STATION ID - 7047/3.12 9x Datakit Network FOR OFFICIAL USE ONLY This is a 9x system, restricted to authorized persons and for official 9x business only. Anyone using this system, network or data is subject to being monitored at any time for system administration and for identifying unauthorized users or system misuse. Anyone using this system expressly consents to such monitoring and is advised that any evidence of criminal activity revealed through such monitoring may be provided to law enforcement for prosecution. Building a Modem Diverter and x.25 routes. by Deads0u| -A 9x release.- Introduction. This article is to explain some methods of making your routes through the networks, less traceable(specifically through x.25 networks, as most people only think of going through systems on the internet). Logically, the more networks and systems you pass through, before connecting with your target, uh.., i mean host, the harder it will be for the admin of the host to follow you back through. So, let's begin. Contents. Part 1:The diverter. i. -supplies ii. -instructions iii. -terminal commands iv. -schematics v. -definitions Part 2: x.25 routes i. -Explanation ii. -where to? iii. -DNIC's and systems iv. -examples v. -sources ============================================================================= Part 1:The diverter. A short note:The purpose of the modem diverter is, in essence, to create a homemade outdial. The point is, to phone the outdial, have a modem answer, that connect's you to a different line to phone out of, so they don't trace you to your home line. This won't be the only precaution we will take, it will be much more complex. i. -Supplies. You will need the following parts to properly construct your modem diverter: 1)Two modems(These can be any speed at all, i used a 2400 baud and a 9600 baud that my school through out. But, since the slowest modem is 2400, that is the fastest you will be able to connect, and then dial out of.) 2)A serial cable you will use to connect the two modems together. 3)You need two phone lines, I will go into this later as you cas use pay phones, your neighbors phone, boxes, etc.. 4)Some phone cable probably, you may not need this. 5)Recomended, but not needed, is a beige box. This is to test the lines you will be using to make sure they will work. And also alligator clips, get them at your local rat shack. ii. -Instructions. 1)Hook the serial cable to the ports of each modem. 2)Get a couple feet of phone cable and hook either end into each modem, there should still be an empty port on each modem for another plug as well. 3)Switch one of the modem to dumb mode, and one to smart mode, you will phone the one in dumb mode, which will transfer you to the smart modem to dial out of. 4)You must now find a place to set this up. Here some locations you could choose. If you're in canada, then the phone company is probably ripping out the old centuriums, and putting in the new millenium payphones. If this is happening in your city, you are in luck. Becuase of the phone companys lazyness, they have ripped out 2 old payphones in my town, and have not put in the new ones, so the phone line is still sticking up out of the dirt. I recomend comming back at night, with your modem diverter wrapped up in plastic bags, or a container with some holes for the wires. Now, dig a hole about a foot deep and put the container in, attach one of the phone cord to the wire protruding from the ground, you may need solder for this. But wait, first hook your beige box up to the line, if there's a dial tone you're in business. Phone your home, get some there to be waiting, and pickup, then when you hang up, they press *69 to get the number of the line, you will need this later. Ok, this is but one of the place you can hook it up, you can attach it to your neighbors phone, however they may get a little suspicious. You might try your schools fax line, becuase it's not used as much, it could go months without being noticed. You could open up one of those "green towers", or brown in some areas, and hook the phone line up to one of the screws inside. This is the usual place you would beige box from. 5)Now go home, start up your terminal program, and dial the number of the line you hooked up the diverter to. iii. -Terminal Commands. A short note:Yes you probably know many a terminal commands, but this is for the people who ripped thier modem out of the box, and through out the manual in the excitment of dialing out at 56k. Commands. ATDT555-6789 -this dials the number 555-6789 +++ -disconnects you from the computer you dialed A -answer incoming call H1 -take phone off hook L2 -medium speaker volume here is a chart