-=T H E D E F I N I T I V E G U I D E T O P H E A K I N G=- =T H E F I R S T R E V E L A T I O N=- -=B E I G E B O X I N G: T H E M A J O R L E A G E S=- -=B Y S Q U I L E R=- -=http://blacksun.box.sk=- The first thing you're going to have to do if you want to use this tutorial is build a beige box. After that, you'll have to upgrade to a Beige Box Advanced System (BBAS). You can find the information on these in my first tutorial or in the Appendixes at the end of this tutorial. Note: Anytime you see the words "lineman's headset" or "test phone", they are referring to the beige box. [PART 1: USING THE BBAS] Ok we're going to begin this with a scenario. Let's say you really need to contact your friend, but the feds have tapped your phone. You need to talk to your frined but can't risk the feds listening in. You can't use a payhpone because once you're more than 100 meters from your house (not even half the distance to the pay phone), a sattelite locks in on your position and takes pictures of you. You don't know what to do until you look around your room and see your BBAS. Of Course! I'll just use a neighbor's phone to call, you think to yourself, that's less than 100 meters away!. But it's 3 in the afternoon, and way to light out. you might be seen trying to use your BBAS. So you choose to lay low until around midnight when it's nice and dark (my apologies if you live in Alaska or Norway, it might take a little bit longer to get dark out). Ding! Dong! Ding! Dong! Ding! Dong! Ding! Dong! Ding! Dong! Ding! Dong! It's midnight, and you're ready to contact your friend. You quietly gather a 7/16 hex driver, your BBAS, a flashlight, and tiptoe out of your house. Then you dissconect the reciever from the base of the phone and hold it in your hand. You quickly scurry to your neighbor's back yard and get out your 7/16 hexdriver and flashlight. You turn on the flahslight and see that there is no need for the hex driver. You reach your hand under the phone box, push up, and the box is open. Now you attach the receiver back to the base. You then connect the BBAS to the phone box. Listening into the reciver, you hear no sound. Of course! the panic switch is in the up position, and it is not allowing current to go through. As soon you flip the switch down, the in-use light goes on. Dammit! They're on the phone! You unhook your BBAS, duck behind a bush and wait for a few minutes. When you hoop the BBAS back up, the light does not go on. They're off the phone, and you can now use your BBAS. You call up your friend, and give him the info he needs. This seems to work flawlessly, but it required a lot of planning, so let's analyze everything that was done. Hmm...let's start with the supplies you brough with you. You brought the 7/16 hex driver even though you didn't have to use it. This will probably be the case, because nowadays most ppone boxes can be opened easily. But it's good that you had it just in case. Now you must be wondering why you had to disconnect the receiver and hold it in your hands. This is a safety/convienince precaution. Let's say you are discovered and you have to run. You really don't want that receiver dangling all over the place. I learned this the hard way once when someone saw me beige boxing, and I had to run Blair Witch Project style to save my own ass. The receiver was bouncing all over the place and when I got home, my leg was all bruised up. Anyways, getting back to the scenario. I included the description of how to open to phone box (you, know push up, then open) because this is how you will generally be doing it if there is no way to use the hex driver. Now the next thing you do is push down the panic switch because no sound is coming from the reciver. This explains what the panic switch is without you panicing. Just think about it...when you hook up a beige box, what you're really doing is completing a circuit. If the panic switch is up, the circuit is not completed, hence why no sound comes from the reciever. If you're using the BBAS and you hear another party pick up the phone, lifting up the panic switch will break the circuit and immediatly disconnect the call. Once you flip the panic switch down, the in-use light goes on. Now we see that the panic switch is just rwally an "on/off" switch for the BBAS. Even though the "in-use" light on the phone is battery powered, pushing down the panic switch lets current from the phone line come in telling the phone whether or not to turn the light on. The amout of current from a phone line determines if it is in use. In this case, people are on the phone, so the current coming in tells the phone to light the in-use light. A few minutes later, when you rehook the BBAS, the current goes through but the light does not go on. This is because the amount of current that goes through tells the light not to go on. Back in the 80's, someone discovered how to take advantage of this. Have you ever heard of the black box? What it did was change the voltage of the phone line when the phone was picked up to the voltage of when it was hung up. This way you could make all the calls you wanted without the phone company even knowing you picked up the phone. ____________________________________________________________________________________________ [PART 2: REMOTE MONITORING] Ok, let's say you want to monitor someone's call. What are you going to do? Sit outside with your BBAS connected until someone picks up? The only **safe** way to monitor a line is from a **safe** distance. ***Note: Before you continue, keep in mind that I DO NOT promote eavsdroping on people's phone calls. In fact, I discourage it. Besides that, it's illegal anyway. The following is for informational purposes only.