|


Return
To the table of contents
21.
How to make
Napalm
by the Jolly Roger
Pour some gas
into an old bowl, or some kind of container.
Get some
styrofoam and put it in the gas, until the gas won't eat anymore. You
should have a sticky syrup.
Put it on the
end of something (don't touch it!!). The unused stuff lasts a long time!
22.
How to make a fertilizer
bomb
by The Jolly Roger
Ingredients:
Newspaper
Fertilizer (the
chemical kind, GREEN THUMB or ORCHO)
Cotton
Diesel fuel
Make a pouch
out of the newspaper and put some fertilizer in it. Then put cotton
on top. Soak the cotton with fuel. Then light and run like you have
never ran before! This blows up 500 square feet so don't do it in an alley!!
23.
Tennis Ball
Bombs
by The Jolly Roger
Ingredients:
Strike anywhere matches
A tennis ball
A nice sharp knife
Duct tape
Break a ton of
matchheads off. Then cut a SMALL hole in the tennis ball. Stuff all
of the matchheads into the ball, until you can't fit any more in.
Then tape over it with duct tape. Make sure it is real nice and
tight! Then, when you see a geek walking down the street, give it a
good throw. He will have a blast!!
24.
Diskette
Bombs
by The Jolly Roger
You need:
A disk
Scissors
White or blue
kitchen matches (they MUST be these colors!)
Clear nail polish
1.Carefully
open up the diskette (3«" disks are best for this!)
2.Remove the
cotton covering from the inside.
3.Scrape a lot
of match powder into a bowl (use a wooden scraper, metal might spark
the matchpowder!)
4.After you
have a lot, spread it evenly on the disk.
5.Using the
nail polish, spread it over the match mixture
6.Let it dry
7.Carefully put
the diskette back together and use the nail polish to seal it shut on
the inside (where it came apart).
When that disk
is in a drive, the drive head attempts to read the disk, which causes
a small fire (ENOUGH HEAT TO MELT THE DISK DRIVE AND FUCK THE HEAD
UP!!). Let the fuckhead try and fix THAT!!!
25.
Unlisted Phone
Numbers
by The Jolly Roger
There are a
couple of different ways of doing this. Let's see if this one will
help: Every city has one or more offices dedicated to assigning
numbers to the telephone wire pairs. These offices are called DPAC
offices and are available to service reps who are installing or
repairing phones. To get the DPAC number, a service rep would call
the customer service number for billing information in the town that
the number is located in that he is trying to get the unlisted number
of. (Got that?) The conversation would go something like this:
"Hi, Amarillo, this is Joe from Anytown business office, I need
the DPAC number for the south side of town." This info is
usually passed out with no problems, so... if the first person you
call doesn't have it, try another. REMEMBER, no one has ANY IDEA who
the hell you are when you are talking on the phone, so you can be
anyone you damn well please! When you call the DPAC number, just tell
them that you need a listing for either the address that you have, or
the name. DPAC DOES NOT SHOW WHETHER THE NUMBER IS LISTED OR
UNLISTED!! Also, if you're going to make a habit of chasing numbers
down, you might want to check into getting a criss-cross directory,
which lists phone numbers by their addresses. It costs a couple
hundred bucks, but it is well worth it if you have to chase more than
one or two numbers down!
26. Fuses
by The Jolly Roger
You would be
surprised how many files are out there that use what falls under the
category of a "fuse." They assume that you just have a few
lying around, or know where to get them. Well, in some parts of the
country, fuses are extremely hard to come by... so this file tells
you how to make your own. Both fuses presented here are fairly simple
to make, and are fairly reliable.
SLOW BURNING
FUSE - 2 inches per minute
Materials needed:
Cotton string
or 3 shoelaces
Potassium
Nitrate or Potassium Chlorate
Granulated sugar
Procedure:
1.Wash the
cotton string or shoelaces in HOT soapy water, then rinse with fresh water
2.Mix the
following together in a glass bowl:
1 part
potassium nitrate or potassium chlorate
1 part
granulated sugar
2 parts hot water
3.Soak strings
or shoelaces in this solution
4.Twist/braid 3
strands together and allow them to dry
5.Check the
burn rate to see how long it actually takes!!
FAST BURNING
FUSE - 40 inches per minute
Materials needed:
Soft cotton string
Fine black
powder (empty a few shotgun shells!)
Shallow dish or pan
Procedure:
1.Moisten
powder to form a paste.
2.Twist/braid 3
strands of cotton together.
3.Rub paste
into string and allow to dry.
4.Check the
burn rate!!!
27.
How to make Potassium
Nitrate
by The Jolly Roger
Potassium
Nitrate is an ingredient in making fuses, among other things. Here is
how you make it:
Materials needed:
3« gallons
of nitrate bearing earth or other material
« cup of
wood ashes
Bucket or other
similar container about 4-5 gallons in volume
2 pieces of
finely woven cloth, each a bit bigger than the bottom of the bucket
Shallow dish or
pan at least as large in diameter as the bucket
Shallow, heat
resistant container
2 gallons of water
Something to
punch holes in the bottom of the bucket
1 gallon of any
type of alcohol
A heat source
Paper & tape
Procedure:
1.Punch holes
on the inside bottom of the bucket, so that the metal is
"puckered" outward from the bottom.
2.Spread cloth
over the holes from the bottom.
3.Place wood
ashes on the cloth. Spread it out so that it covers the entire cloth
and has about the same thickness.
4.Place 2nd
cloth on top of the wood ashes.
5.Place the
dirt or other material in the bucket.
6.Place the
bucket over the shallow container. NOTE: It may need support on the
bottom so that the holes on the bottom are not blocked.
7.Boil water
and pour it over the earth very slowly. Do NOT pour it all at once,
as this will clog the filter on the bottom.
8.Allow water
to run through holes into the shallow dish on the bottom.
9.Be sure that
the water goes through ALL of the earth!
10.Allow water
in dish to cool for an hour or so.
11.Carefully
drain the liquid in the dish away, and discard the sludge in the bottom.
12.Boil this
liquid over a fire for at least two hours. Small grains of salt will
form - scoop these out with the paper as they form.
13.When the
liquid has boiled down to « its original volume let it sit.
14.After «
hour, add equal volume of the alcohol; when this mixture is poured
through paper, small white crystals appear. This is the potassium nitrate.
