💾 Archived View for gemini.spam.works › mirrors › textfiles › phreak › PHREAKING › phreakin.two captured on 2022-07-17 at 11:08:50.

View Raw

More Information

⬅️ Previous capture (2022-06-12)

-=-=-=-=-=-=-


 
 
 
 
 
 
        ---------------------
        the phreak's notebook
        ---------------------
           []  part ii  []
 
 
presented by :  []  jacknife  [] 014
------------------------------------------------
 
 
 
                            touch-tone & free calls
 
there are several ways to make free calls (sprint, mci, etc.) using a rotary
phone.  they are:

 1. use a number that accepts voice as well as dtmf.  such a # is (800)
    521-xxxx.  as of writing this, a code was xx6x7x9x.
     a) if using voice, wait for the computer to say, "authorization #,
        please."  then say each digit slowly, it will beep after each digit is
        said. after every group of digits, it will repeat what you have said,
        then say yes if it is correct, otherwise say no.  if the access code is
        correct, it will thank you and ask for the destination #, then say the
        area code + number as above. another such # is (800) xx5- 8xxx, which
        has a 6 digit access code. (note:  if using touch-tone on this #, enter
        the code immediately after the tone stops.)
 
 2.  hook up a touch-tone fone into your rotary fone.  attach the red wire from
     the touch-tone fone to the "r" terminal inside the fone on the network
     box.  then hook the green wire to the "b" terminal. to use this dial the #
     using rotary & then use the touch-tone for the codes. (don't hang up the
     rotary fone while doing this though!)  if this doesn't work then reverse
     the 2 wires.  (note: if your line can accept touch-tone but you have a
     rotary fone then you can hook up a tone fone directly for all calls but
     this usually isn't the case.) such as radio shack's 43-138.
 
 
 this is the tone matrix for a box which generates tones that operators use to
dial..rotary works as well, on operator lines, but this is technological(!).
now i agree with the opinion of a well known phreak that 'boxing' is/will be
for the most part dead, but this is tradition... first,you dial dir.asst, or an
oper. etc , then you blast the line with a 2600hz tone. this gives you the
line, this is also how ma bell tracks down blue boxers... there  are 2600hz
detectors s y stems, an even on old #4 crossbars... ondce on a oper.trunk
line, you use your blue box/rotary tdo dial...
 
so,  if you use 2600hz, which is necess ary, unless you are *very* careful, you
will be snagged.
 
finally, this is what you read! so long and hard for:
 
700   :   1   :   2   :   4 :   7   : 11   :
900   :   +   :   3   :   5 :   8   : 12   :
1100  :   +   :   +   :   6 :   9   : kp   :
1300  :   +   :   +   :   + :  10   : kp2  :
1500  :   +   :   +   :   + :   +   : st   :
      : 700  :  900  : 1100  : 1300 : 1500 :
 
use kp to start a call, and st to stop, with the beloved 2600hz tone to dis
connect. i also hear that 2 600hz resets sprint nodes and gives you teir
initial tone..

now, if you're wondering about what to call from an operator trunk, here are
some goodies to help you out:
 
xxx+101 - toll  switching
xxx+121 - local operator
xxx+131 - information
xxx+141 - rate & route
xxx+181 - coin refund operator
xxx+11501 - mobile operator
xxx+11521 - mobile operator
xxx+11511 - conference operator
 
these work with rotary or oper ators to nes, but only on oper. trunk lr*zii)x
thanks for listening!
 
                             blue boxing - part ii
 
     while  reading the fine article on the blue box i saw that there a lot of
data left out of the do cument.   i hope this a dds, in some small way, to the
information.
 
     first the tones. while all the information is correct, the timing specs
were not included . the tone pairs are to remain on for 1/10 sec. with 1/10
sec. of slience between digits. the 'kp' tones should be sent for 2/10 sec. a
way to defeat the 2600hz traps is to send a long with t he 2600hz some pink
noise(most of the energy in this signal sh ould be above 3000hz, this si deal
won't make it over the toll network, but should carry as far as your local toll
center) so that the traps won't find 'pure' 260 0hz on the trunk. this i s not
a perfectly safe way to box, but it should slow down the discovery.
 
     as to use, the first thing youn eed to understand is that there are two(2)
types of toll completing trunk, inward and outward. the names are reference to
the office that is switc hing the call(the toll center that serves the wats
line you cal led) and each type of trunk has a different class of service. from
an inward toll completing trunk, you can reach the different ser vice operators
, the toll test board, and the inwar operator. some offices also allow remote
testing and it is in these offices that you can access the outward to ll
completing trunks. the out ward trunks allow you to make verification
(emergency) calls, do service monitoring(tapping), stack trunks(busy out all
trunks between la and nyc), enable and disable tsps positions, and in some
cases(on some 4a's) issue temporary rer outing instructio ns( send all calls
from la to nyc via miam i, boston, or any other class 5 office or offices).
both type of trunk allow you to place a 'standard' call with a box.
 