*** Of course you could get a really long wire for your BBAS and lead it underground to your house from someone elses, but this would be impractical. The proven way to monitor a line remotley is by making use of radio waves. In a nutshell, this requires making a transmitter and connecting it to the phone. Basically, you're going to turn a phone into a miniature radio station. This is done by making an FM transmitter and connecting it to the phone (you could use an AM transmitter but the quality would not be as clear and I have only included the schematic for an FM transmitter in this tutorial). Ok, I can tell that you're getting excited by now. But I think I am going to have to let you down. Notice before I said you connect the transmitter to the "phone" not the "phone line". Yup thats right, you can only monitor a single phone, not the whole line. ths means you have to have physical access to the phone. Of course you could take apart a phone (so it would be small enough) and hide it along with the transmitter in the phone box outside the house. But that would require you to keep the phone "off the hook" (I put that in quotes because if you took apart the phone there is no "hook" that it could be place on anyway). In a few minutes the line would lock out and disable the party from using it. and this would defeat the purpose of the transmitter. Have you wiped the tears yet? Don't worry, everything is ok. If you get this working it is really cool. When someone picks up the phone that is bugged, the conversation will be transmitted to an FM radio within 200 feet. It will be on a frequency of 88 to 94. Below I have a schematic, but first here are the parts and connections: ______________________________________ |Part |Description | |---------------|----------------------| |R1 |180 Ohm 1/4 W Resistor| |R2 |12K 1/4 W Resistor | |C1 |330pF Capacitor | |C2 |12pF Capacitor | |C3 |471pF Capacitor | |C4 |22pF Capacitor | |Q1 |2SA933 Transistor | |D1,D2,D3,D4 | 1SS119 Silicon Diode | |D5 |Red LED light | |S1 |SPDT Switch | |L1 |Tuning Coil | ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ ______________________________________ |Connection |To | |---------------|----------------------| |IN1 |Green Wire From Line | |IN2 |Red Wire From Line | |OUT1 |Green Wire From Phone | |OUT2 |Red Wire From Phone | ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ ***Note: If you see something listed twice conseculativley, it does not mean to use it twice, it is just to preserve the shape of the schmatic. For example let's say "A" is a resistor. A1 does not mean to use two resistors, that would look like: A1 A1 A2 *** ***Note: A "*" means a point of connection. For example, if you see | | B | | ---A---*---A--- | | B | | It means that wires "B" and "A" are connected (like there is no insulation on the wire at that point or something.) If you see | | B | | ---A-------A--- | | B | | It means wires "B" and "A" are not connected, but merely overlapping each other.*** ***Note: I made this ASCII version of the schematic from a much better GIF version that I found on "Aaron's Home Page" (http://www.aaroncake.net/circuits/phonebug.htm). Visit there to see the file.*** ***Note: I did not design this circuit! I only only built and made an ASCII schematic for it. It worked for me, but I bear no responsibility if it does not work for you, and neither does the webmaster of "Aaron's Home Page" because he didn't design it either!*** And finally what you've been waiting for..... ___________ |____o | | _______________________ | | | S1---*--|-----| | O--IN2--S1 | | |ŻŻŻŻ*ŻŻŻŻŻ|ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ|ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ| | | /Ż\ /Ż\ | | | O--IN1----------* | | | |---C1--| R1 X1 | | | | | | | | | | |_____|____* | Q1*---| | | | | | |---R2--*---Q1 C2 | | | _____* | | | Q1* | | | O--OUT2---------|-----| | | | | | | | D5 | | | *---C3--| *---*------| | | /Ż\ /Ż\ | | | | | | | | L1 C4 | | | | | | | | O OUT1 | |____*_____*_______________*___*________________| ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ D1-D4 Just get the right parts and hook up the right connections and it will work fine. ____________________________________________________________________________________________ [APPENDIX A: BEIGE BOX PLANS] Important Note: The following directions for the Beige Box and BBAS are pulled directly from my first tutorial on phreaking. If you're an experienced phreaker you can probably skip ahead to the part on making your Beige Box into a BBAS. If you're a begginer I highly suggest that you read my first tutorial on phreaking as well as the tutorial written by "the psycho". Both of these tutorials can be found in the tutorials section at http://blacksun.box.sk. If you build a Beige Box and a BBAS from the directions in the first tutorial, you can skip this part as well as the next. There is no sense reading the directions over again if you already have your Beige Box and BBAS. A Beige Box, huh? What is it? Did a phone guy ever come to your house to repair or install something? Or have you seen the phone working up top the phone pole? Look at his tool belt. There is a bright orange phone, you can't miss it. This phone is called a lineman's headset. Usually, after the phone guy repairs a line, or installs a new one, he uses the lineman's headset to test and see if the line is working. This is what we'll be making, but we have other purposes for it. Basically, the beige box enables a phone to be hooked directly to the line. Usually, you hook the phone up to a jack, which is hooked up to the line, however the beige box eliminates the need for a jack. Can you think of any uses for this? Yup, that's right, with the beige box, you can use someone's phone line without having to go inside their house and hook up to the jack. Don't get so excited just, yet, we haven't built it yet. parts you will need for this: -A phone -phone wire with