Purification:
1.Redissolve
crystals in small amount of boiling water.
2.Remove any
crystals that appear.
3.Pour through
improvised filter then heat concentrated solution to dryness.
4.Spread out
crystals and allow to dry.
28.
Exploding
Lightbulbs
by The Jolly Roger
Materials needed:
Lightbulb (100w)
Socket (duh...)
¬ cup soap chips
Blackpowder!
(open some shotgun shells!)
¬ cup
kerosene or gasoline
Adhesive tape
Lighter or
small blowtorch
Glue
Procedure for a
simple exploding lightbulb:
1.Drill a small
hole in the top of the bulb near the threads!
2.Carefully
pour the blackpowder into the hole. Use enough so that it touches the filament!
3.Insert into
socket as normal (make sure the light is off or else YOU will be the victim!!)
4.Get the hell out!!
Procedure for a
Napalm Bulb:
1.Heat
kerosene/gasoline in a double boiler.
2.Melt soap
chips, stirring slowly.
3.Put somewhere
and allow to cool.
4.Heat the
threads of the bulb VERY carefully to melt the glue. Remove threads,
slowly drawing out the filament. Do NOT break the cheap electrical
igniters and/or the filament or this won't work!!
5.Pour the
liquid into the bulb, and slowly lower the filament back down into
the bulb. Make sure the filament is dipped into the fluid.
6.Re-glue the
threads back on. Insert it into a socket frequently used by the
victim and get the hell out!!
When the victim
flips the switch, he will be in for a BIG surprise!
29.
Under water
igniters
by The Jolly Roger
Materials needed:
Pack of 10
silicon diodes. (Available at Radio Shack. You will know you got the
right ones if they are very, very small glass objects!)
Pack of matches
1 candle
Procedure:
1.Light the
candle and allow a pool of molten wax to form in the top.
2.Take a single
match and hold the glass part of a single diode against the head.
Bend the diode pins around the matchhead so that one wraps in an
upward direction and then sticks out to the side. Do the same with
the other wire, but in a downward direction. The diodes should now be
hugging the matchhead, but its wires MUST NOT TOUCH EACH OTHER!
3.Dip the
matchhead in wax to give it a water-proof coat. These work underwater
4.Repeat to
make as many as you want.
How to use them:
When these
little dudes are hooked across a 6v battery, the diode reaches what
is called breakdown voltage. When most electrical components reach
this voltage, they usually produce great amounts of heat and light,
while quickly melting into a little blob. This heat is enough to
ignite a matchhead. These are recommended for use underwater, where
most other igniters refuse to work.
30.
Home-brew blast
cannon
by The Jolly Roger
Materials needed:
1 plastic drain
pipe, 3 feet long, at least 3 « inches in diameter.
1 smaller
plastic pipe, about 6 inches long, 2 inches in diameter.
1 large
lighter, with fluid refills (this gobbles it up!)
1 pipe cap to
fit the large pipe, 1 pipe cap to fit the small pipe.
5 feet of bellwire.
1 SPST rocker switch.
16v polaroid
pot-a-pulse battery.
15v relay (get
this at Radio Shack).
Electrical Tape.
One free afternoon.
Procedure:
Cut the bell
wire into three equal pieces, and strip the ends.
Cut a hole in
the side of the large pipe, the same diameter as the small pipe.
Thread the hole and one end of the small pipe. They should screw
together easily.
Take a piece of
scrap metal, and bend it into an "L" shape, then attach it
to the level on the lighter:
/------------------------gas
switch is here
V
/------
!lighter!!<---metal
lever!!
Now, every time
you pull the 'trigger' gas should flow freely from the lighter. You
may need to enlarge the 'gas port' on your lighter, if you wish to be
able to fire more rapidly.
Connect two
wires to the two posts on the switch.
Cut two holes
in the side of the smaller tube, one for the switch on the bottom,
and one for the metal piece on the top. Then, mount the switch in the
bottom, running the wires up and out of the top.
Mount the
lighter/trigger in the top. Now the switch should rock easily, and
the trigger should cause the lighter to pour out gas. Re-screw the
smaller tube into the larger one, hold down the trigger a bit, let it
go, and throw a match in there. If all goes well, you should hear a
nice big 'THUD!'
Get a hold of
the relay, and take off the top.
1---------------
v/
2--------------/<--the
center object is the metal finger inside the relay
3
cc-------------/
oo----------------4
ii
ll----------------5
Connect (1) to
one of the wires coming from the switch. Connect (2) to (4), and
connect (5) to one side of the battery. Connect the remaining wire
from the switch to the other side of the battery. Now you should be
able to get the relay to make a little 'buzzing' sound when you flip
the switch and you should see some tiny little sparks.
Now, carefully
mount the relay on the inside of the large pipe, towards the back.
Screw on the smaller pipe, tape the battery to the side of the cannon
barrel (yes, but looks aren't everything!)
You should now
be able to let a little gas into the barrel and set it off by
flipping the switch.
Put the cap on
the back end of the large pipe VERY SECURELY. You are now ready for
the first trial-run!
To Test:
Put something
very, very large into the barrel, just so that it fits 'just right'.
Now, find a strong guy (the recoil will probably knock you on your
ass if you aren't careful!). Put on a shoulderpad, earmuffs, and
possibly some other protective clothing (trust the Jolly Roger! You
are going to need it!). Hold the
trigger down
for 30 seconds, hold on tight, and hit the switch. With luck and the
proper adjustments, you should be able to put a frozen orange through
¬ or plywood at 25 feet.
31.
