phrack/phrack16/4.txt

249 lines
6.7 KiB
Plaintext

===== Phrack Magazine presents Phrack 16 =====
===== File 4 of 12 =====
Hacking the Global Telecommunications Network
Researched and written by: The Kurgan
Compiled on 10/5/87
Network Procedure Differences
The Global Telecommunications Network (GTN) is Citibanks's international data
network, which allows Citicorp customers and personnel to access Citibank's
worldwide computerized services.
Two different sign on procedures exist: Type A and Type B. All users, except
some in the U.S., must use Type B. (U.S. users: the number you dial into
and the Welcome Banner you receive determine what sign-on procedure to
follow.) Welcome banners are as follows:
TYPE A:
WELCOME TO CITIBANK. PLEASE SIGN ON.
XXXXXXXX
@
PASSWORD =
@
TYPE B:
PLEASE ENTER YOUR ID:-1->
PLEASE ENTER YOUR PASSWORD:-2->
CITICORP (CITY NAME). KEY GHELP FOR HELP.
XXX.XXX
PLEASE SELECT SERVICE REQUIRED.-3->
Type A User Commands
User commands are either instructions or information you send to the network
for it to follow. The commands available are listed below.
User Action: Purpose:
@ (CR) To put you in command mode (mode in which you can put
your currently active service on hold and ask the network
for information, or log-off the service). (NOTE: This
symbol also serves as the network prompt; see Type A
messages.)
BYE (CR) To leave service from command mode.
Continue (CR) To return to application from command mode (off hold)
D (CR) To leave service from command mode.
ID To be recognized as a user by the network (beginning of
sign on procedure), type ID, then a space and your
assigned network ID. (Usually 5 or 6 characters long)
Status (CR) To see a listing of network address (only from @
prompt). You need this address when "reporting a
problem."
Type A messages
The network displays a variety of messages on your screen which either require
a user command or provide you with information.
Screen shows: Explanation:
@ Network prompt -- request for Network ID.
BAD PASSWORD Network does not except your password.
<address> BUSY The address is busy, try back later.
WELCOME TO CITIBANK. Network welcome banner. Second line provides address
PLEASE SIGN ON. # to be used when reporting "problems."
XXX.XXX
<address> ILLEGAL You typed in an address that doesn't exist.
<address> CONNECTED Your connection has been established.
DISCONNECTED Your connect has been disconnected.
NOT CONNECTED You're not connected to any service at the time.
NUI REQUIRED Enter your network user ID.
PASSWORD = Request for your assigned password.
STILL CONNECTED You are still connected to the service you were using.
? Network doesn't understand your entry.
Type B User Commands and Messages
Since the Type B procedure is used with GTN dial-ups, it requires fewer
commands to control the network. There is only 1 Type B command. Break plus
(CR) allows you to retain connection to one service, and connect with another.
Screen Shows: Explanation:
CITICORP (CITY NAME). Network Welcome banner. Type in service address.
PLEASE SELECT SERVICE
COM Connection made.
DER The port is closed out of order, or no open routes are
available.
DISCONNECTED You have disconnected from the service and the network.
ERR Error in service selected.
INV Error in system.
MOM Wait, the connection is being made.
NA Not authorized for this service.
NC Circuits busy, try again.
NP Check service address.
OCC Service busy, try again.
Sign-on Procedures:
There are two types of sign on procedures. Type A and Type B.
Type A:
To log onto a system with type A logon procedure, the easiest way is through
Telenet. Dial your local Telenet port. When you receive the "@" prompt, type
in the Type-A service address (found later in the article) then follow the
instructions from there on.
Type-B:
Dial the your GTN telephone #, then hit return twice. You will then see:
"PLEASE ENTER YOUR ID:-1->"
Type in a network ID number and hit return.
You will then see
"PLEASE ENTER YOUR PASSWORD:-2->"
Type in Network Password and hit return.
Finally you will see the "CITICORP (city name)" welcome banner, and it
will ask you to select the service you wish to log onto. Type the address and
hit return. (A list of addresses will be provided later)
Trouble Shooting:
If you should run into any problems, the Citicorp personnel will gladly
help their "employees" with any questions. Just pretend you work for Citibank
and they will give you a lot. This has been tried and tested. Many times,
when you attempt to log on to a system and you make a mistake with the
password, the system will give you a number to call for help. Call it and
tell them that you forgot your pass or something. It usually works, since
they don't expect people to be lying to them. If you have any questions about
the network itself, call 305-975-5223. It is the Technical Operations Center
(TOC) in Pompano, Florida.
Dial-Ups:
The following list of dial-ups is for North America. I have a list of
others, but I don't think that they would be required by anyone. Remember:
Dial-ups require Type-B log-on procedure. Type-A is available on systems
accessible through Telenet.
Canada Toronto 416-947-2992 (1200 Baud V.22 Modem Standard)
U.S.A. Los Angeles 213-629-4025 (300/1200 Baud U.S.A. Modem Standard)
Jersey City 201-798-8500
New York City 212-269-1274
212-809-1164
Service Addresses:
The following is a VERY short list of just some of the 100's of service
addresses. In a later issue I will publish a complete list.
Application Name: Type-A Type-B
CITIADVICE 2240001600 CADV
CITIBANKING ATHENS 2240004000 :30
CITIBANKING PARIS 2240003300 :33
CITIBANKING TOKYO 2240008100 :81
CITICASH MANAGER
INTERNATIONAL 1 (NAFG CORP) 2240001200 CCM1
INTERNATIONAL 7 (DFI/WELLS FARGO) 2240013700 CCM7
COMPMARK ON-LINE 2240002000 CS4
ECONOMIC WEEK ON-LINE 2240011100 FAME1
INFOPOOL/INFOTEXT 2240003800 IP
EXAMPLE OF LOGON PROCEDURE:
THE FOLLOWING IS THE BUFFERED TEXT OF A LOG-ON TO CITIBANKING PARIS THROUGH
TELENET.
CONNECT 1200
TELENET
216 13.41
TERMINAL=VT100
@2240003300
223 90331E CONNECTED
ENTER TYPE NUMBER OR RETURN
TYPE B IS BEEHIVE DM20
TYPE 1 IS DEC VT100
TYPE A IS DEC VT100 ADV VIDEO
TYPE 5 IS DEC VT52
TYPE C IS CIFER 2684
TYPE 3 IS LSI ADM 3A
TYPE L IS LSI ADM 31
TYPE I IS IBM 3101
TYPE H IS HP 2621
TYPE P IS PERKIN ELMER 1200
TYPE K IS PRINTER KEYBOARD
TYPE M IS MAI BASIC 4
TYPE T IS TELEVIDEO 9XX
TYPE V IS VOLKER CRAIG 4404
TYPE S IS SORD MICRO WITH CBMP
RELEASE BSC9.5 - 06JUN85
FOR 300 BAUD KEY ! AND CARRIAGE RETURN
CONFIG. K1.1-I11H-R-C-B128
ENTER TYPE NUMBER OR RETURN K
CONNECTED TO CITIBANK PARIS - CBP1 ,PORT 5
Have fun with this info, and remember, technology will rule in the end.