that helps you set your modem speed: Command | Baud rate | Bell CCITT Mode --------------------------------------------------------- BO 300 v.21 1200 v.22 2400 v.22bis/v.22/bell 212A 4800,9600 v.32 14400 v.32bis 19200,28800,38400 v,FC* 57600,115200 B1 300 Bell 103 1200 Bell 212A iv. -Schematics. Searial Cable----------------| | |-------------------------------| | | |----------| |---------| |_| |_| | | | | |_| |_| <-phone ports ---------------------- ------------------------ | | | | | | | | | | | | | | | | | ---------------- | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | ------------------ | | |---------------| | | | 2400 baud | | | | 9600 baud | | | |----------------| | | |---------------| | | | | | | | \----------------------/ \ / / Phone ports \____________________/ / \ / \ /9600 baud -------------------------------------------------- / | |_| |_| _____________ | / | \___________/ |/ | <> | /2400 baud |________________________________________________| / -------------------------------------------------- / | |_| |_| _____________ | / | \___________/ |/ | <> | |________________________________________________| |`_'| __|__ BEWARE:Watch out for mister lineman.-----> | | _/ \_ (He knows what you are up to) v. -Definitions Baud;a measurement of the speed of data transmission. Carrier;a signal whose properties can be altered to transmit data CCITT;"Consultive Committee for International Telephone and Telegraph" a committee that specifes internation telecomm. standards DCD; Data Carrier Detect DSR; Data Set Ready DTR;Data Terminal Ready Duplex;a char of data trasnmission. full-duplex permits two-way communication.half-duplex permits only one side to transmit at a time. ITU;International Telephone Union Modem;Modulater-demodulter Parity; a form of error checking Serial port;a port on a computer for attacging devices such as modem,printer, cables, etc. Start/stop bits;a signal that defines the beginning and end of a data packet. PSN;Packet Switched Network ----------------------------------------------------------------------------- Part 2:x.25 routes i. -Explanations. The purpose of going through at least two x.25 networks is to become untraceable. While it is impossible to become 100% untraceable, this will help you out. There are many x.25 networks out there, SpirntNet, Tymnet, and datapac to name a few, almost every country has them, and they are easy to use. The point is to not only use x.25 networks, but the modem diverter, shell accounts, andonymous wingates, or guest account that you can telnet out of. ii. -Where to? Depending on where the system is you are targeting, you may use a different route each time. Let's say, you want to connect to this system:1302033401455. This is a Dynix system on datapac.3020 is the DNIC for datapac. And 33401455 is the NUA. Ok, let's assume you have a dial-up shell account. First, dial the number for your modem diverter, this should connect you to your out dialing modem, dial the number for your shell, once you have logged in, telnet to dialout.psu.edu. This is a outdial on the internet. From there dial the local sprintnet access number that's nearest to Pennsylvania State University. When you get one sprint, connect to the NUA mentioned earlier and that's it. There should also be a Datapac number near you as well, even though you're in the US. There are about 6 sprintnet access numbers in canada, so there must be some datapac access numbers for the states. For those of you in canada, here are the sprintnet numbers for canada: (They all support up to 14400 bps) Calgary 403 262-7887 Halifax 902 492-0036 Montreal 514 392-0202 Ottawa 613 235-6481 Toronto 416 594-1121 Vancouver 604 684-4696 iii. -DNIC's and systems. There are many more gateways from the internet to x.25 networks, here are some datapac ones. Host DNIC Format NUA ---- ---- ------ --- hermes.merit.edu 3110 sprintnet-##### * datapac.uwo.ca 3020 *1 31500076% datapac.dal.ca 3020 *1 76100256 datapac.uoguelph.ca 3020 *1 34200024% datapac.nstn.ca 3020 *1 76700314 pacx96.ccs.uwo.ca 3020 *2 31500076 ,pacx24,pacx12 pacx.queensu.ca 3020 *3 22100088% pacx.si.usherb.ca 3020 *2 57600454% pacx.ci.umoncton.ca 3020 datapac * . d1 ... ######## sytek.uwaterloo.ca 3020 call 17 33500195% ,sytek.mfcf.uwaterloo r ######## develnet.ucalgary.ca 3020 datapac ? ######## pacxnet1.rug.nl ???? surf ? ,pacxnet3 pacx1.mcc.ac.uk ???? pad ? ,pacx2 pacx1.lut.ac.uk ???? net ? ,pacx2 ---------------------------------------------------- If you want to find some systems, you can get a sprintnet nua scanner from http://www2.dope.org/9x So, If you aren't in north america, then you need the DNIC of the PSN in your contry. Here is a list of SOME. There