[ News ] [ Paper Feed ] [ Issues ] [ Authors ] [ Archives ] [ Contact ]


..[ Phrack Magazine ]..
.:: The MCX7700 PABX System ::.

Issues: [ 1 ] [ 2 ] [ 3 ] [ 4 ] [ 5 ] [ 6 ] [ 7 ] [ 8 ] [ 9 ] [ 10 ] [ 11 ] [ 12 ] [ 13 ] [ 14 ] [ 15 ] [ 16 ] [ 17 ] [ 18 ] [ 19 ] [ 20 ] [ 21 ] [ 22 ] [ 23 ] [ 24 ] [ 25 ] [ 26 ] [ 27 ] [ 28 ] [ 29 ] [ 30 ] [ 31 ] [ 32 ] [ 33 ] [ 34 ] [ 35 ] [ 36 ] [ 37 ] [ 38 ] [ 39 ] [ 40 ] [ 41 ] [ 42 ] [ 43 ] [ 44 ] [ 45 ] [ 46 ] [ 47 ] [ 48 ] [ 49 ] [ 50 ] [ 51 ] [ 52 ] [ 53 ] [ 54 ] [ 55 ] [ 56 ] [ 57 ] [ 58 ] [ 59 ] [ 60 ] [ 61 ] [ 62 ] [ 63 ] [ 64 ] [ 65 ] [ 66 ] [ 67 ] [ 68 ]
Current issue : #45 | Release date : 1994-03-30 | Editor : Erik Bloodaxe
IntroductionErik Bloodaxe
Phrack Loopback Part IPhrack Staff
Phrack Loopback Part II / EditorialPhrack Staff
Line Noise Part IPhrack Staff
Line Noise Part IIPhrack Staff
Line Noise Part IIIPhrack Staff
Phrack Prophile on Control CControl C
Running a BBS on X.25Seven Up
No Time for GoodbyesEmmanuel Goldstein
Security Guidelinesunknown
Ho Ho Con Miscellanyvarious
Quentin Strikes AgainWhite Knight & The Omega
10th Chaos Computer CongressManny E. Farber
Defcon II informationPhrack Staff
VMS Informationvarious
DCL BBS PROGRAMRaoul
Hollywood-Style Bits & BytesRichard Goodwin
Fraudulent Applications of 900 ServicesCodec
Screwing Over Your Local McDonald'sCharlie X
The Senator Markey Hearing Transcriptsunknown
The Universal Data ConverterMaldoror
BOX.EXE - Box Program for Sound BlasterThe Fixer
Introduction To Octel's ASPENOptik Nerve
Radio Free Berkeley Informationunknown
The MCX7700 PABX SystemDr. Delam
Cellular Debug Mode Commandsvarious
International Scenesvarious
Phrack World NewsDatastream Cowboy
Title : The MCX7700 PABX System
Author : Dr. Delam
                              ==Phrack Magazine==

                 Volume Five, Issue Forty-Five, File 25 of 28

****************************************************************************


 ///////////////          THE MCX7700 PABX SYSTEM            ////////////////
///////////////   Brought to you courtesy of [)elamo Labz   ////////////////
//////////////    and the ChUrCH oF tHE Non-CoNForMiST++  ////////////////
               (warespeoplessuckwarespeoplessucksuksuk)

Greetings from myself, The Evil [)r. [)elam!

In this text file I present a PBX that identifies itself as an "MCX7700"...
probably the easiest PBX hack you'll find, and not a bad system... I've seen
worse.



Dis'-claimer: (This is the part where I get to Dis' the system.)
-------------
This particular system is wide open and it's not my problem the owners
decided to buy a lame system.  Via freedom of the press I am publishing
my findings, so if anyone gets pissed off about this file *PHUCK 0FF*!



Ab-Using the system:
--------------------
Once a data connection is established, press the '*' key to enter
programming mode.  In programming mode, all commands are given as 2 digit
combinations.  Some of the commands are macros of other commands. Example:
command 50 will do a command 15 plus enter a response to the question "Clear
all call records Yes/No".  This particular system uses only extensions..
not accounts, but has the capability to do both.  The system sends EOF
(CTRL-Z) characters after every command, this is NOT something I typed.
I replaced all occurrences of CTRL-Z characters with <-CTRL Z-> in this phile
for obvious reasons.



Note to |<odez |<iddiez:
------------------------
For all you kiddiez who think you can bang the fuck outta codez and never
get caught, you might think again after reading this phile.  Command 55
"Exceptions report" is most likely what the system owner looks at every
month.  The report includes Most Expensive Calls, Longest Calls, and Most
Frequently Called Numbers.  Avoiding being caught is as simple as hiding
among the rest of the crowd. I.E. don't fucking call Japan or stay on for 8
hours, and don't call the same BBS 100 times on a code in a month.  The
administrator most likely will glance at the printout and see which
department has a fuckup in it who calls his mistress in Egypt every day, and
go rag him out... if you're not one of the top in the exceptions report,
chances are they'll never know.  If you happen to have the dataline to the
PBX then who the fuck cares.. just clear the fucking call records.