Chemical Equivalency
list
by The Jolly Roger
Acacia................................................................Gum
Arabic
Acetic Acid..............................................................Vinegar
Aluminum Oxide............................................................Alumia
Aluminum
Potassium Sulphate.................................................Alum
Aluminum Sulfate............................................................Alum
Ammonium Carbonate.....................................................Hartshorn
Ammonium Hydroxide.......................................................Ammonia
Ammonium
Nitrate......................................................Salt Peter
Ammonium
Oleate.....................................................Ammonia Soap
Amylacetate...........................................................Banana
Oil
Barium
Sulfide.........................................................Black Ash
Carbon Carbinate...........................................................Chalk
Carbontetrachloride...............................................Cleaning
Fluid
Calcium
Hypochloride............................................Bleaching Powder
Calcium Oxide...............................................................Lime
Calcium
Sulfate.................................................Plaster of Paris
Carbonic Acid............................................................Seltzer
Cetyltrimethylammoniumbromide......................................Ammonium
Salt
Ethylinedichloride...................................................Dutch
Fluid
Ferric
Oxide...........................................................Iron Rust
Furfuraldehyde..........................................................Bran
Oil
Glucose...............................................................Corn
Syrup
Graphite.............................................................Pencil
Lead
Hydrochloric
Acid..................................................Muriatic Acid
Hydrogen Peroxide.......................................................Peroxide
Lead
Acetate.......................................................Sugar
of Lead
Lead
Tero-oxide.........................................................Red
Lead
Magnesium Silicate..........................................................Talc
Magnesium
Sulfate.....................................................Epsom Salt
Methylsalicylate................................................Winter
Green Oil
Naphthalene............................................................Mothballs
Phenol.............................................................Carbolic
Acid
Potassium
Bicarbonate............................................Cream of Tarter
Potassium
Chromium Sulfate............................................Chromealum
Potassium
Nitrate.....................................................Salt Peter
Sodium Oxide................................................................Sand
Sodium
Bicarbonate...................................................Baking Soda
Sodium Borate..............................................................Borax
Sodium
Carbonate....................................................Washing Soda
Sodium Chloride.............................................................Salt
Sodium Hydroxide.............................................................Lye
Sodium Silicate............................................................Glass
Sodium
Sulfate....................................................Glauber's Salt
Sodium
Thiosulfate...........................................Photographer's Hypo
Sulfuric
Acid.......................................................Battery Acid
Sucrose...............................................................Cane
Sugar
Zinc
Chloride.....................................................Tinner's Fluid
Zinc
Sulfate.......................................................White Vitriol
32.
Phone
Taps
by The Jolly Roger
Here is some
info on phone taps. In this file is a schematic for a simple wiretap
& instructions for hooking up a small tape recorder control relay
to the phone line.
First, I will
discuss taps a little. There are many different types of taps. There
are transmitters, wired taps, and induction taps to name a few. Wired
and wireless transmitters must be physically connected to the line
before they will do any good. Once a wireless tap is connected to the
line, it can transmit all conversations over a limited reception
range. The phones in the house can even be modifies to pick up
conversations in the room and transmit them too! These taps are
usually powered off of the phone line, but can have an external power
source. You can get more information on these taps by getting an
issue of Popular Communications and reading through the ads. Wired
taps, on the other hand, need no power source, but a wire must be run
from the line to the listener or to a transmitter. There are obvious
advantages of wireless taps over wired ones. There is one type of
wireless tap that looks like a normal telephone mike. All you have to
do is replace the original mike with this and it will transmit all
conversations! There is also an exotic type of wired tap known as the
'Infinity Transmitter' or 'Harmonica Bug'. In order to hook one of
these, it must be installed inside the phone. When someone calls the
tapped phone & *before* it rings and blows a whistle over the
line, the transmitter picks up the phone via a relay. The mike on the
phone is activated so that the caller can hear all of the
conversations in the room. There is a sweep tone test at 415/BUG-1111
which can be used to detect one of these taps. If one of these is on
your line & the test # sends the correct tone, you will hear a
click. Induction taps have one big advantage over taps that must be
physically wired to the phone. They do not have to be touching the
phone in order to pick up the conversation. They work on the same
principle as the little suction-cup tape recorder mikes that you can
get at Radio Shack. Induction mikes can be hooked up to a transmitter
or be wired.
Here is an
example of industrial espionage using the phone:
A salesman
walks into an office & makes a phone call. He fakes the
conversation, but when he hangs up he slips some foam rubber cubes
into the cradle. The called party can still hear all conversations in
the room. When someone picks up the phone, the cubes fall away unnoticed.
A tap can also
be used on a phone to overhear what your modem is doing when you are war-dialing,
hacking, or just plain calling a bbs.
Here is the schematic:
-------)!----)!(------------->
)!(
Cap
^ )!(
)!(
)!(
)!(
^^^^^---)!(------------->
^ 100K
!
! <Input
The 100K pot is
used for volume. It should be on its highest (least resistance)
setting if you hook a speaker across the output. but it should be set
on its highest resistance for a tape recorder or amplifier. You may
find it necessary to add another 10 - 40K. The capacitor should be
around .47 MFD. It's only purpose is to prevent the relay in the
phone from tripping & thinking that you have the phone off of the
hook. the audio output transformer is available at Radio Shack. (part
# 273-138E for input). The red & the white wires go to the output
device. You may want to experiment with the transformer for the best
output. Hooking up a tape recorder relay is easy. Just hook one of
the phone wires (usually red) to the end of one of the relay &
the other end just loop around. This bypasses it. It should look like this:
------^^^^^^^^^------------
---------
RELAY^^
(part #275-004
from Radio Shack works fine)
If you think
that you line is tapped, the first thing to do is to physically
inspect the line yourself ESPECIALLY the phones. You can get mike
replacements with bug detectors built in. However, I would not trust
them too much. It is too easy to get a wrong reading.
For more info:
BUGS AND
ELECTRONIC SURVEILLANCE from Desert Publications HOW TO AVOID
ELECTRONIC EAVESDROPPING & PRIVACY INVASION. I do not remember
who this one is from... you might want to try Paladin Press.
33.
How to make a
landmine
by The Jolly Roger
First, you need
to get a push-button switch. Take the wires of it and connect one to
a nine volt battery connector and the other to a solar igniter (used
for launching model rockets). A very thin piece of stereo wire will
usually do the trick if you are desperate, but I recommend the
igniter. Connect the other wire of the nine-volt battery to one end
of the switch. Connect a wire from the switch to the other lead on
the solar igniter.
switch-----------battery
\
/
\
/
\
/
\ /
solar igniter
|
|
|
explosive
Now connect the
explosive (pipe bomb, m-80, COý bomb, etc.) to the igniter by
attaching the fuse to the igniter (seal it with scotch tape). Now dig
a hole; not too deep but enough to cover all of the materials. Think
about what direction your enemy will be coming from and plant the
switch, but leave the button visible (not TOO visible!). Plant the
explosive about 3-5 feet away from the switch because there will be a
delay in the explosion that depends on how short your wick is, and,
if a homemade wick is being used, its burning speed. But if you get
it right... and your enemy is close enough......... BBBBBBBOOOOOOOOOOOOOOOOOOOOOOOOMMMM!