modular jacks at both ends. (one goes into the phone, the other goes into the jack) -alligator clips Tools you will need for this: -wire stripper -scissors, or knife -7/16 hex driver (for later) that's all? Yup! With such few things needed to make this, it can't be hard, and it's not. Directions: Step 1: If one end of the phone wire is not already connected to the phone, do so now. Step 2: Cut off the modular jack at the other end. Strip about 6 inches of the outside wire. This is not easy, because the wire is very thick. You may want to take the scissors and make a small cut in the wire (not too deep or you will cut the inside wires) and strip it off from there. Step 3: There should be four wires inside. Yellow, green, red and black. Discard the black and yellow, wires, you don't need them. Concentrate on the red and green wires. Step 4: Strip the green wire. Now strip the red wire. Step 5: Connect one alligator clip to the red wire, then connect one to the green wire. CONGRATULATIONS, you have a beige box. Were those directions too hard to follow? Here's a step by step schematic: Step 1: __________________________ | | | Phone | |_________________________| Modular Jack-> ||| Phone wire----->|----------------- Step 2: Strip Wire Around Here ____ __________________________________________________| | Phone wire->--------------------------------------------------|___| Cut here--------^ ^ Modular Jack---------^ Step 3: it [the wire] should look (somewhat) like this: ___________________________________ |_ - ^------|Wires to concentrate on _ <----| - __________________________________| All in all, it should look like this: _________________ | | | Phone | |_______________| ||| |______________________|---|<> <- |---|<> | Alligator clips---^--| Now that you've built your beige box, let's see what you can use it for. You have just built the most basic beige box, which means it has no security options. When using this box, it is very easy to get caught. That is why you will only be using this beige box on your own phone line. In the next part, I will show how to build the Beige Box Advanced System (BBAS), my own advanced version of the beige box. You can use the BBAS on other people's phone lines. But first, let's see how we attach the beige box to your phone line. You will need the 7/16 hex driver for this. First thing is to locate the phone box outside your house. It is usually on the side of your house, or in the backyard. Most of the time it is near your heating shit. It is usually gray or beige, and has a bell logo on it. To open the box put your hand on the bottom, push up and open it. If that fails pop it open with the hex driver. All you have to do now is connect the alligator clip on the red wire to the wire in the box, do the same with the green wire. This is hard to explain so I've drawn a schematic: It should look (somewhat) like this: _____________________________________ | | | | <----Phone Box | ** <-----Screws--> **>=<| | | Alligator clip^ | | | | | | Red Wire (sometimes green-->| | | | | | | | | |____|______________ | Screws--> ** | ^ | | |Modular Jack cut from here------^ | | | | | | | | | | | Green Wire (sometimes red)-->| | | | | | | | | | |<--Phone Wire | ** <----Screws--> **>=<| | | | ^ | | | Alligator Clip^ | | | | | ------------------------------------- | | | _____________________________________ | | | | | | | | Phone |______________| | | | | ^Phone Wire ------------------------------------- This maybe hard to follow, but try, reading schematics is something you'll have to do if you want to build boxes in the future. Now pick up the phone. If you hear a dial tone, you did everything correctly. If not, retrace your steps to see where you went wrong. ____________________________________________________________________________________________ [APENDIX B: BBAS PLANS] Instead of bulding the BBAS from scratch, we're going to modify the beige box we already have. Although we're only going to make some small changes, these are very important changes. The main improvement on the BBAS is that is has features to prevent you from getting discovered and caught. And if I must, once again-- there is no sure way to prevent getting caught. But don't get discovered, and don't do anything that bad. Well since we're only going to be modifying, the beige box, we won't need many parts. Here is a list of things you'll need for the BBAS: -your beige box -a phone with an "in-use" light -batteries -clip, to hold down mute. (This is hard to find and use, but very useful) -Scissors -Wire Strippers -A simple switch (can be bought for under $2USD at any hardware store Ok, here's what to do: STEP 1: Switch the phone you have already with the phone that has the "in-use" light. STEP 2: Cut the fone wire in half around the middle of it. STEP 3: Strip some wire off both of the new ends of the wire. The switch should have 2 screws on it. STEP 4: Wrap one of the new ends of the wire (both wires, red and green) around one screw, and the other new end around the other screw. It should look (somewhat) like this: ________________ | | | Phone |------====*|||||*===--------===== |_______________| ^ ^ ^ ^ ^ ^ Wire stripped here--^ ^ ^ ^ ^ ^ Red and green wires----^ ^ ^ ^ ^_____ | Screws--^ ^--Switch ^ | |________^ ^ |________________________________^ Now lets how to explain how to use it. Put the clip (if you have one) on the mute button of the fone. This is for the occasion that you plug into someone's line while they're on the fone, and you don't want them hearing any noises. Put the batteries in the fone. For the light, will be in the fone manual. The switch is a "panic" switch. It is used to immediately disconnect your call if you're on someone's fone and then they pick up. ____________________________________________________________________________________________