a lot more extensive lists out there. Datapac.....3020 Sprintnet...3110 Tymnet......3106 Infogram....3028 GlobeDat....3025 InfoSwitch..3029 IntelPak....4542 ADP Autonet.3126 Bell South..3143 Nynex.......3144 Austpac.....5052 Dataex-P....2624 Remeber, yo will probably need to get yourself and NUI to connect to some of these, and put a 1 before the DNIC, it's the same as a long distance call. Also, I'm not sure about those networks accepting collect calls or not, but, here is a list of networks that DO accept collect calls, ==================================================== COUNTRY NETWORK DNIC ------- ------- ----- ALASKA ALASCOM 3135 CANADA DATAPAC 3020 CHILE ECOM 7302, 3104 COSTA RICA RACSA 7120, 7122, 7128, 7129 DOMINICAN REPUBLIC CODETEL ??? ISRAEL ISRANET 4251 MEXICO TELEPAC-SCT 3340 PANAMA INTEL 7141, 7142 PHILIPPINES ETPI 5156 PUERTO RICO PRTC 3300, 3301 Also, here are some outdials on datapac, i've been told they have international capabilities, but you do need an NUI to connect, i won't get into how to get yourself an NUI, that's you job.. NPA City (PROVINCE) SPEED NUA ADDRESS --- --------------- ----- ------------- 403 Calgary (ALTA) 300 0302063300900 1200 0302063300901 416 Clarkson (ONT) 300 0302091900900 1200 0302091900901 403 Edmonton (ALTA) 300 0302058700900 1200 0302058700901 902 Halifax (NS) 300 0302076101900 1200 0302076101901 905 Hamilton (ONT) 300 0302038500900 1200 0302038500901 902 Halifax (NS) 300 0302076101900 1200 0302076101901 905 Hamilton (ONT) 300 0302038500900 1200 0302038500901 519 Kitchener (ONT) 300 0302033400900 1200 0302033400901 519 London (ONT) 300 0302035600900 1200 0302035600901 514 Montreal (QUE) 300 0302082700902 1200 0302082700903 613 Ottawa (ONT) 300 0302085700901 1200 0302085700902 418 Quebec City (QUE) 300 0302048400900 1200 0302048400901 306 Regina (SASK) 300 0302072100900 1200 0302072100901 506 St-John's (NB) 300 0302074600900 1200 0302074600901 306 Saskatoon (SASK) 300 0302071100900 1200 0302071100901 709 St. John (NFLD) 300 0302078100900 1200 0302078100901 416 Toronto (ONT) 300 0302091600901 1200 0302091600902 604 Vancouver (BC) 300 0302067100900 1200 0302067100901 519 Windsor (ONT) 300 0302029500900 1200 0302029500901 204 Winnipeg (MAN) 300 0302069200902 1200 0302069200901 iv. -Examples Ok here is a diagram of some systems you could route your signal through. your------>--->---Modem------>----->----ISP---->--shell account---->-------- computer diverter ---telnet:dialout.psu.edu------->--------->--1(800).555.4401 .this would connect you to the computer sitting on 1-800-555-4401. This may seem complicated, but for the truly paranoid hacker, it works. Let's say, i wanted to connect to a h/p board in the .uk: your------->---->--ISP---->--->-dialout.psu.edu--->atdt82311510(sprintnet)--- computer -->--NUI:xxx,xxx-----1302063300900(datapac outdial)-->011-44-xxx-xxx-xxx(BBS) So far, we've been connecting to the internet, and then into the x.25 network, here's a different example: your computer----->----->xxx-xxx-xxxx(datapacdial-up)--->NUA:1302039400100(iNET 2000 gateway)---->internet----dialout.psu.edu--atdt82311510 Explanation:You dial into datapac, connect to 1302039400100, which is a internet gateway from datapac, (this was in a scan i found some where on the web,so i don't take credit for it)if you can get an account, it will take you back out to the internet, where you connect to dialout.psu.edu, from there dialing back into sprintnet, from there you can target a sprintnet system. This probably seems complicated, and i suggest you read some basic Sprintnet and Datapac guides before you try it. v. -Sources Here are some websites that contain valuable information on x.25 and old school h/p. http://www.geocities.com/SiliconValley/Peaks/7081/index.html http://ww2.dope.org/9x http://www.geocities.com/Pipeline/Dropzone/2400 http://www.hackcanada.com/datapac http://www.darkcyde.8m.com http://www.textfiles.com/hacking http://www.textfiles.com/phreak _____________________________________________________________________________ Closing. That's it for this article. Look for more of my stuff at www.limelighttech.com or from 9x's webpage. Contact. I can be reached at deads0ul@lucidx.com, on irc in #limelight or #x25 and on by bbs at:darkminds bbs. 1.[9o2].xxx.xxxx You can email me for account info. Greets to #9x doctor_x, binjinx, bmajik, phaceman, commport5,hybr1d,d4rkcyde. =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 旼컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴커 � dARKMiNDS bbs 1.[9o2].xxx.xxxx � � sysop:Deads0u| � � 19200 baud/2 nodes � � online 24 hours/7 days/3000+ files� � h/p only! � 읕컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴켸 *EOF*