34.
A different kind of Molitov
Cocktail
by The Jolly Roger
Here is how you
do it:
1.Get a coke
bottle & fill it with gasoline about half full.
2.Cram a piece
of cloth into the neck of it nice and tight.
3.Get a
chlorine tablet and stuff it in there. You are going to have to force
it because the tablets are bigger than the opening of the bottle.
4.Now find a
suitable victim and wing it in their direction. When it hits the
pavement or any surface hard enough to break it, and the chlorine and
gasoline mix..... BOOM!!!!!!
35.
Phone Systems
Tutorial
by The Jolly Roger
To start off,
we will discuss the dialing procedures for domestic as well as
international dialing. We will also take a look at the telephone
numbering plan.
North American
Numbering Plan
In North
America, the telephone numbering plan is as follows:
3 digit
Numbering Plan Area (NPA) code , i.e., area code
7 digit
telephone number consisting of a 3 digit Central Office (CO) code
plus a 4 digit station number
These 10 digits
are called the network address or destination code. It is in the
format of:
Area Code Telephone #
--------- -----------
N*X
NXX-XXXX
Where: N = a
digit from 2 to 9
* = the digit 0 or 1
X = a digit from 0 to 9
Area Codes
Check your
telephone book or the separate listing of area codes found on many
bbs's. Here are the special area codes (SAC's):
510 - TWX (USA)
610 - TWX (Canada)
700 - New Service
710 - TWX (USA)
800 - WATS
810 - TWX (USA)
900 - DIAL-IT Services
910 - TWX (USA)
The other area
codes never cross state lines, therefore each state must have at
least one exclusive NPA code. When a community is split by a state
line, the CO numbers are often interchangeable (i.e., you can dial
the same number from two different area codes).
TWX (Telex II)
consists of 5 teletype-writer area codes. They are owned by Western
Union. These SAC's may only be reached via other TWX machines. These
run at 110 baud (last I checked! They are most likely faster now!).
Besides the TWX numbers, these machines are routed to normal
telephone numbers. TWX machines always respond with an answerback.
For example, WU's FYI TWX # is (910) 279-5956. The answerback for
this service is "WU FYI MAWA".
If you don't
want to but a TWX machine, you can still send TWX messages using
Easylink [800/325-4112]. However you are gonna have to hack your way
onto this one!
700:
700 is
currently used by AT&T as a call forwarding service. It is
targeted towards salesmen on the run. To understand how this works,
I'll explain it with an example. Let's say Joe Q. Salespig works for
AT&T security and he is on the run chasing a phreak around the
country who royally screwed up an important COSMOS system. Let's say
that Joe's 700 # is (700) 382-5968. Every time Joe goes to a new
hotel (or most likely SLEAZY MOTEL), he dials a special 700 #, enters
a code, and the number where he is staying. Now, if his boss received
some important info, all he would do is dial (700) 382-5968 and it
would ring wherever Joe last programmed it to. Neat, huh?
800:
This SAC is one
of my favorites since it allows for toll free calls. INWARD WATS
(INWATS), or Inward Wide Area Telecommunications Service is the 800
numbers that we are all familiar with. 800 numbers are set up in
service areas or bands. There are 6 of these. Band 6 is the largest
and you can call a band 6 # from anywhere in the US except the state
where the call is terminated (that is why most companies have one 800
number for the country and then another one for their state.) Band 5
includes the 48 contiguous states. All the way down to band 1 which
includes only the states contiguous to that one. Therefore, less
people can reach a band 1 INWATS number than a band 6 number.
Intrastate
INWATS #'s (i.e., you can call it from only 1 state) always have a 2
as the last digit in the exchange (i.e., 800-NX2-XXXX). The NXX on
800 numbers represent the area where the business is located. For
example, a number beginning with 800-431 would terminate at a NY CO.
800 numbers
always end up in a hunt series in a CO. This means that it tries the
first number allocated to the company for their 800 lines; if this is
busy, it will try the next number, etc. You must have a minimum of 2
lines for each 800 number. For example, Travelnet uses a hunt series.
If you dial (800) 521-8400, it will first try the number associated
with 8400; if it is busy it will go to the next available port, etc.
INWATS customers are billed by the number of hours of calls made to
their number.
OUTWATS
(OUTWARD WATS): OUTWATS are for making outgoing calls only. Large
companies use OUTWATS since they receive bulk-rate discounts. Since
OUTWATS numbers cannot have incoming calls, they are in the format of:
(800) *XXX-XXXX
Where * is the
digit 0 or 1 (or it may even be designated by a letter) which cannot
be dialed unless you box the call. The *XX identifies the type of
service and the areas that the company can call.
Remember:
INWATS +
OUTWATS = WATS EXTENDER
900:
This DIAL-IT
SAC is a nationwide dial-it service. It is use for taking television
polls and other stuff. The first minute currently costs an outrageous
50-85 cents and each additional minute costs 35-85 cents. He'll take
in a lot of revenue this way!
Dial (900)
555-1212 to find out what is currently on this service.
CO CODES
These identify
the switching office where the call is to be routed. The following CO
codes are reserved nationwide:
555 - directory assistance
844 - time. These are now in!
936 - weather the 976 exchange
950 - future services
958 - plant test
959 - plant test
970 - plant test (temporary)
976 - DIAL-IT services
FONT>
Also, the 3
digit ANI & ringback #'s are regarded as plant test and are thus
reserved. These numbers vary from area to area.
You cannot dial
a 0 or 1 as the first digit of the exchange code (unless using a blue
box!). This is due to the fact that these exchanges (000-199)
contains all sorts of interesting shit such as conference #'s,
operators, test #'s, etc.
950:
Here are the
services that are currently used by the 950 exchange:
1000 - SPC
1022 - MCI Execunet
1033 - US Telephone
1044 - Allnet
1066 - Lexitel
1088 - SBS Skyline
These SCC's
(Specialized Common Carriers) are free from fortress phones! Also,
the 950 exchange will probably be phased out with the introduction of
Equal Access.
Plant Tests:
These include
ANI, Ringback, and other various tests.
976:
Dial 976-1000
to see what is currently on the service. Also, many bbs's have
listings of these numbers.
N11 codes:
----------
Bell is trying
to phase out some of these, but they still exist in most areas.
