROCCO 6040 BI-DIR
MOZAMBIQUE COMPAC 6435 BI-DIR
NETHERLANDS DATANET-1 2040 BI-DIR
DATANET-1 2041 BI-DIR
DABAS 2044 BI-DIR
DATANET-1 2049 BI-DIR
N. MARIANAS PACNET 5351 BI-DIR
NEW CALEDONIA TOMPAC 5460 BI-DIR
NEW ZEALAND PACNET 5301 BI-DIR
NIGER NIGERPAC 6142 BI-DIR
NORWAY DATAPAC TTX 2421 BI-DIR
DATAPAK 2422 BI-DIR
DATAPAC 2423 BI-DIR
PAKISTAN PSDS 4100 BI-DIR
PANAMA INTELPAQ 7141 BI-DIR
INTELPAQ 7142 BI-DIR
PARAQUAY ANTELPAC 7447 INCOMING
PERU DICOTEL 7160 BI-DIR
PHILIPPINES CAPWIRE 5150 INCOMING
CAPWIRE 5151 BI-DIR
PGC 5152 BI-DIR
GMCR 5154 BI-DIR
ETPI 5156 BI-DIR
PORTUGAL TELEPAC 2680 BI-DIR
SABD 2682 BI-DIR
PUERTO RICO UDTS 3300 BI-DIR
UDTS 3301 BI-DIR
QATAR DOHPAC 4271 BI-DIR
REUNION (FR) TRANSPAC 2080 BI-DIR
RWANDA RWANDA 6352 BI-DIR
SAN MARINO X-NET 2922 BI-DIR
SAUDI ARABIA ALWASEED 4201 BI-DIR
SENEGAL SENPAC 6081 BI-DIR
SEYCHELLES INFOLINK 6331 BI-DIR
SINGAPORE TELEPAC 5252 BI-DIR
TELEPAC 5258 BI-DIR
SOLOMON ISLANDS DATANET 5400 BI-DIR
SOUTH AFRICA SAPONET 6550 BI-DIR
SAPONET 6551 BI-DIR
SAPONET 6559 BI-DIR
SRI-LANKA DATANET 4132 BI-DIR
SPAIN TIDA 2141 BI-DIR
IBERPAC 2145 BI-DIR
SWEDEN DATAPAK TTX 2401 BI-DIR
DATAPAK-2 2403 BI-DIR
DATAPAK-2 2407 BI-DIR
SWITZERLAND TELEPAC 2284 BI-DIR
TELEPAC 2285 BI-DIR
TELEPAC 2289 BI-DIR
TAIWAN PACNET 4872 BI-DIR
PACNET 4873 BI-DIR
UDAS 4877 BI-DIR
TCHECOSLOVAKA DATEX-P 2301 BI-DIR
THAILAND THAIPAC 5200 BI-DIR
IDAR 5201 BI-DIR
TONGA DATAPAK 5390 BI-DIR
TOGOLESE REP. TOGOPAC 6152 BI-DIR
TORTOLA IDAS 3483 INCOMING
TRINIDAD DATANETT 3745 BI-DIR
TEXTET 3740 BI-DIR
TUNISIA RED25 6050 BI-DIR
TURKEY TURPAC 2862 BI-DIR
TURPAC 2863 BI-DIR
TURKS&CAICOS IDAS 3763 INCOMING
U ARAB EMIRATES EMDAN 4241 BI-DIR
EMDAN 4243 BI-DIR
TEDAS 4310 INCOMING
URUGUAY URUPAC 7482 BI-DIR
URUPAC 7489 BI-DIR
USSR IASNET 2502 BI-DIR
U.S. VIRGIN I UDTS 3320 BI-DIR
U. KINGDOM IPSS-BTI 2341 BI-DIR
PSS-BT 2342 BI-DIR
GNS-BT 2343 BI-DIR
MERCURY 2350 BI-DIR
MERCURY 2351 BI-DIR
HULL 2352 BI-DIR
VENEZUELA VENEXPAQ 7342 BI-DIR
YUGOSLAVIA YUGOPAC 2201 BI-DIR
ZIMBABWE ZIMNET 6482 BI-DIR
(As you can see there's a LOT of different networks around the world!)
