HACK AND PHREAK
                               =-=-=-=-=-=-=-=
                                   FILE #5

                                BY: THE HYAENA

                      P/C/P -- PERFECTLY CRUMMY PIRATES

          NO PARTICULAR NAME ][   416-480-1377   9600 BAUD   50 MEGS
          PANDEMONIUM GS          416-273-7619   9600 BAUD   60 MEGS


PLEASE BE CAREFUL WHO YOU GIVE THIS FILE TOO...

HACKING CAN BE DESCRIBED IN A NUMBER OF WAYS SUCH AS...
1) THE PROCESS OF ATTEMPTING TO OBTAIN AN ILLEGAL PASSWORD ON A FORIEGN
COMPUTER SYSTEM.
2) THE PROCESS OF ATTEMPTING TO OBTAIN ILLEGAL ACCESS CODES TO LONG DISTANCE
SERVICES THROUGH THE COMPUTER.

HERE ARE SOME GENERAL HACKING TIPS THAT YOU, THE HACKER, SHOULD KEEP IN MIND.
--USING THE SAME CODE FOR MANY CALLS AND OVER TWO WEEKS LONG IS HAZARDOUS TO
YOUR HEALTH.
--BE CAREFUL!  IT PAYS TO BE CAUTIOS.
--ALL OF MY HACK AND PHREAK FILES ARE FOR EXPERTS AND EXPERIENCED HACKERS
ONLY, THEY ARE NOT FOR BEGINNERS.  IF YOU DON'T KNOW WHAT YOU ARE DOING, YOU
CAN GET INTO A LOT OF TROUBLE, SO DO NOT ATTEMPT TO USE THESE FILES IF YOU DO
NOT UNDERSTAND THEM.
--TO DETERMINE THE SERVICE FORMAT, YOU'LL HAVE TO DIAL THE NUMBER UP SEVERAL
TIMES YOURSELF, AND EXPERIMENT WITH IT.  TIME THE DELAYS, WRITE DOWN THE
NUMBER OF DIGITS YOU DIALED, THE RESPONSES, ETC.  IT'S ALL IMPORTANT.  ALWAYS
HAVE THE SPEAKER ON WHEN ATTEMPTING ANYTHING FOR THE FIRST TIME.
--A BIT OF SCANNING CAN DO A WORLD OF GOOD, ESPECIALLY WHEN LOOKING FOR
MULTI-PORTS.  SCAN NEAR THE ORIGINAL PORT NUMBER YOU HAVE, BY HAND OR OTHER
METHOD.
--SOMETIMES A LOCAL CARRIER NUMBER WILL GET THROUGH A LOT FASTER THAN A LONG
DISTANCE CARRIER NUMBER.  TRY BOTH AND WRITE DOWN THE AMOUNT OF TIME IT TAKES
FOR THE CALL TO GO THROUGH, FROM THE MOMENT THE LAST DIGIT IS DIALED, TO UNTIL
IT GIVES YOU A CARRIER.  ADD 1 OR 2 TO THE DELAY, AND USE IT (EITHER THE LOCAL
OR THE LONG DISTANCE CARRIER, WHICHEVER ANSWERED THE QUICKEST) AS THE "WAIT
FOR CARRIER DELAY" PLUS THE NUMBER.
--GENERALLY, TO FIGURE OUT THE NUMBER OF DIGITS, YOU CAN DIAL IN 10 DIGITS,
THEN KEEP DIALING A DIGIT AND COUNT UNTIL IT STOPS YOU.  THE NUMBER YOU DIALED
AFTER THE 10 IS THE DIGITS.  I SHOULD LET YOU KNOW THAT THIS DOESN'T ALWAYS
WORK.
--YOU CAN ALWAYS USE 800 AND 950 CODES AT PAYPHONES.
--THERE ARE CERTAIN NUMBERS THAT CAN SUPPOSEDLY TELL YOU IF YOU ARE BEING
TRACED.  I DON'T KNOW HOW MUCH TRUTH THERE IS TO THIS, BUT IF YOU DO WANT TO
EXPERIMENT WITH THIS, FIRST DIAL A CODE, AND THEN DIAL UP THE FOLLOWING
NUMBERS:  617-890-9900, 415-284-1111, 305-324-3333, OR 213-935-1111.

