   _________________
  /\__\_______\_____\ iTS
 / /  /__   __/  ___/ Internal Theft Syndicate
/ /  // /  / /__   /  Proudly Presents:
\/__/ \/__/\/_____/   T.I.T.S. The Intuitve Textfile Series

Released 12/25/95     Hacking PBX Systems 001 - Drakkhar


Merry Christmas from iTS!  Look forward to a very happy New Year with even
more iTS Releases in 1993...

Now, on to the file:


There other ways to obtain free long distance calls besides using extenders.
PBXes (private branch exchanges) are an easy and safe way to obtain free calls.
They are also useful if you intend to hack into computer systems, because if 
the call is traced, it will be traced to the PBX. Of course, if the number to
the PBX has ani (automatic number identification), you're out of luck, because
it can easily be traced back to your house.

PBXes are owned by businesses, and are quite useful. While in the office, users
only have to dial the dialout code, usually 9, to call anywhere in the world.
When away from the office or at home, the users need only to call up the number
of the PBX, enter an access code, enter the dialout code, and can call anywhere
they need to. Of course, there are some drawbacks. Who is to stop phreaks from
finding the number and access codes and making long distance calls? Nobody.
That is the purpose of this file, to explain how this can be done.

The first thing to do is to find a PBX. There are two types; local PBXes and
800 pbxes. Obviously, the 800 pbxes are owned by large companies, and local
ones are owned by smaller companies. Both can be used to make free calls, but
it's easier to get caught on a PBX with an 800 number, because it'll have ANI.
But, only local PBXes should be used for hacking into other computer systems,
because the trace will lead only to the PBX. If you do this with an 800 number,
they need only to look at their bill to see where you called from. You can find
a PBX by scanning 800 numbers, or by scanning local exchanges. You will need a
scanning program like ToneLoc. Just do a scan for tones, not carriers.

Once you find a PBX, you will need to find out how long the codes are. Most are
4 digits, but they can be any number. Certain types of PBXes are very user
friendly. They will beep at any wrong number. If you find a PBX like this,
you're in luck. Grab a pencil and paper, and mark down your worksheet, which
will look basically like this:

1       1	1	1
2	2	2	2
3	3	3	3
4	4	4	4
5	5	5	5
6	6	6	6
7	7	7	7
8	8	8	8
9	9	9	9

Now start in order down one row. If you get a nuber that the PBX doesn't
beep at, circle it. Now, using that one number first, go down each row,
doing the same, using the same numbers all along. It's easy to find a code
like this.

Of course, most PBXes today aren't like this. They will give some sort of
signal when you enter an incorrect code. Fourtanetly, it's easy to determine
the code legnth this way. Just keep pressing buttons and waiting a second
or two after, and when it gives you the incorrect symbol, you know how many
numbers there are in the code.

Next, you will need to find the dialout code. It's usually 9, but it can be
any two number combination. You can use P-HACK to do this. Just configure it
for a 2 digit code, and in the dialing order field, put: 
E,,,,,CODE (whatever it is),,A,C
Code thief will recognize valid "codes" and record them for you. Now, you are
ready to call anywhere you want. Just dial the PBX number, the access code,
the dialout code, and where you wish to call.

Of course, if you actually do any of this, you could be in deep fucking shit
with the government, so don't do it. This file is for informational purposes
only.

Written and researched by: Drakkhar
