Phrack Magazine issue 49

.oO Phrack 49 Oo.Volume Seven, Issue Forty-Nine 1 of 16Issue 49 Index____________________P H R A C K 4 9November 08, 1996____________________Welcome to the next generation of Phrack magazine. A kinder, gentler, Phrack.A seasoned, experienced Phrack. A tawdry, naughty Phrack. A corpulent,well-fed Phrack. Phrack for the whole family. Phrack for the kids, Phrackfor the adults. Even Phrack for the those enjoying their golden years.If you thought 48 was a fluke, here is 49, RIGHT ON SCHEDULE. Full speedahead, baby. We promised timely Phrack. We promised quality Phrack. Hereare both in ONE CONVENIENT PACKAGE! We trimmed the fat to bring you the leanPhrack. Chock full of the healthy information you need in your diet. Allnatural. No artificial ingredients. No snake oil. No placebo effect.Phrack is full of everything you want, and nothing you don't.This issue is the first *official* offering from the new editorial staff. Ifyou missed them, our prophiles can be found in issue 48. Speaking of 48,what a tumultuous situation article 13 caused. All that wacking SYN flooding.Well, it got the job done and my point across. It got vendors and programmersworking to come up with work-around solutions to this age-old problem. Untilrecently, SYN-flooding was a skeleton in the closet of security professionals.It was akin the crazy uncle everyone has, who thinks he is Saint Jerome. Weall knew it was there, but we ignored it and kinda hoped it would go away...Anyway, after this issue, I hope it *will* just go away. I have doneinterviews for several magazines about the attack and talked until I was bluein the face to masses of people. I think the word is out, the job is done.Enough *is* enough. " SYN_flooding=old_hat; ". Onto bigger and better things.A few more quick points (after all, you want Phrack Warez, not babblingdaemon9). I want to thank the community for supporting me (and co.) thus far.Countless people have been quite supportive of the Guild, the Infonexus, andof Phrack. Time and work do permit me to get back to all of you individually,so just a quick blurb here. Thank you all. I will be using Phrack as a toolto give back to you, so please mail me (or any of the editors with yoursuggestions). This is *your* magazine. I just work here.Most of all, I am stoked to be here. I am giving this my all. I'm fresh, I'mready... I'm hyped + I'm amped (most of my heros don't appear on no stamps..).Drop us a line on what you think of 49. Comments are encouraged.Bottom line (and you *can* quote me on this): Phrack is BACK.- daemon9

[ And remember: r00t may own you, but the Guild loves you ][ TNO, on the other hand, doesn't even fucking care you exist ]---------------------------------------------------------------------------Enjoy the magazine. It is for and by the hacking community. Period.Editors : daemon9, Datastream Cowboy, VoyagerMailboy : Erik BloodaxeElite : Nirva (*trust* me on this one)Raided : X (investigated, no charges as of yet)Hair Technique : Mycroft, Aleph1Tired : TCP SYN floodingWired : Not copping silly slogans from played-out, vertigoinducing magazines.Pissed off: ludichristPissed on: ipNews : DisordeRThanks : Alhambra, Halflife, Snocrash, Mythrandir, Nihil, jenf,xanax, kamee, t3, sirsyko, mudge.Shout Outs : Major, Cavalier, Presence, A-Flat, Colonel Mustard,Bogus Technician, Merc, Invalid, b_, oof, BioHazard,Grave45, NeTTwerk, Panzer, The Bishop, TeleMonster,Ph0n-E, loadammo, h0trod.Phrack Magazine V. 7, #49, November 08, 1996. ISSN 1068-1035Contents Copyright (c) 1996 Phrack Magazine. All Rights Reserved.Nothing may be reproduced in whole or in part without writtenpermission from the editors. Phrack Magazine is made availablequarterly to the amateur computer hobbyist free of charge.Any corporate, government, legal, or otherwise commercial usageor possession (electronic or otherwise) is strictly prohibited withoutprior registration, and is in violation of applicable US Copyrightlaws. To subscribe, send email to phrack@well.com and ask to beadded to the list.Phrack Magazine603 W. 13th #1A-278 (Phrack Mailing Address)Austin, TX 78701ftp.fc.net (Phrack FTP Site)/pub/phrack http://www.fc.net/phrack (Phrack WWW Home Page) phrack@well.com (Phrack E-mail Address)or phrackmag on America Online Submissions to the above email address may be encryptedwith the following key (note this is a NEW key):-----BEGIN PGP PUBLIC KEY BLOCK-----Version: 2.6.2mQENAzJuWJgAAAEH/2auap+FzX1AZOsQRPWRrRSOai2ZokfVpWWJI8DRuSpX9l7w5qWHrZdL/RweA4lgwAmcrAOD6d8+AzZfXEhkKi92G9ZNy2cjsb5g7oamkcPmC03h

pdhRe5rHXDWUtXDEhHlkV0WvkLXrhFijW2VdJ2UDFyFd8q0nBSIz+JTGneNO0w4qaowCx3gZpEb4hkEU1LFoJXywZhnBg06jSxD9exbBF2WKeealqTlntlcsMmeJ3OdS9fqnGI19BWirqkIJYtNXdzP4M2usOEvikrdhXwSbCNcDGcY6pyKco2rKbBUj5V2I8/2L0TSGSaRBZ/YKRplwycldy63UVVTLMNGQCCUABRG0KlBocmFjayBNYWdhemluZSA8cGhyYWNrZWRpdEBpbmZvbmV4dXMuY29tPg===eHJS-----END PGP PUBLIC KEY BLOCK-----ENCRYPTED SUBSCRIPTION REQUESTS WILL BE IGNOREDPhrack goes out plaintext... You certainly can subscribe in plaintext.oO Phrack 49 Oo.-------------------------------------Table Of Contents1. Introduction 7 K2. Phrack loopback 6 K3. Line Noise 65 K4. Phrack Prophile on Mudge by Phrack Staff 8 K5. Introduction to Telephony and PBX systems by Cavalier 100K6. Project Loki: ICMP Tunneling by daemon9/alhambra 10 K7. Project Hades: TCP weaknesses by daemon9 38 K8. Introduction to CGI and CGI vulnerabilities by G. Gilliss 12 K9. Content-Blind Cancelbot by Dr. Dimitri Vulis 40 K10. A Steganography Improvement Proposal by cjm1 6 K11. South Western Bell Lineman Work Codes by Icon 18 K12. Introduction to the FedLine software system by Parmaster 19 K13. Telephone Company Customer Applications by Voyager 38 K14. Smashing The Stack For Fun And Profit by Aleph1 66 K15. TCP port Stealth Scanning by Uriel 32 K16. Phrack World News by Disorder 109K575k-------------------------------------"...There's MORE than maybes..."- Tom Regean (Gabriel Bryne) "Miller's Crossing"[ Obviously referring to the blatent truism that Phrack IS back ]"...Fuckin' Cops..."- Verbal Kint/Keyser Soze (Kevin Spacey) "The Usual Suspects"[ Not sure what was meant by that.. ]"Got more funky styles than my Laserjet got fonts"- 311/Grassroots "Omaha Stylee"[ That would be referring to us, of course ]EOF.oO Phrack Magazine Oo.Volume Seven, Issue Forty-Nine File 2 of 16