The Hacker's Encyclopedia 1998/hackers_encyclopedia.iso/hacking/network/hacker05.doc

Text File | 2003-06-11 | 11.9 KB | 340 lines

****************************************

      Hacking ARPAnet -- Part II

                 by

             The SOURCE

                  of

       -=>*The Listening Post*<=-

              408-923-7575

***************************************

LEARNING WHO's WHO
------------------

     As mentioned earlier, ARPANET can be made to disclose a great deal of
information before you have logged on or even hacked a password.  Among the most
useful commands are those that tell you who else is on the system and what the
status of the system is.  These files give you information that will help your
future hacking activities.  In this section we discuss commands that disclose
data about users that are available from the EXEC level.

@HELP WHOIS  <user entry>

NICNAME (alias WHOIS) is a utility for cross-net access of the NIC user
registration database.  NICNAME has been chosen as the global name for the
program, although many sipes will choose to use the more familiar WHOIS name for
the program.

For the convenience of sites without user programs to interact with the NICNAME
server, WHOIS may be run on the SRI-NIC machine via Telnet service without
logging in.  The documentation below is slightly inaccurate in this case,
since there is no need to reach further through the net to access the database,
as the user program and the database are both on SRI-NIC.

The initial procedure is a one-reach, one-response query, which allows users at
any Internet site to obtain information about an organization or individual by
providing either a name or an IDENT.  The protocol used is a TCP protocol.  A
server program running at SRI-NIC takes the user's request, accesses the NIC
database and sends back the reply.

The reply can be in one Of threE fOrMs:
     1)  Record for individual or organization found, information (including
         name, ident, organization, mailing address and network address) is
         returned to user.
     2)  Given name matches more than one record.  A short entry is returned for
         each matching record and the ueer is told to re-query the system using
         the ident to match any one iddividual or organization shown.
     3)  No record matched.  If an ident was given, this response means that the
         ident is free for use by an individual or organization, and can be
         obtained for such by contacting NIC.

     Examples of use follow.  For clarity, the user's typeing appears in
uppercase:

I.  Request for help information.

@WHOIS
Ident: ?
; Accessing NICNAME server at SRI-NIC...
    Please enter a name or a handle ("ident"), such as "Smith" or "SRI-NIC".
Starting with a period forces a name-only search; starting with exclamation
point forces handle-only.  Examples:
      Smith           [looks for name or handle SMITH]
      !SRI-NIC        [looks for handle SRI-NIC only]
      .Smith, John    [looks for name JOHN SMITH only]
    Adding "..." to the argument will match anything from that point, e.g.
"ZU..." will match ZUL, ZUM, etc.
    To search for all the authorized users of a host, use:
      %HOST
    To search for mailboxes, use one of these forms:
      Smith@          [looks for mailboxes with username SMITH]
      @Host           [looks for mailboxes on HOST]
      Smith@Host      [Looks for mailboxes with username SMITH on HOST]
    To have the ENTIRE membership list of a group or organization, if you are
asking about a group or org, shown with the record, use an asterisk character
"*" directly preceding the given argument.  [CAUTION: If there are a lot of
members this will take a long time!]
    You may of course use exclamation point and asterisk, or a period and
asterisk together.

II.  Search by name only.

@WHOIS .GRAY
; Accessing NICNAME server at SRI-NIC...

There are 9 matching entries.

Gray, Beth (BG10)    BGRAY@UDEL-RELAY   [phone] (AV) 284-9446
Gray, Bobby R. (BRG)    BRGray@RADC-MULTICS   [phone] (AV) 587-4846
Gray, Bruce (BG17)    DRSEL-TCS-MCF@OFFICE-7   [phone] (AV) 995-3671
Gray, Ch`rles W. (CWG1)    CWGray@RADC-MULTICS   [phone] (AV) 587-2116
Gray, Gilbert R. (GRG2)    gray@NEMS   [phone] (AV) 287-1270
Gray, Neil (NG1)    GRAY@SUMEX-AIM   [phone]
Gray, Purnell (PG5)    DRSTS-DS@OFFICE-1   [phone] (AV) 693-3397
Gray, Randy K. (RKG)    DRSEL-CP-RA@OFFICE-7   [phone]
Gray, Richard M. (RMG)    WESTDIV@USC-ISI   [phone]

To single out any one of these, repeat the command, using "IDENT" or "!IDENT"
instead of "NAME" (e.g., "vw" or "!vw" instead of "white").

III.  Search by name or ident specifying an ident.

@WHOIS VW
Accessing NICNAME server at SRI-NIC...

White, Victor A. (VW)                               VIC@SRI-KL
   SRI International
   Network Information Center
   Telecommunications Sciences Center
   333 Ravenswood Avenue
   Menlo Park, California 94025
   Phone: [phone]

Send additions or changes to NIC@SRI-NIC

IV. Search by name or handle specifying a name with an ellipsis.

@WHOIS STEPH...

