

><><><><><><><><><><><><><><><><><><><><><><><><><><><><>
*                                                       *   
*                Voice Mailbox Hacking                  *   
*                                                       *   
*                                                       *   
*                                                       *   
*           Another Modernz Presentation                *   
*                   by Nereus                           *   
*                                                       *    
*            (C)opyright  July 23rd, 1993               * 
*********************************************************




<><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><>
*******************************************************************************
The Modernz can be contacted at:
MATRIX Keep BBS
(908) 905-6691 (908) WOK-NOW! (908) 458-xxxx
<><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><
<*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*>
<><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><>

        Voice Mail Systems are basically answering machines with a lot of 
features. They are privately owned systems, usually for employees of a 
certain company to exchange mail with. There are systems out there which are 
there solely for the purpose of VMB's, but not many exist.. These systems 
set up boxes for sale, and as a result usually are very tough to hack. 
Company systems, however, are often very open, with low security.. I have 
found that many of the system operators give slightly less than a fuck 
whether the system is even there or not, so these are the ones you want.

        Once you have your voice mail box, it can be used for a lot of 
things.. You can leave it up for your friends to leave you messages on, or 
if you run a business to have customers call you up. Hell, rent them out
to people you know, if you need some cash.  VMB's are very versatile,
and can be used for anything you want.

        There are many different kinds of systems out there.. The most 
popular of which is probably the ASPEN system. (ASPEN is the computer 
controlling the boxes) The ASPEN system is frequently updated, patched, and 
modified by the company who sells them. They offer upgrades to current 
owners, but in my experience most systems do not get the upgrades unless 
they are commercial systems which try to make money off the boxes. Most 
operators of company systems are perfectly satisfied with what they have, 
and therefore do not upgrade. Resulting from this, of course, is that there 
are a WIDE variety of systems out there, and every one is different.. 
but the one thing they have in common is their general vulnerabilities. 

        When you find your voice mail system (1-800 systems which answer 
24 hours a day are optimum) look around and check it out. I called one 
system which people couldn't hack, and hacked it just by listening to the 
recording. The recording said "Press 1 for questions and comments, Press 
2 for a service representative, etc etc, or enter the box number now." The 
options went up to 8. This means that if you enter a box number lower than 
900, it will go to a different option.. which means all boxes must start 
with 9. No one could find empty (or even used, for that matter) boxes because 
they were all scanning boxes 1XX and 2XX (which I commonly do, on normal 
systems). If there is an option such as "Press 9 to leave a message to a box 
owner" then the box number can be anything, and that doesn't give you much. 
On systems with no option to enter the box number, you can usually leave 
messages by pressing the "*" key on your phone. Boxes are usually populated 
around 1XX and 2XX, but there are still empty boxes in higher numbers.. 
although there are many more where the other used boxes can be found. 

        Once you have your system, and narrowed down the box numbers (if 
possible), it is time to do some scanning. On most systems I have 
encountered, you press the "#" to enter "your own" mail box (it could be 
different, though.. every system has it's own specifics). Once you get to 
the "Enter your mailbox number" prompt, pick a number and start. I usually 
start at 110, but it can be any number. One important thing: scan 
SEQUENTIALLY. Never enter random box numbers. You'll end up with nothing. If 
you go, say, straight from 110 to 200, trying every box, you are guaranteed 
to find at least a few empty boxes. When you find a used box, it usually 
plays a recording of the owner's name in the owner's voice. When it asks you 
for the password, you can often abort it by pressing the "*" key.

        One problem with VMB's is that they usually hang up on you after 3-5 
invalid tries. There are ways of getting around this.. Find a used box (not 
difficult, obviously). When you enter a box (say, 131) and it says "Box 
Number 131 is not valid", it's ok. If you enter another box that isn't 
valid, simply enter the used box next. If you enter a third invalid box, the 
system will hang up on you.. Once it asks you for your password, just abort 
by pressing the "*" and it will reset. Now you can have 3 more invalids 
before it will hang up on you. 