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
______ ______ ______ _________ __________
| __ | | __ | | ___ \ |___ ___| |__________|
| |__| | | | | | | |__/ / | | \ \ / /
| ___| | |__| | | / | | \ \/ /
| | | __ | | |\ \ | | ___\__/___
|__| |_| |_| |_| \__\ |_| |__________|
-+- NUA Extract -+-
There are tens of thousands of NUAs around the world so I'm not
going to list them all obviously (the list alone would takes megs of
space). I'll just take a few from PHrack issue #27 (vol.3) so you can
have a looksee of what's out there. THESE HAVE NOT BEEN TESTED and they
may be out of service by the time you try them out, but chances are
they'll still be there:
DNIC
\ /
\/
2062 22 101 2 ? Ministry of economic affairs
2080 57 040 540 QSD (Chat system)
2284 621100102 Cigy DEC1091
2284 6411010 DM DATAMAIL (RSAG)
2284 681140592 Princeton University High Energy Physics
Group Vax 11/750
2284 681140593 University of Michigan Physics Vax 11/750
2284 681140596 N.U. Physics Vax 11/750
2284 681140597 Harvard University High Energy Physics Lab.
Vax 8650
2342 19200190 INFOLINE PERGAMON INFOLINE LTD. (NFS)
2342 19200203 IPSH SHARP, I. P. ASSOCIATES LTD.
2342 19200220 BRITISH LIBRARY ON-LINE SYSTEM
2342 19200222 BLAISE British Library Information System
2342 22236236 UWIST University of Wales
2342 22339399 CAMBRID Cambridge University (Phoenix)
2342 22530303 SWURCC South-West Universities
2342 2253030388 SWURCC South-West Universities Network
2342 23519111 AERE Atomic Energy Research Establishment at
Harwell
2343 07813 EUROINFO Euronet Diane Information Service
2442 03008 HELVA High Energy Physics Vax 11/750
2442 03017 U of Technology DEC-20
2442 31006 Technical University of Tampere VAX
2624 5241040149 Aachener + Muenchener Versicherung
2624 5241090528 rmi-aachen
2624 5241090832 RMI Datentechnik Aachen
2624 5243340307 OPTEL (Ruehlemann-Box)
2624 5246190509 Kfz Juelich
2624 5271040240 Uni Siegen, FB Physik (VAX 11/750)
2624 5293140196 Handwerkskammer (HWK) Arnsberg
2624 530000414 GFC-AG
2624 5611090322 American Express
2624 5611090347 American Express
3106 000323 TRW Defence & Space Systems Group
3106 000401 TMCS Public Network
3106 000633 Public TYMNET/TRWNET Interlink
3106 00157878 BIX
3106 001659 BYTE Information Exchange (GUEST,GUEST)
3106 001663 People Link
3106 001819 TMCS Public Network
3106 001828 FRX Faifax Outdial Host (Tymnet)
3106 001864 SUNGARDS Central Computer Facility Network
3106 002677 The New York Times
3106 0057878 BIX
3106 00584401 Washington Post
3110 21200315 Outdial 300 bps (Area 212)
3110 21200316 Outdial 1200 bps (Area 212)
3110 21200412 Outdial 2400 bps (Area 212)
3110 2120041200 New York City Outdial (Area 212)
3110 21300029 TRW Defence & Space Systems Group
3110 3010002000 NLM National Library of Medicine
3110 3010002400 The Source
3110 500061 Nuclear Research
3110 608016630 University of Wisconsin
3110 609004200 Dow-Jones
3110 6120002500 Honeywell Inform Services Datanetwork
3110 6170013700 Masachusetts Institute of Technology
3110 6170013800 Masachusetts Institute of Technology
3110 6170013900 Masachusetts Institute of Technology
3110 6170014000 Masachusetts Institute of Technology
3110 6170127500 Masachusetts Institute of Technology
3110 6170139000 Masachusetts Institute of Technology
3110 6170140300 Masachusetts Institute of Technology
3110 61703088 Delphi
3110 61900050 California Outdial 1200 bps (Area 619)
3110 7030002000 Litton Computer Services
3110 7030002100 American Management Systems
5052 82620000 VAX in Sidney, Australia
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
______ ______ ______ _________ ________________
| __ | | __ | | ___ \ |___ ___| |________________|
| |__| | | | | | | |__/ / | | \ \ / / | |
| ___| | |__| | | / | | \ \/ / | |
| | | __ | | |\ \ | | ___\__/____|_|__
|__| |_| |_| |_| \__\ |_| |________________|
-+- Questions & Answers -+-
A lot of people think they shouldn't bother asking a question
because it's stupid, or it might make them look like a beginner. Well
without an answer to your question you'll ALWAYS be a beginner. I will
answer _any_ question no matter how small it may seem and if I can't give
an answer to it I'll find someone who can. I've been in the h/p scene for
a couple of years now and there's still LOTS of stuff I have no clue about.