011 -
international dialing prefix
211 -
coin refund operator
411 -
directory assistance
611 -
repair service
811 -
business office
911 - EMERGENCY
International Dialing
With
International Dialing, the world has been divided into 9 numbering
zones. To make an international call, you must first dial:
International Prefix + Country code + National number.
In North
America, the international dialing prefix is 011 for
station-to-station calls. If you can dial International numbers
directly in your area then you have International Direct Distance
Dialing (IDDD).
The country
code, which varies from 1 to 3 digits, always has the world numbering
zone as the first digit. For example, the country code for the United
Kingdom is 44, thus it is in world numbering zone 4. Some boards may
contain a complete listing of other country codes, but here I give
you a few:
1
- North America (US, Canada, etc.)
20 - Egypt
258 - Mozambique
34 - Spain
49 - Germany
52 -
Mexico (southern portion)
7
- USSR
81 - Japan
98 -
Iran (call & hassle those bastards!)
If you call
from an area other than North America, the format is generally the
same. For example, let's say that you wanted to call the White House
from Switzerland to tell the president that his numbered bank account
is overdrawn (it happens, you know!). First you would dial 00 (the
SWISS international dialing prefix), then 1 (the US country code),
followed by 202-456-1414 (the
national number
for the White House. Just ask for Georgy and give him the bad news!)
Also, country
code 87 is reserved for Maritime mobile service, i.e., calling ships:
871 - Marisat (Atlantic)
871 - Marisat (Pacific)
872 - Marisat (Indian)
International Switching:
------------------------
In North
America there are currently 7 no. 4 ESS's that perform the duty of
ISC (Inter-nation Switching Centers). All international calls dialed
from numbering zone 1 will be routed through one of these
"gateway cities". They are:
182 -
White Plains, NY
183 -
New York, NY
184 -
Pittsburgh, PA
185 -
Orlando, Fl
186 -
Oakland, CA
187 -
Denver, CO
188 -
New York, NY
The 18X series
are operator routing codes for overseas access (to be further
discussed with blue boxes). All international calls use a signaling
service called CCITT. It is an international standard for signaling.
OK.. there you
go for now! If you want to read more about this, read part two which
is the next file #36 in the Jolly Roger's cookbook!
36.
Phone Systems Tutorial part
II
by The Jolly Roger
Part II will
deal with the various types of operators, office hierarchy, &
switching equipment.
Operators
There are many
types of operators in the network and the more common ones will be discussed.
TSPS Operator:
The TSPS
[(Traffic Service Position System) as opposed to This Shitty Phone
Service] Operator is probably the bitch (or bastard, for the female
liberationists out there) that most of us are used to having to deal
with. Here are his/her responsibilities:
1.Obtaining
billing information for calling card or third number calls
2.Identifying
called customer on person-to-person calls.
3.Obtaining
acceptance of charges on collect calls.
4.Identifying
calling numbers. This only happens when the calling number is not
automatically recorded by CAMA(Centralized Automatic Message
Accounting) & forwarded from the local office. This could be
caused by equipment failures (ANIF- Automatic Number Identification
Failure) or if the office is not equipped for CAMA (ONI- Operator
Number Identification).
I once had an
equipment failure happen to me & the TSPS operator came on and
said, "What number are you calling FROM?" Out of curiosity,
I gave her the number to my CO, she thanked me & then I was
connected to a conversation that appeared to be between a frame man
& his wife. Then it started ringing the party I wanted to
originally call & everyone phreaked out (excuse the pun). I
immediately dropped this dual line conference!
You should not
mess with the TSPS operator since she KNOWS which number that you are
calling from. Your number will show up on a 10-digit LED read-out
(ANI board). She also knows whether or not you are at a fortress
phone & she can trace calls quite readily! Out of all of the
operators, she is one of the MOST DANGEROUS.
INWARD operator:
This operator
assists your local TSPS ("0") operating connecting calls.
She will never question a call as long as the call is within HER
SERVICE AREA. She can only be reached via other operators or by a
blue box. From a blue box, you would dial KP+NPA+121+ST for the
INWARD operator that will help you connect any calls within that NPA
only. (Blue Boxing will be discussed in a future file).
DIRECTORY
ASSISTANCE Operator:
This is the
operator that you are connected to when you dial: 411 or
NPA-555-1212. She does not readily know where you are calling from.
She does not have access to unlisted numbers, but she DOES know if an
unlisted # exists for a certain listing.
There is also a
directory assistance operator for deaf people who use
teletypewriters. If your modem can transfer BAUDOT [(45« baud).
One modem that I know of that will do this is the Apple Cat acoustic
or the Atari 830 acoustic modem. Yea I know they are hard to find...
but if you want to do this.. look around!) then you can call him/her
up and have an interesting conversation. The number is: 800-855-1155.
They use the standard Telex abbreviations such as GA for go ahead.
they tend to be nicer and will talk longer than your regular
operators. Also, they are more vulnerable into being talked out of
information through the process of "social engineering" as
Chesire Catalyst would put it.
Unfortunately,
they do not have access to much. I once bullshitted with one of these
operators a while back and I found out that there are 2 such DA
offices that handle TTY. One is in Philadelphia and the other is in
California. They have approx. 7 operators each. Most of the TTY
operators think that their job is
boring (based
on an official "BIOC poll"). They also feel that they are
under-paid. They actually call up a regular DA number to process your
request (sorry, no fancy computers!)
Other operators
have access to their own DA by dialing KP+NPA+131+ST (MF).
CN/A operators:
CN/A Operators
are operators that do exactly the opposite of what directory
assistance operators are for. In my experience, these operators know
more than the DA op's do & they are more susceptible to
"social engineering." It is possible to bullshit a CN/A
operator for the NON-PUB DA number (i.e., you give them the name &
they give you the unlisted number. See the article on unlisted
numbers in this cookbook for more info about them.). This is due to
the fact that they assume that you are a fellow company employee.
Unfortunately, the AT&T breakup has resulted in the break-up of a
few NON-PUB DA numbers and policy changes in CN/A.
INTERCEPT Operator:
The intercept
operator is the one that you are connected to when there are not
enough recordings available to tell you that the number has been
disconnected or changed. She usually says, "What number you
calling?" with a foreign accent. This is the lowest operator
lifeform. Even though they don't know where you are calling from, it
is a waste or your time to try to verbally abuse them since they
usually understand very little English anyway.