THERE IS A GENERAL RULE FOR ESTIMATING CODE LENGTHS, SO HERE ARE SOME CODE
LENGTHS OF A FEW SERVICES...

MCI     - 5
SPRINT  - 8
METRO   - 6
SKYLINE - 6
(OTHER) - USUALLY 6

NOW HERE ARE SOME MORE EXTENDERS, THAT I FOUND OUT RECENTLY, THAT ARE NOT
INCLUDED IN THE EXTENDER LIST IN HACK AND PHREAK FILE #2...
1-800-238-1740
1-800-242-1424
1-800-323-3027
1-800-325-7222
1-800-448-8989
1-800-523-3511
1-800-882-2255

NOW HERE'S SOME 950 NUMBERS.  950 NUMBERS ARE VERY SPECIAL NUMBERS, THAT WERE
PLANNED TO BE OUTMODED.  IN GENERAL, 950 NUMBERS ARE REASONABLY SAFE AS FAR AS
I KNOW, AND THEY GIVE EXCEPTIONALLY GOOD CONNECTIONS.  BUT NOT ALL OF THESE
950 NUMBERS CAN BE REACHED FROM ALL AREAS.
ALLNET     950-0444
           950-1044
AT&T       950-0288
SPRINT     950-0777
ITT        950-0488
MCI        950-0222
           950-1022
RCI        950-0211
SKYLINE    950-0888
           950-1088
US-TEL     950-0333
           950-1033
METRO      950-0220
LEXITEL    950-1066

NOW IF YOU WANT TO GET THE LOCAL SPRINT, MCI, ETC. ACCESS NUMBER FOR YOUR
LOCAL AREA CODE, JUST CALL UP ON OF THE BELOW CUSTOMER NUMBERS AND TRICK THEM
INTO GIVING THEM TO YOU.  JUST TELL THEM THAT YOU'RE A BUSINESS MAN ON A TRIP
TO WHERE EVER IT IS THAT YOU ARE GOING (IE. CITY, STATE) AND THAT YOU NEED THE
ACCESS NUMBER TO USE YOUR CODE.  AND ABOVE ALL, SOUND PROFESSIONAL.
ALLNET     1-800-922-8888
AT&T       1-800-222-0300
SPRINT     1-800-521-4949
ITT        1-800-526-3000
MCI        1-800-624-2222
SKYLINE    1-800-235-2001
US-TEL     1-800-527-4105
METRO      1-800-235-5303

AND I HAVEN'T FORGOT ALL YOU PEOPLE WHO LIKE TO HACK COMPUSERVE, HERE ARE A
BUNCH OF COMPUSERVE PORTS.  THIS IS THE MOST RECENT LIST THAT I HAVE MADE, BUT
I WOULD CHECK THEM OUT BEFORE USING THEM, SINCE SOME OF THEIR NUMBERS MAY HAVE
CHANGED.

201-484-2275
203-236-5931
205-879-2280
206-634-1713
207-236-8505
208-384-5660
209-252-1892
212-758-4114
213-591-8392
214-761-9040
215-776-6960
216-867-1237
219-447-0573
301-254-7113
302-652-8732
303-629-5563
304-736-2231
305-771-8074
312-443-1250
313-964-4745
314-241-3101
316-689-8765
317-638-2517
318-424-4460
401-781-8500
402-895-5288
404-237-8113
405-946-4799
408-249-5361
412-391-8818
413-256-8194
414-258-5616
415-961-7242
416-752-4150
501-666-8464
502-581-9526
503-232-1072
504-948-9542
505-345-3631
512-444-7234
513-721-2691
515-270-1581
516-681-7240
517-321-2388
601-982-0463
602-256-2951
603-883-0884
604-687-6043
605-341-4580
606-259-3446
607-772-1225
609-665-6244
612-375-9163
614-457-2105
615-366-1947
617-267-2569
619-487-6648
714-520-9724
702-878-0056
703-352-7500
703-841-9834
713-225-2550
716-458-3460
717-657-9633
801-521-2890
803-762-1740
804-461-6128
805-499-0371
806-763-5081
813-875-0633
814-453-3624
817-870-2461
818-982-1813
901-452-8530
904-246-9961
914-949-4510
915-565-4661
918-749-8801
919-878-8870

OK, I'LL NOW LIST SOME OF THE DIFFERENT TONES THAT BELL USES, AND WHAT THEY
ARE, AND A LITTLE ABOUT THE BOXES ASSOCIATED WITH THEM...