        Your scan might go something like this:

[] = What you press
Everything else is the voice mail system's response

------------------------------------------------------------------------------
Please enter your mailbox number.

[220]

I'm sorry, box number 220 is invalid.
Please re-enter your mailbox number.

[221]

"John Hughes"
Please enter your password followed by the pound sign.

[*]

Please enter your mailbox number.

[222]

I'm sorry, box number 222 is invalid.
Please re-enter your mailbox number.

[223]

I'm sorry, box number 223 is invalid.
Please re-enter your mailbox number.

[221]

"John Hughes"
Please enter your password followed by the pound sign.

[*]

Please enter your mailbox number.
------------------------------------------------------------------------------

        After entering invalid box numbers 222 and 223, you should enter a 
valid box number (221 is used here) just incase, then just abort. This will 
let you do all your scanning without having to call back every 3 invalids.

        You do NOT want a used box. If you take a box which someone already 
has, it will be taken away within DAYS. If you REALLY want a box which is 
taken (say, box #666.. or #123, etc etc), then you can try logging in and 
fucking up everything (deleting messages, etc) daily. The owner will 
eventually complain and get a different box number.. But this takes a few 
weeks.

        Since you can't take used boxes, and invalid boxes aren't available, 
there's only one kind of box left for you: Empty ones. These boxes are there 
for people coming into the company. The system operator will usually give 
them the password and then they can just take the box without the operator 
doing anything.

        To find the empty box, all you need to know is how to recognize it. 
On systems which play a recording of the owners voice, if you enter a box 
number and it just says "Box Number ###, enter your password." or just a 
plain "Enter your password", then it is either empty, or the owner is too 
lazy to change his recorded name. ASPEN systems are the easiest systems to 
find empty boxes on. When you enter an empty box number, you will get a 
message that says something like "Hello, mailbox owner! This is the ASPEN 
voice mail system. You can use this system to send and receive messages from 
both outside callers and other box owners." etc etc, until it gets up to 
"Your system manager has given you a temporary password. Please enter it 
now." Bingo. You have found your empty box.

        Hacking the box sounds like the toughest part, but it is really the 
easiest step out of all of them. The system operator does not want to have 
to make individual temporary passwords for each box which are hard to 
remember, so he doesn't. On ASPEN systems, the system operator usually sets 
the same 4 digit temporary password for ALL empty boxes. This temporary 
password is almost ALWAYS one of the following. 

BOX#   = The 3 digit box number you are hacking.  (Examples assume 666)

Three Digit Passwords:

123      000      333      666      999
321      111      444      777      (BOX#)
987      222      555      888      (BOX#+1)
Examples: 666, 667

Four Digit Passwords:

1234     0000     3333     6666     9999        1(BOX#)
4321     1111     4444     7777     0(BOX#)     (BOX#)1
9876     2222     5555     8888     (BOX#)0
Examples: 0666, 6660, 1666, 6661

Five Digit Passwords:

12345    00000    33333    66666    99999       11(BOX#)
54321    11111    44444    77777    00(BOX#)    (BOX#)11
98765    22222    55555    88888    (BOX#)00
Examples: 00666, 66600, 11666, 66611

        Seriously; Try ALL of those. If the password is not any of them, 
then the system probably has a random password for each box and is secure. 
But do not try 1234 and then give up. It is almost ALWAYS one of the above. 
If the password is 6 digits or more, don't bother.. There are other systems 
out there.

        Once you have hacked out your first box, do NOT change anything! Use 
this as your scanning box; when you scan boxes from inside another box, it 
will not hang up on you after 3 invalids. This makes scanning much easier. 
All the empty boxes you find most likely have the same password your box did 
when you hacked it out (so write it down, or make sure you remember it!).