Incidentally, a
few area DO have intelligent INTERCEPT Operators.
OTHER Operators:
And then there
are the: Mobile, Ship-to-Shore, Conference, Marine Verify, "Leave
Word and Call Back", Rout & Rate (KP+800+141+1212+ST), &
other special operators who have one purpose or another in the network.
Problems with
an Operator:
Ask to speak to
their supervisor... or better yet the Group Chief (who is the highest
ranking official in any office) who is the equivalent of the Madame
in a whorehouse.
By the way,
some CO's that will allow you to dial a 0 or 1 as the 4th digit, will
also allow you to call special operators & other fun Tel. Co.
numbers without a blue box. This is very rare, though! For example,
212-121-1111 will get you a NY Inward Operator.
Office Hierarchy
Every switching
office in North America (the NPA system), is assigned an office name
and class. There are five classes of offices numbered 1 through 5.
Your CO is most likely a class 5 or end office. All long-distance
(Toll) calls are switched by a toll office which can be a class 4, 3,
2, or 1 office. There is also a class 4X office called an
intermediate point. The 4X office is a digital one that can have an
unattended exchange attached to it (known as a Remote Switching Unit (RSU)).
The following
chart will list the Office #, name, & how many of those office
exist (to the best of my knowledge) in North America:
ClassNameAbbNumber
Existing
1Regional CenterRC12
2Sectional CenterSC67
3Primary CenterPC230
4Toll CenterTC1,300
4PToll PointTPN/A
4XIntermediate PointIPN/A
5End OfficeEO19,000
6RSURSUN/A
When connecting
a call from one party to another, the switching equipment usually
tries to find the shortest route between the class 5 end office of
the caller & the class 5 end office of the called party. If no
inter-office trunks exist between the two parties, it will then move
upward to the next highest office for servicing calls (Class 4). If
the Class 4 office cannot handle the call by sending it to another
Class 4 or 5 office, it will then be sent to the next highest office
in the hierarchy (3). The switching equipment first uses the
high-usage interoffice trunk groups, if they are busy then it goes to
the final; trunk groups on the next highest level. If the call cannot
be connected, you will probably get a re-order [120 IPM
(interruptions per minute) busy signal] signal. At this time, the
guys at Network Operations are probably shitting in their pants and
trying to avoid the dreaded Network Dreadlock (as seen on TV!).
It is also
interesting to note that 9 connections in tandem is called
ring-around-the-rosy and it has never occurred in telephone history.
This would cause an endless loop connection [a neat way to really
screw up the network].
The 10 regional
centers in the US & the 2 in Canada are all interconnected. they
form the foundation of the entire telephone network. Since there are
only 12 of them, they are listed below:
Class 1
Regional Office LocationNPA
Dallas 4 ESS214
Wayne, PA215
Denver 4T303
Regina No.
2SP1-4W (Canada)306
St. Louis 4T314
Rockdale, GA404
Pittsburgh 4E412
Montreal No. 1
4AETS (Canada)504
37.
Basic Alliance
Teleconferencing
by The Jolly Roger
Introduction:
This phile will
deal with accessing, understanding and using the Alliance
Teleconferencing Systems. It has many sections and for best use
should be printed out.
Alliance:
Alliance
Teleconferencing is an independent company which allows the general
public to access and use it's conferencing equipment. Many rumors
have been floating around that Alliance is a subsidiary of AT&T.
Well, they are wrong. As stated above, Alliance is an entirely
independent company. They use sophisticated equipment to allow users
to talk to many people at once.
The Number:
Alliance is in
the 700 exchange, thus it is not localized, well, not in a way.
Alliance is only in certain states, and only residents of these
certain states can access by dialing direct. This, however, will be
discussed in a later chapter. The numbers for alliance are as follows:
0-700-456-1000 (Chicago)
-1001 (Los Angeles)
-1002 (Chicago)
-1003 (Houston)
-2000 (?)
-2001 (?)
-2002 (?)
-2003 (?)
-3000 (?)
-3001 (?)
-3002 (?)
-3003 (?)
The locations
of the first 4 numbers are known and I have stated them. However, the
numbers in the 200x and 300x are not definitely known. Rumor has it
that the pattern repeats itself but this has not been proven.
Dialing:
As stated
before, Alliance is only in certain stated and only these states can
access them via dialing direct. However, dialing direct causes your
residence to be charged for the conference and conference bills are
not low!!!
Therefore, many
ways have been discovered to start a conference without having it
billed to ones house. They are as follows:
1.Dialing
through a PBX.
2.Incorporating
a Blue Box.
3.Billing to a loop.
4.Billing to a
forwarded call.
I am sure there
are many more, but these are the four I will deal with.
Dialing through
a PBX:
Probably the
easiest method of creating a free conference is through a PBX. Simply
call one in a state that has Alliance, input the PBX's code, dial 9
for an outside line and then dial alliance. An example of this would be:
PBX: 800-241-4911
When it answers
it will give you a tone. At this tone input your code.
Code: 1234
After this you
will receive another tone, now dial 9 for an outside line.
You will now
hear a dial tone. Simply dial Alliance from this point and
the conference
will be billed to the PBX.
Using a Blue Box:
Another rather
simple way of starting a conference is with a Blue Box. The following
procedure is how to box a conference:
Dial a number
to box off of. In this example we will use 609-609-6099 When the
party answers hit 2600hz. This will cause the fone company's
equipment to think that you have hung up. You will hear a
<beep><kerchunk> You have now 'seized' a trunk. After
this, switch to multi-frequency and dial:
KP-0-700-456-x00x-ST
KP = KP tone on
Blue Box
x = variable
between 1 and 3
ST = ST tone on
Blue Box
The equipment
now thinks that the operator has dialed Alliance from her switchboard
and the conference shall be billed there. Since Blue Boxing is such a
large topic, this is as far as I will go into it's uses.
Billing to a loop:
A third method
of receiving a free conference is by billing out to a loop. A loop is
2 numbers that when two people call, they can talk to each other.
You're saying woop-tee-do right? Wrong! Loops can be <very>
useful to phreaks. First, dial alliance direct. After going through
the beginning procedure, which will be discussed later in this
tutorial, dial 0 and wait for an Alliance operator. When she answers
tell her you would like to bill the conference to such and such a
number. (A loop where your phriend is on the other side) She will
then call that number to receive voice verification. Of course your
phriend will be waiting and will accept the charges. Thus, the
conference is billed to the loop.