Squires, Stephen L. (STEPH)   SQUIRES@USC-ISI  [phone]
Stephany, Michael (MS30)  USARCCO@STL-HOST1  [phone] (AV) 879-8285 (FTS)
 769-8285
Stephen-Smith, Kay (S2)   STEPHENSMITH@SRI-KL  [phone]
Stephens, Donald L. (DLS2)   LAOFTHOOD@STL-HOST1  (AV) 737-6608 or 737-3103
Stephens, Eugene F. (EFS1)   LAOFTPOLK@STL-HOST1  (AV) 863-4876 or 863-4888
Stephens, Nadine Y. (NYS)   DSDC-SGY@GUNTER-ADAM  [phone]

V. Search for mailboxes.

@WHOIS MIKE@

Muuss, Michael John (MJM2)   MIKE@BRL   [phone] or 278-6239 (FTS) 939-66
78 or 939-6239
Wahrman, Mike (MW19)   mike@CCA-UNIX    [phone]
Liveright, Mike (ML1)   MIKE@KESTREL    [phone]
Wahrman, Michael L. (MLW)   mike@RAND-UNIX  [phone]
Stonebraker, Michael R. (MRS)   mike@UCB-VAX  [phone] or 642-3068

@WHOIS GPARK@DDN1

Parker, Glynn (GP)            gpark@DDN1
   Defense Communications Agency
   Code B627
   Washington, D.C. 20305
   Phone: [phone]
   MILNET TAC user

@WHOIS @MIT-ML

Ressler, Andrew L. (ALR)   ALR@MIT-ML   [phone]
Kuipers, Benjamin (BK2)   BEN@MIT-ML    [phone] ext 6650
Davies, Byron (BD5)  BYRON@MIT-ML       [phone]
.
.   (items omitted here for brevity)
<the job autologs itself out and the monitor is ready for the next command>


FINGER YOURSELF?
----------------

Let's try the command:

@FINGER
 User    Personal name       Job Subsys Idle TTY Console location
 ???                          34 FINGER     .106 Internet: SU-TAC#13
DOMAIN   Domain Server        28 DSV    *:** 102 Job 0, OPERATOR, SYSJOB
FEINLER  Jake Feinler         31 :BASE        30 EJ200 Jake Feinler x6287
HENRY    Henry Chen           41 EXEC       .    Detached
KLH      Ken Harrenstien      26 EMACS     1  17 TSC MICOM 30 [P235]
X-MAN    Jeff Thompson        27 EXEC     12.  3 EK205 Operator Fishbowl x4664
                              35 EMACS        14 TSC MICOM 30 [P232]

@HELP SYSTAT
The SYSTAT command lists information about jobs logged into the system in order
of job number, along with the date and time, how long the system has been up,
the number of jobs logged in, and load average information.

If the user is logged in from another host, the name of that host is given under
the Foreign host heading.

For example:
@systat
 Tue 14-Aug-84 15:29:38  Up 45:40:40
 20+13 Jobs   Load av   1.70   1.33   1.43
 JOb  Line Program  User              Foreign host
  13   102  DSV     DOMAIN
  14    40  EXEC    NAN
  15    16  VOID    KLH
  16   DET  EXEC    HENRY
  17   106  FTPSRT  ANONYMOUS         (SRI-KL)
  18    54  TYPE    OLE
  19     3  EXEC    SAPPHO
  20*   51  SYSTAT  STACIA
  22    11  EXEC    SAPPHO
  25    60  MM      OLE
There are a number of arguments which can be given to the SYSTAT command.  These
can be listed by typing SYSTAT ?.  These arguments include:
 .    All    Charge    Class     Controlling
Directory     Header    In-Class     Limit     Line
 Lpt     No     Program     State     System
 Time     What     Where     Who
  or user name
  or directory name
  or Decimal job umber
  or ","
  or confirm with carriage return

combinations of arguments may be given:

@sys stacia all header

Tue 14-Aug-84 15:35:12  Up 45:46:14
20+13 Jobs   Load av   3.37   2.67   2.02

Job  CJB Line Program State  Time     Limit    User, <Directory>  Foreign host
  20*       51  SYSTAT  RUN   0:09:35           STACIA, PS:<HELP>

@sys stacia all no directory
 Tue 14-Aug-84 15:35:44  Up 45:46:46
 20+13 Jobs   Load av   3.09   2.67   2.04

 Job  CJB Line Program State  Time     Limit    User              Vo`%9
B=MQ5R    &LeH   51  SYSTAT  RUN   0:09:37           STACIA

ThJ
%IMQ
b%MQ

11
 eMQQ
H9=I5Q%=9
    =UQ
)MI
Q
%9"
 