H/Ping goes into all corners of the computer world and other forms of
electronics and there's no WAY someone can know everything about all of it.
Most people just stick to one party of h/ping and specialize their. I've
seen people that know the operating system to VAX/VMS inside out but they
don't have a clue as to how a PBX works. I also know people who can hack
out VMB's in a minute but have never heard of an outdial. Don't think
that all hack/phreaks know everything about everything cause they don't.
I've got loads of technical journals at hand so I can look up and give a
detailed answer on almost anything if you want one. If you want me to
explain somethings step-by-step I'll do that too. Ask and you shall
recieve. So you ask "why am I being such a nice guy?" Well as I said
before, the amount of phreaks in Niagara are VERY few and I want to expand
people's knowledge in the area. When more people are learning, I won't be
the only one answering questions. One more thing, not all answers in this
section will be from me. In this issue they are but in future issues I'll
be taking extracts from other hack philes and from other BBS's.
Ok, hours after I released the first ICE H/P Handbook I had
feedback waiting for me on my board. That's great. The more the merrier.
If you have a question (L)eave Feedback to me on my BBS: 416-934-4055 (no,
you don't have to be a member to do this... guests can leave feedback as
well).
[QUESTION #1 from Darkwing Duck]:
Ok, umm, I've read MOST of your H/P book (I'm on line 512 now). What I'd
like to know is about Datapac. When I call and look around is this illegal
(stupid question), ok, but can I get caught?
--------------------------------------------------------------------------
No, it's not a stupid question. When I first started out the
major thing that worried me and kept me from trying new things was getting
caught. Datapac is a public service, and if you're just snooping around
not causing any harm, you won't get into trouble. I have *heard* stories
of some people getting into dung for scanning Datapac, but myself as well
as other members of ICE and other people I know have been scanning Datapac
extensively for a _long_ time and nothing has every happened to me or them.
Remember, Datapac is a huge network that goes all across Canada and also
accepts calls from overseas. It has hundreds of dialups over the country.
This allows for thousands of people to be accessing it simultaneously.
Datapac doesn't have the time, money (well, maybe), or manpower to moniter
the doings of every user connected to it.
[QUESTION #2 from Darkwing Duck]:
I'd like to call some LD BBS's (preferably h/p or pirate boards),
using the 800 services, now, can I get caught?
--------------------------------------------------------------------------
Most (I'd say about 95%) of the codes you hear being spread around
H/P BBS's, VMB's etc.. are safe to use. If they're not, the person who
posted it will say so. There has been problems with some 950 services
doing random traces in the past and some services have even posted fake
FBI warnings (remember, the FBI is an AMERICAN agency... they're not going
to go after people in Canada when they've got enough work to do in their
own country. And as for the RCMP computer crime unit... they're a little
bit behind the times). There's so many people using these ways to call LD
for free at the same time that it's impossible to do traces of all of them.
Of course if someone uses this 800 service to call a long distance computer
somewhere else, and goes in and destroys that system, well of course that
will increase the chance of getting caught. But if you're using them to
call BBS's you're safe.
[QUESTION #3 from Anonymous]:
I'm not quite sure of what the point of using a Datapac is. Is it
to call networks and not get caught?
--------------------------------------------------------------------------
Well first, Datapac _is_ a network. From it you can also connect
to other networks though. Their are a number of reasons of using it.
For one, most of the systems connected with it have PAD (Packet
Assembler/Disassembler) software, which allows you to call other systems
around the world via their NUA (network user address). The advantages of
using a PAD to call out from Datapac, is that you get a crystal-clear
connection: no line noise. PADs allow two remote systems to talk to each
other even though they may be connected at different baud rates or using
different protocals. Transmissions between PADs in networks zip around at
speeds of 9600-19200 baud (even though you may be calling on a 1200 or 2400
baud modem, the modems in the network are going at light speed) and have
built in error correcting protocals. Also, once you connect to Datapac you
have access to other networks: Telenet, Tymnet, ItaPAC, JANET, SBDN,
PandaNet, THENet, and a whole host of others. All of which have thousands
of separate systems connected to them.