Billing to call forwarding:
When you dial a
number that is call forwarded, it is first answered by the original
location, then forwarded. The original location will hang up if
2600hz is received from only one end of the line. Therefore, if you
were to wait after the forwarded residence answered, you would
receive the original location's dial tone.
Example:
Dial 800-325-4067
The original
residence would answer, then forward the call, a second type of
ringing would be heard. When this second residence answers simply
wait until they hang up. After about twenty seconds you will then
receive the original residence's dial tone since it heard 2600hz from
one end of the line. Simply dial Alliance from this point and the
conference will be billed to the original residence. These are the
four main ways to receive a free conference. I am sure
many more
exist, but these four are quite handy themselves.
Logon Procedure:
Once Alliance
answers you will hear a two-tone combination. This is their way of
saying 'How many people do you want on the conference dude?' Simply
type in a 2-digit combination, depending on what bridge of Alliance
you are on, between 10 and 59. After this either hit '*' to cancel
the conference size and input another or hit '#' to continue. You are
now in Alliance Teleconferencing and are only seconds away from
having your own roaring conference going strong!!!
Dialing in Conferees:
To dial your
first conferee, dial 1+npa+pre+suff and await his/her answer.
npa = area code
pre = prefix
suff = suffix
If the number
is busy, or if no one answers simply hit '*' and your call will be
aborted. But, if they do answer, hit the '#' key. This will add them
to the conference. Now commence dialing other conferees.
Joining Your Conference:
To join your
conference from control mode simply hit the '#' key. Within a second
or two you will be chatting with all your buddies. To go back into
control mode, simply hit the '#' key again.
Transferring Control:
To transfer
control to another conferee, go into control mode, hit the #
6+1+npa+pre+suff of the conferee you wish to give control to. If
after, you wish to abort this transfer hit the '*' key.
NOTE: Transfer
of control is often not available. When you receive a message stating
this, you simply cannot transfer control.
Muted Conferences:
To request a
muted conference simply hit the 9 key. I am not exactly sure what a
muted conference is but it is probably a way to keep unwanted
eavesdroppers from listening in.
Dialing
Alliance Operators:
Simply dial 0
as you would from any fone and wait for the operator to answer.
Ending Your Conference:
To end your
conference all together, that is kick everyone including yourself
off, go into control mode and hit '*'...after a few seconds simply
hang up. Your conference is over.
Are Alliance
Operators Dangerous?
No. Not in the
least. The worst they can do to you while you are having a conference
is drop all conferees including yourself. This is in no way harmful,
just a little aggravating.
Alliance and Tracing:
Alliance can
trace, as all citizens of the United States can. But this has to all
be pre-meditated and AT&T has to be called and it's really a
large hassle, therefore, it is almost never done. Alliance simply
does not want it known that teenagers are phucking them over. The
only sort of safety equipment Alliance has on-line is a simple pen
register. This little device simply records all the numbers of the
conferees dialed. No big deal. All Alliance can do is call up that
persons number, threaten and question. However, legally, they can do
nothing because all you did was answer your fone.
NOTE: Almost
all instructions are told to the person in command by Alliance
recordings. A lot of this tutorial is just a listing of those
commands plus information gathered by either myself or the phellow
phreaks of the world!!!
38.
Aqua Box
Plans
by The Jolly Roger
Every true
phreaker lives in fear of the dreaded FBI 'Lock In Trace'. For a long
time, it was impossible to escape from the Lock In Trace. This box
does offer an escape route with simple directions to it. This box is
quite a simple concept, and almost any phreaker with basic
electronics knowledge can construct and use it.
The Lock In Trace
A lock in trace
is a device used by the FBI to lock into the phone users location so
that he can not hang up while a trace is in progress. For those of
you who are not familiar with the concept of 'locking in', then
here's a brief description. The FBI can tap into a conversation, sort
of like a three-way call connection. Then, when they get there, they
can plug electricity into the phone line. All phone connections are
held open by a certain voltage of electricity. That is why you
sometimes get static and faint connections when you are calling far
away, because the electricity has trouble keeping the line up. What
the lock in trace does is cut into the line and generate that same
voltage straight into the lines. That way, when you try and hang up,
voltage is retained. Your phone will ring just like someone was
calling you even after you hang up. (If you have call waiting, you
should understand better about that, for call waiting intercepts the
electricity and makes a tone that means someone is going through your
line. Then, it is a matter of which voltage is higher. When you push
down the receiver, then it see-saws the electricity to the other
side. When you have a person on each line it is impossible to hang up
unless one or both of them will hang up. If you try to hang up,
voltage is retained, and your phone will ring. That should give you
an understanding of how calling works. Also, when electricity passes
through a certain point on your phone, the electricity causes a bell
to ring, or on some newer phones an electronic ring to sound.) So, in
order to eliminate the trace, you somehow must lower the voltage
level on your phone line. You should know that every time someone
else picks up the phone line, then the voltage does decrease a
little. In the first steps of planning this out, Xerox suggested
getting about a hundred phones all hooked into the same line that
could all be taken off the hook at the same time. That would greatly
decrease the voltage level. That is also why most three-way
connections that are using the bell service three way calling (which
is only $3 a month) become quite faint after a while. By now, you
should understand the basic idea. You have to drain all of the power
out of the line so the voltage can not be kept up. Rather sudden
draining of power could quickly short out the FBI voltage machine,
because it was only built to sustain the exact voltage necessary to
keep the voltage out. For now, imagine this. One of the normal Radio
Shack generators that you can go pick up that one end of the cord
that hooks into the central box has a phone jack on it and the other
has an electrical plug. This way, you can "flash" voltage
through the line, but cannot drain it. So, some
modifications
have to be done.
Materials
A BEOC (Basic
Electrical Output Socket), like a small lamp-type connection, where
you just have a simple plug and wire that would plug into a light
bulb. One of cords mentioned above, if you can't find one then
construct your own... Same voltage connection, but the restrainer
must be built in (I.E. The central box) Two phone jacks (one for the
modem, one for if you are being traced to plug the aqua box into)
Some creativity and easy work.
Notice: No
phones have to be destroyed/modified to make this box, so don't go
out and buy a new phone for it!