BLUE BOX FREQUENCES:

THESE TONES, WHICH I HAVE PUT IN MATRIX FORM, ARE FOR A BOX WHICH GENERATES
TONES THAT OPERATORS USE TO DIAL.  ROTARY WORKS AS WELL, BUT THIS IS
TECHNOLOGICAL.  FIRST YOU DIAL DIRECTORY ASSISTANCE, OR AN OPERATOR, ETC.
THEN YOU BLAST THE LINE WITH A 2600 HZ TONE.THIS GIVES YOU THE LINE, AND THIS
IS ALSO HOW BELL TRACKS DOWN BLUE BOXERS.  THERE ARE 2600 HZ DETECTOR SYSTEMS,
AND THIS IS EVEN ON OLD #4 CROSSBARS.  ONCE ONE AN OPERATOR TRUNK LINE, YOU
USE YOUR BLUE BOX/ROTARY TDO DIAL.

2600 HZ - USED TO GET ON/OFF TRUNK

AND HERE IS A THE TONES TO USE AFTER 2600 HZ, IN MATRIX FORM
      700  900 1100 1300 1500
 700   1    2    4    7   11
 900   +    3    5    8   12
1100   +    +    6    9   KP
1300   +    +    +   10  KP2
1500   +    +    +    +   ST

USE KP (1500+1100) TO START A CALL AND ST (1500+1500) TO STOP A CALL

USE 2600 HZ TO DISCONNECT.

IT IS ALSO SAID THAT 2600 HZ RESETS SPRINT NODES AND GIVES YOU THEIR INITIAL
TONE.

IF YOU DON'T KNOW WHAT TO CALL FROM AN OPERATOR TRUNK, WELL I'LL INCLUDE THIS
HERE TO HELP YOU OUT...

XXX+101   - TOLL SWITCHING
XXX+121   - LOCAL OPERATOR
XXX+131   - INFORMATION
XXX+141   - RATE & ROUTE
XXX+181   - COIN REFUND OPERATOR
XXX+11501 - MOBILE OPERATOR
XXX+11521 - MOBILE OPERATOR
XXX+11511 - CONFERENCE OPERATOR
BY THE WAY, THESE WILL WORK WITH ROTARY OR OPERATORS TO NES, BUT ONLY ON
OPERATOR TRUNK LR*ZII)X

ALL OF THE TONES MENTIONED SO FAR, DEALING WITH BLUE BOXES ARE CORRECT, BUT I
DIDN'T MENTIONED ANYTHING ABOUT THE TIMING SPECS.  THE TONE PAIRS ARE TO
REMAIN ON FOR 1/10 SECONDS, WITH 1/10 SECONDS OF SILENCE BETWEEN DIGITS.  THE
KP TONES SHOULD BE SENT FOR 2/10 SECONDS.  A WAY TO DEFEAT THE 2600 HZ TRAPS,
IS TO SEND, ALONG WITH THE 2600 HZ, SOME PINK NOISE, WHERE MOST OF THE ENERGY
IN THIS SIGNAL SHOULD BE ABOVE 3000 HZ.  THIS SIGNAL DEAL WON'T MAKE IT OVER
THE TOLL NETWORK, BUT IT SHOULD CARRY AS FAR AS YOUR LOCAL TOLL CENTER.  THIS
SHOULD MAKE IT SO THAT THE TRAPS WON'T FIND PURE 2600 HZ ON THE TRUNK.  THIS
ISN'T TOO SAFE OF A WAY OF BOXING, BUT IT SHOULD SLOW DOWN THE DISCOVERY.
AS FOR THE USE, THE FIRST THING THAT YOU NEED TO UNDERSTAND IS THAT THERE ARE
2 TYPES OF TOLL COMPLETING TRUNKS, INWARD AND OUTWARD.  THESE NAMES ARE
REFERENCE TO THE OFFICE THAT IS SWITCHING THE CALL, OR OTHERWISE KNOWN AS THE
TOLL SENTER THAT SERVES THE WATS LINE THAT YOU CALLED, AND EACH TYPE OF TRUNK
HAS A DIFFERENT CLASS OF SERVICE.  FROM AN INWARD TOLL COMPLETING TRUNK, YOU
CAN REACH THE DIFFERENT SERVICE OPERATORS, THE TOLL TEST BOARD, AND THE INWARD
OPERATOR.  SOME OFFICES ALSO ALLOW REMOTE TESTING AND IT IS IN THESE OFFICES
THAT YOU CAN ACCESS THE OUTWARD TOLL COMPLETING TRUNKS, WHICH ALLOWS YOU TO
MAKE VARIFICATIONS.