     in some offices, mostly the small ones with a toll test board that is
unattended at night and on weekends, you cane to an outward toll completing
trunk as well as performing other test and routing functions. you do this by
using three digit codes that are invalid exchang es(not of the pattern nnx[see
note 1]). during the sixites the codes used were fairly standard and
consistent, however when the b oxes became popular and the phreaks started
doing things like routing all calls from dallas to ft. worth via washtngton
d.c. mother started changing the test codes on a random(as far as i know )
basis. what i would suggest is that everybody interested in doing this sort of
thing pick out a nice quiet little office somewhere and work on discovering the
codes acceptable to that office. bering plan area (npa,  also known as area
code) has an office desiignated as its master office.  this office cont rols
all of the other toll offices in the area as well as serving as a concentration
point for most out of area calls. to access the services of a non-master office
you need it's 'city  code', this is a  three(3) digit code that is of the form
0xx,  and is sent after the area code [see note 2 ].  as an example,  the 'city
code' for canton, ohio is 0xx; thus to reach the inward operator in canton, you
would send 'kp-2xx-0xx-1xx-st' where as if you wanted the inward operator in
clevela nd, you would send 'kp-2xx-1xx-st'. the  reason this is necessary is
that the operator in cleveland can't verify a number in canton, so if you want
to verify someone in canton you need the city code.  also, most area master
off ices have dedicated data trunks to the network control center and thus
don't  accept test and rerouting comman ds over the switched net-work. in
conclusion,  the switching netw ork will do a lot more for you then connect you
to people and the small offices that require a 'city code' are the type of
office to try to break.
 
          nickie haflinger, the coven.
 
     note 1:   the  normal  format  for telephone numbers  is as follows:
nyn/nnx-xxxx.  where n=any digit exce pt 1 and 0; y=0 or 1 , and x=any digit.
yes i know that in some area codes the nnx format has changed to nxx .  this is
a new occurrence and only occur where there has be an outrageous population
increase in the last few years and all  of the funny exchanges are connected
directly to master offices and thus don't conflict with the 'city code' for mat
 
     note 2:   you can obtain the 'city code' for a number by calling rate and
route and asking for the 'numbers route' to nyn/nnx(i.e. 914/725).
 
 
 
 
                                  a/c listings
 
 
     this is a listing of all the area codes in north america, and what area of
the continent that they serve:

 
    201 --- north new jersey
    202 --- washington dc
    203 --- connecticut
    204 --- manitoba
    205 --- alabama
    206 --- western washington
    207 --- maine
    20x --- south idaho
    209 --- stockton area california
    212 --- new york/new york city
    213 --- los angelos california
    214 --- northeast texas
    215 --- southeast pennsylvania
    216 --- northeast ohio
    217 --- central illinois
    218 --- north minnesota
    219 --- north indiana
    301 --- maryland
    302 --- deleware
    303 --- colorado
    304 --- west virginia
    305 --- southeast florida
    306 --- saskatchewan
    307 --- wyoming
    308 --- west nebraska
    309 --- north central illinois
    312 --- northeast illinois
    313 --- east michigan
    314 --- east missouri
    315 --- north central new york
    316 --- south kansas
    317 --- central indiana
    318 --- louisiana except southwest
    319 --- east iowa
    401 --- rhode island
    402 --- east nebraska
    403 --- alberta
    404 --- north georgia
    405 --- oklahoma except northeast
    406 --- montana
    407 ---
    408 --- ventura california
    409 --- southwest texas
    412 --- southwest pennsylvania
    413 --- west massechusettes
    414 --- east wisconson
    415 --- san fransisco area california
    416 --- toronto area canada
    417 --- southwest missouri
    418 --- quebec city area quebec
    419 --- northwest ohio
    501 --- arkansas
    502 --- west kentucky
    503 --- oregon
    504 --- southwest louisiana
    505 --- new mexico
    506 --- new brunswick
    507 --- south minnesota
    508 ---
    509 --- eastern washington
    512 --- south texas
    513 --- southwes602 --- arizona
    603 --- new hampshire
    604 --- british columbia
    605 --- south dakota
    606 --- east kentucky
    607 --- south central new york
    608 --- southwest wisconson
    609 --- south new jersey
    612 --- central minnesota
    613 --- ottawa area ontario
    614 --- east central ohio
    615 --- east tennessee
    616 --- west michigan
    617 --- east massachusettes
    618 --- south illinois
    619 --- southern california
    701 --- north dakota
    702 --- nevada
    703 --- virginia except southeast
    704 --- west north carolina
    705 --- east ontario
    706 --- northwest mexico
    707 --- northwest california
    708 ---
    709 --- new foundland
    712 --- west iowa
  ' 713 --- southeast texas/houston
    714 --- orange county california
    715 --- north wisconson
    716 --- west new york
    717 --- east central pennsylvania
    718 ---
    719 ---
    800 --- wide area telecommunication ser.
    801 --- utah
    802 --- vermont
    803 --- south carolina
    804 --- southwest virginia
    805 --- thousand oaks area california
    806 --- north texas
    807 --- west ontario
    808 --- hawaii
    809 --- bahamas caribean
    812 --- south indiana
    813 --- southwest florida
    814 --- northwest central pennsylvania
    815 --- northwest illinois
    816 --- north missouri
    817 --- north central texas
    818 --- north la
    819 --- west quebec
    900 --- dial it
    901 --- west tennessee
    902 --- nova scotia
    903 ---
    904 --- north west florida
    905 --- mexico city
    906 --- michigan peninsula
    907 --- alaska
    908 ---
    909 ---
    912 --- south georgia
    913 --- north kansas
    914 --- southeast new york
    915 --- west texas
    916 --- northeast california
    917 ---
    918 --- northeast oklahoma
    919 --- east north carolina
 
 
-------------------------------------------------------------------------------

downloaded from just say yes. 2 lines, more than 500 files online!
         full access on first call. 415-922-2008 casfa