Procedure
All right, this
is a very simple procedure. If you have the BEOC, it could drain into
anything: a radio, or whatever. The purpose of having that is you are
going to suck the voltage out from the phone line into the electrical
appliance so there would be no voltage left to lock you in with.
1.Take the
connection cord. Examine the plug at the end. It should have only two
prongs. If it has three, still, do not fear. Make sure the electrical
appliance is turned off unless you want to become a crispy critter
while making this thing. Most plugs will have a hard plastic design
on the top of them to prevent you from getting in at the electrical
wires inside. Well, remove it. If you want to keep the plug (I don't
see why...) then just cut the top off. When you look inside, Low and
Behold, you will see that at the base of the prongs there are a few
wires connecting in. Those wires conduct the power into the
appliance. So, you carefully unwrap those from the sides and pull
them out until they are about an inch ahead of the prongs. If you
don't want to keep the jack, then just rip the prongs out. If you
are, cover the prongs with insulation tape so they will not connect
with the wires when the power is being drained from the line.
2.Do the same
thing with the prongs on the other plug, so you have the wires evenly
connected. Now, wrap the end of the wires around each other. If you
happen to have the other end of the voltage cord hooked into the
phone, stop reading now, you're too fucking stupid to continue. After
you've wrapped the wires around each other, then cover the whole
thing with the plugs with insulating tape. Then, if you built your
own control box or if you bought one, then cram all the wires into it
and reclose it. That box is your ticket out of this.
3.Re-check
everything to make sure it's all in place. This is a pretty flimsy
connection, but on later models when you get more experienced at it
then you can solder away at it and form the whole device into one big
box, with some kind of cheap Mattel hand-held game inside to be the
power connector. In order to use it, just keep this box handy. Plug
it into the jack if you want, but it will slightly lower the voltage
so it isn't connected. When you plug it in, if you see sparks, unplug
it and restart the whole thing. But if it just seems fine then leave it.
Use
----
Now, so you
have the whole thing plugged in and all... Do not use this unless the
situation is desperate! When the trace has gone on, don't panic,
unplug your phone, and turn on the appliance that it was hooked to.
It will need energy to turn itself on, and here's a great source...
The voltage to keep a phone line open is pretty small and a simple
light bulb should drain it all in and probably short the FBI computer
at the same time.
39.
Hindenberg
Bomb
by The Jolly Roger
Needed:
1 Balloon
1 Bottle
1 Liquid Plumber
1 Piece
Aluminum foil
1 Length Fuse
Fill the bottle
3/4 full with Liquid Plumber and add a little piece of aluminum foil
to it. Put the balloon over the neck of the bottle until the balloon
is full of the resulting gas. This is highly flammable hydrogen. Now
tie the balloon. Now light the fuse, and let it rise. When the fuse
contacts the balloon, watch out!!!
40.
How to Kill Someone with your Bare
Hands
by The Jolly Roger
This file will
explain the basics of hand-to-hand combat, and will tell of the best
places to strike and kill an enemy. When engaged in hand-to-hand
combat, your life is always at stake. There is only one purpose in
combat, and that is to kill your enemy. Never face an enemy with the
idea of knocking him out. The chances are extremely good that he will
kill YOU instead. When a weapon is not available, one must resort to
the full use of his natural weapons. The natural weapons are:
1.The knife
edge of your hands.
2.Fingers
folded at the second joint or knuckle.
3.The
protruding knuckle of your second finger.
4.The heel of
your hand.
5.Your boot
6.Elbows
7.Knees
8.Your Teeth.
Attacking is a
primary factor. A fight was never won by defensive action. Attack
with all of your strength. At any point or any situation, some
vulnerable point on your enemies body will be open for attack. Do
this while screaming as screaming has two purposes.
1.To frighten
and confuse your enemy.
2.To allow you
to take a deep breath which, in turn, will put more oxygen in your
blood stream.
Your balance
and balance of your enemy are two important factors; since, if you
succeed in making your enemy lose his balance, the chances are nine
to one that you can kill him in your next move. The best over-all
stance is where your feet are spread about shoulders width apart,
with your right foot about a foot ahead of the left. Both arms should
be bent at the elbows parallel to each other. Stand on the balls of
your feet and bend your waist slightly. Kind of like a boxer's
crouch. Employing a sudden movement or a scream or yell can throw
your enemy off-balance. There are many vulnerable points of the body.
We will cover them now:
Eyes: Use your
fingers in a V-shape and attack in gouging motion.
Nose:(Extremely
vulnerable) Strike with the knife edge of the hand along the bridge,
which will cause breakage, sharp pain, temporary blindness, and if
the blow is hard enough, death. Also, deliver a blow with the heel of
your hand in an upward motion, this will shove the bone up into the
brain causing death.
Adam's Apple:
This spot is usually pretty well protected, but if you get the
chance, strike hard with the knife edge of your hand. This should
sever the wind-pipe, and then it's all over in a matter of minutes.
Temple: There
is a large artery up here, and if you hit it hard enough, it will
cause death. If you manage to knock your enemy down, kick him in the
temple, and he'll never get up again.
Back of the
Neck: A rabbit punch, or blow delivered to the base of the neck can
easily break it, but to be safe, it is better to use the butt of a
gun or some other heavy blunt object.
Upper lip: A
large network of nerves are located. These nerves are extremely close
to the skin. A sharp upward blow will cause extreme pain, and unconsciousness.
Ears: Coming up
from behind an enemy and cupping the hands in a clapping motion over
the victims ears can kill him immediately. The vibrations caused from
the clapping motion will burst his eardrums, and cause internal
bleeding in the brain.
Groin: A VERY
vulnerable spot. If left open, get it with knee hard, and he'll
buckle over very fast.
Kidneys: A
large nerve that branches off to the spinal cord comes very close to
the skin at the kidneys. A direct blow with the knife edge of your
hand can cause death.
There are many
more ways to kill and injure an enemy, but these should work best for
the average person. This is meant only as information and I would not
recommend that you use this for a simple High School Brawl. Use these
methods only, in your opinion, if your life is in danger. Any one of
these methods could very easily kill or cause permanent damage to
someone. One more word of caution, you should practice these moves
before using them on a dummy, or a mock battle with a friend. (You
don't have to actually hit him to practice, just work on accuracy.)
|