[QUESTION #4 from Darkwing Duck]:
When using 800 services, am I SUPPOSED to watch out for 950's and
PBX's?
--------------------------------------------------------------------------
No. 950's and PBX's are WATS (Wide Area Telecommunications Service)
and this is what people use to call ld for free. If you hear of a 950 use
it unless you hear otherwise. Or if you're still unsure, call through a
diverter (a diverter is an 800 service that allows people to call other
800 numbers outside of their calling area).
[QUESTION #5 from Darkwing Duck]:
Using Datapac, I call out to lets say Air Canada (an example from
the handbook). Now, I connect, then I'm trying to break in (no I KNOW this
is illegal) but what are the chances of me getting caught?
--------------------------------------------------------------------------
Well I've been into bigger places than Air Canada even after
hacking for hours, and still haven't been caught or warned or anything.
Even though a system might keep track of unsuccessful login attempts, it
won't say where those attempts were made from. Companies generally won't
start running traces unless they really feel threatened by the possible
intruder. Systems are hacked on all the time so it wouldn't be practible
for the company to start ordering the phone company to trace every time a
new hacker came along. So in other words, I wouldn't worry about getting
caught. But, if by some odd chance someone DID call you or anything, you
just say someone told you it was a private bbs system and you forgot what
the login/password was or something. Just play dumb.
[QUESTION #6 from The Unit]:
Can you explain a few more things in a little more detail for me?
Like, in the h/p message sections, they were talking about codes to dial
out ld, what exactically do they mean when they write " +code+#### " stuff
like that (put numbers in for #)
--------------------------------------------------------------------------
Ok, most of the time when someone posts a long distance service it
will be something like (example):
1-800-123-4567+09+acn
or even 8/123-4567+09+acn
If you seem something with 8/ that means it's a 1-800 (we're just too lazy
to type 1-800 I guess)... "09" would be what you enter to get to the other
line that lets you dial out (when calling 800 services you call on one
line to get to it (an INWATS) and then once it answers you have to type in
a code that will switch you to the line that lets dial out (an OUTWATS).
BTW: a WATS is a "Wide Area Telecommunications Service". So you'd call up
1-800-123-4567 on you're trusty TOUCHTONE phone (if you've got only a
pulse phone you might as well not even be reading this file) then once you
hear it answer you will usually either hear a recording or it will go
right to another dialtone. This is where you enter "09" and then it will
either go from the recording to a dialtone or just stay at a dialtone if
it already was. Now you enter your ACN. An ACN is Area Code Number (eg:
416-934-4055). Alot of the time it will say 1+acn because the 1 is
required to call long distance. It depends on the service. Also,
whenever you see a code posted and the "+" are in it.. all the plus signs
mean is "wait for something and then enter the next thing". Sometimes you
may get some huge code like 8/123-4567+1+09+acn+code or something like
that where you're required to call the 800 number, enter a number, wait
for something (either a message to end or a beep, or whatever) then enter
another number or set of numbers, then the areacode number you wanna call,
then a code (which of course was already hacked out by either yourself or
another phreak).
Other times you'll see something like: 800-123-4567+5dig+acn and
that means the code consists of 5 digits but nothing has been hacked out
yet (so if you've got time work on it). OR, you're see some that have a
template like (I'll give an example of a 7 digit code):
800-123-4567 536xxxx
which means that someone has found a lot of codes on it with the first
numbers being "536". A lot of companies put their codes in groups. MOST
long distance services WILL require a code of a sort which will range
anywhere from 3 digits (easy to hack out) to 9 digits (very hard without a
template).
[QUESTION #7 from Iron Fist]:
People have explained what a pad is but I'm still not too sure. I
know you use them in networks but how?
--------------------------------------------------------------------------
When you're connected to a host system on a network (say a PRIME
system for example), chances are that system will have a packet
assembler/disassembler connected to it. This isn't a piece of hardware or
something you can see. It's a program (on Primos computers this program
is called "Netlink", on VAX's you can use the "set host" command) that
assembles data into packets of 128 or 256 byte chunks. The program then
sends it to a 9600-19200 baud modem that is connected with another system.