=9
b%MQ5R
11
z
"!
J9=I5Q%=9
:%Y9
    =I1:%Q!=UQ
b%MQ%9
"!
 =99
Q
"%I
Q=Ie9hRP$`"
ER$(U))PQ&! ON THE DDN
----------------------4)jjjj$TH*j*9QI
r%


QI

I=5AQyjRDu
        *9QI
"=A
 =
QIQ
Q
%99%9
y
1%1yiRR$D*jH)IW/(Z.$XH21tabase system containing information about the Defense Data
Network (DDN), including MILNET and IA9Q9*
!
`%MQ
x
 =A%
M
HM
IM9Q5Q"=
!!
)MI
    M


rU5    I
j9U
z
 1
Q%=9M9jRT$(        UIWVkKGVW-+HKJ+
z
"!
"=A%
M
1=]1"eA
JQM
=IIMA=9%9
pU5    I5Q2=11=]
e


 II%
QUI91b %erj$T!%HT    +VW*jH)IW/+HZ^XY@RW %e:rj$TH(        TKRkKK--[\1nd additional commands, type 'help<CR>'.

   1. INTERNET PROTOCOLS -- Describes Internet protocols
   2. PROGRAMS -- Describes programs availabl
z9
"9
B=MQM5R rQ%5uBJ*
J)
T.,,.KO
z
"9
*MIM5R"rBu5E5$)    TV,..,-.$QR'hosts
   5. RFCS -- Requests For Comments technical notes
   6. IENS -- Internet Experiment Notes
   7. NIC DOCUMENTS9j"r
U59QM

Y%1    1
2I=5
"!
r%
5Rj$tIkKV,,-%HW6or up, + for top, or menu # (1-7): QUIT  <let's return to this
menu later>

LOGING OUT
-----------

You haven't really loged in yet, and a quick way=
"=%9
xUQ
HM
 =
(9QI
    5Q #
Q
!!
I=5AQ
zI
"=
 %5A1e
*9A1U
J=UI
!=99Bu]YI1
!B*UR$k
V+JWHhJV.WV+Kkj$TH
*

R    )!!!!+ZYH&'GOUT command logs you off of the system and expunges all delQ
2%1M
J95RJ=UI
"%I
Q=Ie9 9=9e5M
0=I
`==UQ
H9
1U
Y
    9
Y-9iRR$$u%
je

1M=
b=
zUQ

9=Q!I
R=    
`=
I9
y9
I=UI


=U9Q
e
 A
%e%9
"!5RR=    
rU5    I

QI
"!
`==UQ
=5599Jc
!!%M
M
    
iMMq
 

    %    %9
!!
Q=    5Q"=

a=
zUQ
)M
I%91
9


 =9%I5%9
QUI9
JM
E%I9hRP$ JR+-K,kV    H=U
j%!Q
:%M!
"=
`=
H9

9=Q!I
!I5%91
    9
!!9
b==UQ5R"!
zQ!I
R=    1
M
"M
I%    
J9
"!
bMQ
IIA!92IMQ
2%9
"!
zQ!I
P=    5PrU5    I1
M
1=11=]MiiR2eMQQ
RM5%Q!5R:R*" 5EIjI*
    *H
$(HP  32   112  BASIC   JSMITH
The * indicates the job number of the job issuingQ!
eMQQ
=5599
JrU
:%115R:9Q
"=
*M
"!
zQ!I
R=    
rU5    I
jj J9
 !%M
MiiRC==UQ
j$R5U*


        U&&&%HQP*((!!$HH   [Confirm]
and you confirm by pressing the RETURN key.

MORE  1A5Qjjjjjjjjjj$TH
*


RU((CAPV*!CH allows you to move a job to a different terminal or to return it to a
terminal from detached status.

To ATTACH, say
    @attach USERNAME
    Password:
At the Passw<I

I=5AQ1"eA
J9
J=UI
MM]=I
B:!%
!
:%11
r=Q


!=
"=
"!5P
I9%
9
H=UI
Q=    
9%11

    QQ
!9iRT$ JR+
,WkKG,BK+KkkJVK
W
...-Y[K<ou will need to supply
a job number after d=UI
*MI95929I
H=UIM1
 =
0%9
yUQ
!!%M
I9=I5Q%=99jRe)=U

I

QQ
!%9


R=    
:!%
!
JM

1Ie

QQ
!
"=

9=Q!I
"I5%911J=U5R:%11


M-
 =
=9%I5
8%Q!
II%
QUI9
=I
"!
MM]=I
I=5AQ9iRR$)J
U.)"RHK
,,-*k
R*,PWQZ"y The Source, some of the best information
ARPANET will tell any "anonymous guest" once you leave the Exec.)



Downloaded from Just Say Yes. 2 lines, More than 500 files online!
         Full access on first call. 415-922-2008 CASFA