-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Chaos Inc - PBX Hacking Part I -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Written by : Instinct 05/20/90 This File will Contain basic methods of finding, hacking, and using PBX's. I will not assume any liability written in this text file, in other words, it is for INFORMATION purposes only. Ok, as phreaking continues to become more of a hazard, Safer ways of obtaining 'free' calls are highly sought after. A While back, a friend of mine gave me a PBX, and it has lasted ever since. But the more I used it, the more I wanted others, "Just in case" , therefore, I created My own method of finding, hacking, and using various other PBX's (Private Branch eXchange) A PBX quite simply, is a company owned 'Service' that allows Employee's or anyone with the correct code, to call Long Distance and speak with others as far away as China. These PBX's generally do not contain anything like ANI, or tracing methods, so they are more the likely safer then hacking codes. PBX's serve other purposes such as to allow intra-building paging and PA system use. Finding the codes to access the PA system can be fun/useful too. Some owner's pay a flat fee for the PBX because of the sheer number of legitimate calls made on the services by employees. This is great for the PBX hacker, because this means they are less likely to be caught or have any CLID or ANI services on the line. The Set-Up - You're gonna need for this - (1) Phone Book (1) CPU (1) Scanner Program (FHacker) (1) Hacking Program (Code Thief) (1) Telefone - for Information (411) The Approach - Larger Companies (such as IBM, NEC, USR) are more Then likely the targets which you will want to hit. Open your phone book places like 'IBM' and 'NEC' etc, until you find a listing of their different services, such as Billing Information, Repair, Support, etc. Once finding these, list them, and find which Digits are occuring the most (like is repair was 777-2345, and information was 777-8375). In that example, their PBX Would probably be on the '777' Number. Scanning - The Next thing you wanna do, is load up your scanner and when it asks you for the random `Template' Put something to the effect of '777-XXXX'. Start scanning, and keep a record of 'Tones' you get (That's right, they don't produce carriers, therefore you must MANUALLY listen, and record them). After Acquiring a sufficient number of tones, go to you code hacker. Hacking - This takes about 10 minutes to perfect. Enter the number in the set-up, when it asks for time between dialing, and inputting the code, experiment with 1, then 2, etc. once you get that right, it'll ask you for the 'code length'. When you get to this part, it is easiest to try 4 first, then 5, etc. Companies will generally only have 6 digit codes on their PBX. After putting in the code, PBX's will usually have a digit to get an outgoing line on. Most use '9', but I'm sure it can differ. After finding which one produces a '2nd tone' that's all you need . Next set your hacking time, attempts, etc. Using the PBX - This is the most tedious part of using a PBX. You're Going to need a macro, in the macro, put something to the effect of 'ATDT PBXHERE,,,,CODE,9, . After doing this, you can look LEGIT to your parents, by entering the Board numbers as such 1(XXX)XXX-XXXX. No need in having those little +'s, or !'s. Now, you MUST have a telephone hooked up with your Modem. Hit the macro, the modem will dial, and the code will go, etc. While it is doing this, Pick up the phone, when it is done spewing out the last digit (the 9), Hit return (to disconnect it) and immmediately dial your destination. The PBX I use gives you roughly 4 seconds to dial after pressing 9. (Look for a PBX scanner from Chaos Inc in the near future) Closing - Enjoy the file, it is easy to understand, easy to do, and was VERY fun to write. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Chaos Inc - 199O -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- The Boards - Solsbury Hill The Iron Curtain Ends of Sanity Infinite Intoxication The Late-Night Prowl The Rocky Mts. The Metal's Edge