        That's about it as far as VMB's go. There are many different types 
of systems, but in reality they're all the same. When hacking the password, 
just think stupid. And when scanning boxes, think logical. 

        A few 1-800 voice mail boxes you can check out/hack:

        (Yes, I only scan numbers which are easy to remember.  <G>)

1-800-TAK-PISS
The password to EVERY box (including the sysop's box at box #100!) is "1111".
I believe it's only up after 7pm, though, so I don't want it.  (These bastards
kept taking away my boxes anyhow)  Fuck these guys over and take down their
system;  they piss me off.

1-800-TIT-SUCK
Who knows.  I didn't even scan this one..  But I know there are boxes on it.
Tell me if you hack out one.

1-800-GET-MAIL
Meridian Mail.  I hacked out a box, but didn't like it..  I think that it is
an internal system, meaning that only people with boxes can send messages.
Fuck with it, tell me if you find anything useful.

        If you have any questions/comments, you can leave me a message
on my VMB:

        1-800-DART-801 (Hack, or even try to scan it and die.)
        Box Number : 837

        That's all for now..  More to come.

                        þ Nereus '93 þ
<><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><>
*******************************************************************************
The Modernz can be contacted at:

MATRIX KEEP BBS
WOK-NOW! / World of Kaos NOW! / World of Knowledge NOW!
St. Dismis Institute
Sysop: Digital-demon
(908) 905-6691  (908) WOK-NOW! (908) 458-xxxx
Home of Modernz Text Philez
<><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><
Castle of Illusion  (214)690-6730   NUP: SIN
Sysop:The Master Mind
TerrorNet World HQ, RapeNet
-----------------------------------------------------------------------------
Realm of Warriors   (201)728-0941   NUP: Darkness
Sysop: Dark Illusion
ApathyNet HQ, Entropynet, Toxicnet
Modernz Member Site
-----------------------------------------------------------------------------
Silicon Dreams      (201)895-3754   NUP: Trojan
Sysop: Nereus
Apathynet, Nuke-net, VX-net, Nuke distro site, Afro distro site
Modernz Member Site
-----------------------------------------------------------------------------
Thieves' Guild BBS   (201)703-1057  NUP: Hash
Sysop: The Guild Master
AbyssalNet Node @2118
Modernz Member Site
-----------------------------------------------------------------------------
Phibernetics Squared  (818)821-6567 
AbyssalNet Node @8850
too many damn nets
-----------------------------------------------------------------------------  
Trekker's Tavern     (413)737-2260  NUP: Tribble
Cosysop: Kodiak
Modernz Member Site
-----------------------------------------------------------------------------
Eve of Destruction   (201)579-9387
-----------------------------------------------------------------------------
The Underworld       (609)298-8854
Slaughter house      (609)584-7662
-----------------------------------------------------------------------------
Skynet               (404)296-2835
Sysop: Cyberchrist
Modernz Member Site
-----------------------------------------------------------------------------

|-|-|-|-|-|-|=|=|=|=|=|=|=|=|=|=|=|-|-|-|-|-|-|-|-|-|-|-|=|=|=|=|=|=|

Disclaimer
~~~~~~~~~~
This publication is for informational purposes ONLY.
In no way are the above authors, or organizations, liable for the
use or misuse of the information contained herein.

Distribution of these text files is allowed...and downright encouraged.

|-|=|-|=|-|=|-|=|-|=|-|=|-|=|-|=|-|=|-|=|-|=|-|=|-|=|-|=|-|=|-|=|-|=|-|=|-|=|-|


<*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*>
<*>                                                                        <*>
<*>  THIS HAS BEEN A MODERNZ PRESENTATION                                  <*>
<*>                                                                        <*>
<*>                             SEE YOU ALL AT MATRIX BBS (908)905-6691    <*>
<*>                                                                        <*>
<*>                NON-PURSUITABLE WITHOUT A GLOBAL                        <*>
<*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*>
                                  