From here it goes to the other system, who's pad software disassembles the
packet. Say you're connected to a university in England and it displays
the prompt "Hit 'C' to Continue". You hit "C". It goes from your
computer, to the packet switching network your connected to (eg: Datapac)
to the host system your connected to, is put into a 128 or 256 byte
packet, is sent through the fone lines via the X.25 network to the other
computer you're connected to.
Ok, that's great but how do you actually place a call? Well, when
you're at the PAD prompt (which can be anything eg: "DevelNet X.25:" or
what Netlink uses which is just a "@" symbol) enter either "?" or "help"
to get a list of commands. Usually the command to call out is "c" but
this can vary according to the program. The format of the NUA can also
vary. If I'm calling QSD in France (NUA: 208057040540) from a Prime
computer the command would be "c 12080:57040540". The Netlink program
demands a colon after the DNIC. But the most common format is c+1+nua.
[QUESTION #8 from Iron Fist]:
How do I get a list of VMB's or NUA's that are valid (current)?
--------------------------------------------------------------------------
The best way to get an up to date list of anything is your
favorite hack/phreak BBS. Or, if you have a VMB that you call, there.
[QUESTION #9 from Anonymous]:
What is the best computer to hack with? I only have a 64 but can
I still do all the same stuff as other people?
--------------------------------------------------------------------------
Some of the best hacking/scanning programs are for the C-64 and
some of the best h/p BBS's are run on the Commie. One that used to be
good (haven't called in awhile) is Meltdown in Hamilton/Ontario at
416-648-8175 (12-24oo baud).
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
______ ______ ______ _________ ____________________
| __ | | __ | | ___ \ |___ ___| |____________________|
| |__| | | | | | | |__/ / | | \ \ / / | | | |
| ___| | |__| | | / | | \ \/ / | | | |
| | | __ | | |\ \ | | ___\__/____|_|_|_|__
|__| |_| |_| |_| \__\ |_| |____________________|
-+- End of Transmission -+-
Well this one took a little longer than I had wanted (a whole 2
days - but those were 2 days of nonstop writing). I'm hoping someone else
will write something in the next issue. I'm going to ask Technazz to do
an article on something but he's a buzy person, so if *anyone* wants to
write in this just tell me. It can be something that's only a paragraph
if yah want. Anything. What I don't have too much knowledge on is other
networks (Tymnet, Telenet, etc..) so if someone wants to do something on
that...
Ok, well keep the questions comming to me cause it's easier for me
to talk about stuff that way. Call ICE HQ at [416] 934-4055 and (L)eave
Feedback. You don't even have to be a registered user to do that so call
call call. Tell me what you think about these "hackbooks" and what you
wanna see in 'em (or don't wanna see in 'em for that matter).
What to look for in the next release? Hmmm... I'm not even sure
yet. I think I'll release a tech journal compilation with extracts from
PHrack, PHun, and LoD/H. Maybe type out a few newspaper articles lying
around, who knows. Oh well, I'll have more of an idea when people leave
me some feedback. Where can I (and other ICE members) be contacted?
PSYCHIATRIC CYBERHELL BBS (ICE WHQ): 416-934-4055 [12/2400bps]
Currently the only H/P supporting BBS in Niagara (and even if
there was another it'd still be the best! ehehhe).. and here's how I can
be contacted internationally:
..aah the suffering - the sweet suffering...
Contact Liquid Jesus of ICE/Nightbreed globally:
*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+
InterNet/UUCP........
[email protected]
Canada............... ICE WHQ: (416)934-4055, (416)934-6795
United States........ Town Town BBS (Paradise USA HQ): (414)781-3218
France (direct)...... +33 36431515 (type "THELINE") mailbox name: ICE92
France (via X.25).... 208057040540 (mailbox name: ICE92)
Switzerland.(direct). +41 (0)71 715577 (10 lines) (username: Liquid_Jesus)
Switzerland (X.25)... 228475212574 (Same as above)
Iceland (direct)..... 354-1-78099, 670990
Iceland (X.25)....... 274011991000 (username: AmiPhreak)
Iceland via X.25..... 274011991000
*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+
Thanx to... Mentor(LOD/H), TAP Online, DIS