RED BOX FREQUENCIES:

1700 HZ AND 2200 HZ MIXED TOGETHER.

A NICKEL IS 66MS ON (1 BEEP).  A DIME IS 66MS ON, 66MS OFF, 66MS ON (2 BEEPS).
A QUARTER IS 33MS ON, 33MS OFF REPEATED 5 TIMES.  MS STANDS FOR MILLISECOND.
FOR THOSE OF YOU THAT DON'T KNOW, A RED BOX SIMULATES MONEY BEING PUT INTO A
PAY PHONE.  YOU MUST PUT IN SOME MONEY FIRST THOUGH, SINCE THE OPERATOR CAN
TELL IF MONEY WAS PUT IN, BUT AS TO HOW MUCH, SHE LETS THE COMPUTER ANSWER
THAT.

TASI LOCKING FREQUENCIES:

TASI, WHICH STANDS FOR TIME ASSIGNMENT SPEECH INTERPOLATION, IS USED ON
SATELITE TRUNKS, AND BASICALLY ALLOWS MORE THAN ONE PERSON TO USE A TRUNK BY
PUTTING THEM ON WHILE THE OTHER PERSON ISN'T TALKING.  BUT OF COURSE YOU WOULD
NEVER HEAR THE OTHER PERSON TALKING ON YOUR TRUNK.
HOWEVER, WHEN YOU START TO TALK, THE TASI SONTROLLER HAS TO FIND AN OPEN TRUNK
FOR YOU.  BECAUSE OF THIS DELAY IN FINDING A TRUNK, SOME OF YOUR SPEACH IS
LOST.  THIS IS CALLED CLIPPING.
NOW, IF YOU WERE TRANSMITTING DATA OVER A TRUNK, CLIPPING WOULD REALLY MESS
UP THE DATA.  SO THERE IS SOMETHING CALLED A TASI LOCKING FREQUENCY, WHICH
KEEPS THE TASI FROM PUTTING ANYONE ELSE ON YOUR TRUNK, OR YOU ON ANYONE ELSE'S
TRUNK.  IN ANY CASE, THE FREQUENCY IS 1850 HZ, AND THIS IS SNED BEFORE THE
TRANSMISSION.

EARLIER TODAY, I WAS DOING SOME INTENSE HACKING, AND I EVENTUALLY OBTAINED A
CERTAIN DATA NUMBER.  IN ADDITION, I OBTAINED THE PASSWORDS, AND OTHER
IMPORTANT DATA FOR A MAJOR WORLD-WIDE COMPANY.  I WON'T MENTION THE COMPANY
NAME, OR THE NUMBER THAT I OBTAINED, SINCE I COULD GET INTO A LOT OF TROUBLE
FOR THIS, AND I PROBABLY WILL.  AS FOR THIS CERTAIN COMPUTER NUMBER, THERE MAY
BE ONLY A FEW THAT KNOW ABOUT IT, IF ANYONE AT ALL.  THIS IS DEFINATELY THE
BIGGEST THING THAT I EVER HACKED.  WELL AS FOR THE NUMBER, I'LL GIVE YOU PART
OF IT...***-***-96**.  WELL THAT'S ALL THAT I CAN SAY ABOUT IT, SINCE I'M NO
FOOL, I DON'T WANT TO SPEND MY YEARS BEHIND BARS.