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


List of Commands:
-----------------
00 Terminate programming
10 System parameters menu (PRINTER = 1 / PABX = 2 / REPORT = 3 / OPTIONS = 4)
11 Change current time
12 Change current date
15 Clear all call records Y/N
16 Set start date
17 Set trunk assignments
18 Set group number
19 "STORED NUMBER ENTRY, 4=ABVD, 5-8=OCC ?"
30 Show system parameters
31 Summary of extensions sort
32 Summary of accounts sort
33 Summary of departments sort
34 Summary of company sort
35 Summary of trunks sort
36 Report of all call records
37 Show trunk assignments
38 Show extension/department assignments
39 Show stored numbers
43 <this command froze>
44 Reports a number
45 ?
46 Block Check
50 Clear all call records macro.. pipes a yes into command 15
51 <terminated programming>
52 <terminated programming>
53 Sort call stats by a specified phone number
54 Area code sort
55 Exceptions reports (Most expensive / longest / most frequent calls)
60 "INTERACTIVE MODE"
61 <strange>
62 <nothing>
63 <this command froze>
64 Displays a number (5997777B)
65 Displays system type (MCX-7700/PC V4.0.5  1189)
67 Set SMDR input
68 Display SMDR inputs
69 <shows a line of numbers 01-79>
70 Full buffer program
71 Auto report program 1
72 Auto report program 2
73 Set index number
74 Set rate table
75 Rate table sizes
76 Pricing types
79 <nothing>
80 <strange>
90 Display full buffer program
91 Display auto report program 1
92 Display auto report program 2
93 List index table
94 List rate table
95 Display rate table sizes
96 Display pricing types
97 Invalid command
98 Invalid command
99 Call record dump


"*" key starts programming mode
<ESC> key aborts commands: "+++ FUNCTION CANCELED +++"


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Here's a capture from a session online. (edited for brevity)
Settings: Wordlength 8, Parity None, Stop bits 1
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

CONNECT 1200

<< Pressed '*' key >>

PROGRAMMING ENABLED 09/05/92  8:31A
<-CTRL Z->
COMMAND ?15
CLEAR CALL RECORDS - ARE YOU SURE ? <-CTRL Z->
COMMAND ?17
SET TRUNK ASSIGNMENTS

POSITION ? -+++ FUNCTION CANCELED +++
<-CTRL Z->
COMMAND ?30

SYSTEM PARAMETERS]

PRTR  DIAGNOSTICS  SMDR  FORM-FEED     EXPAND      ESC
TYPE  A    R    D  BAUD  SIM   LNG   ON     OFF    SEQ
 2    N    N    N    2    N    66    014    015    000

 ACCOUNTS      ------TRUNKS------   EXT   ACCESS   TOLL
SIZE    NO.    NO.   '-'  GRP  EQP SIZE  ABS  COST DIG
 04    1024    040    N    2    3    3    Y    N    1

CALL   ----DROP OR REJECT---  AUTO  TO-  LIST
GRACE LOC  ACT  INC  TRK  EXT  PRD  DAY  NULL
 05    N    N    N    N    N    0    Y    N

SER  PC   ZERO
IAL  PORT  OPR
 Y    Y    Y

<-CTRL Z->
COMMAND ?35
TRUNK USAGE SORT: SUMMARY ?Y
                       SUMMARY OF TRUNK USAGE


    REPORT PERIOD                                                    PAGE  1
    09/01/92 - 09/05/92                                     09/05/92   8:35A

     TRUNK       TOTAL       TOTAL       AVG TIME     COSTED         TOTAL
     USED        CALLS       TIME        PER CALL      TIME          COST
    ------      ------      -------      --------     ------      ----------
      8080           0           0          0.0            0      $     0.00
      8086           0           0          0.0            0      $     0.00
      8087           0           0          0.0            0      $     0.00
     80001           9          47          5.2           12      $     3.11
     80002           6          12          2.0            7      $     2.13
     80003          17          57          3.3            7      $     2.21
     80004          12          35          2.9            9      $     2.21
     80005          12          15          1.2            4      $     1.50
     80006          13          24          1.8            0      $     0.00
     80007           6          19          3.1            9      $     2.42
     80008          12          39          3.2            1      $     0.25
     80009          10          45          4.5           17      $     4.50
     80010           8          42          5.2            9      $     2.30
     80011          14          46          3.2           10      $     2.61
     80012          11          98          8.9           70      $    16.14
     80013           8          26          3.2            3      $     1.21
     80014          13          34          2.6           12      $     3.03
     80015          14          32          2.2            5      $     1.50
     80016           0           0          0.0            0      $     0.00
     86001           0           0          0.0            0      $     0.00
     86003           0           0          0.0            0      $     0.00
     87001          82         270          3.2          270      $    60.31
     87002          79         256          3.2          256      $    59.52
     84002           0           0          0.0            0      $     0.00
     95001           0           0          0.0            0      $     0.00
                     0           0          0.0            0      $     0.00
    ------      ------      -------      --------     ------      ----------
     TOTAL         326        1097          3.3          701      $   164.95


<-CTRL Z->
COMMAND ?36
CALL RECORD DUMP :
 DETAIL?Y
              REPORT OF ALL CALL RECORDS


    REPORT PERIOD                                                    PAGE  1
    09/01/92 - 09/05/92                                     09/05/92   8:36A

  EXTEN-  TRUNK      NUMBER                      DURATION             ACCOUNT
   SION   USED       DIALED        DATE    TIME   MINUTES   COST        CODE
  ------ ------ ---------------- -------- ------ -------- -------- ------------
    718   80009    (   )911-0000 09/01/92  7:55A     0.5  $    .00
    311   80011    (   )911-0000 09/01/92  7:55A     1.3  $    .00
    278   80009    (800)944-1535 09/01/92  8:16A     3.0  $    .00
    255   80005    (800)944-1535 09/01/92  8:19A     1.3  $    .00
    261   87001    (   )660-5525 09/01/92  8:28A     4.2  $    .95
    201   80004    (800)944-1535 09/01/92  8:33A     1.9  $    .00
    315   87002    (   )841-2586 09/01/92  8:34A     2.3  $    .57
    314   87001    (   )290-1030 09/01/92  8:44A     3.4  $    .76
    735   87002    (813)293-4319 09/01/92  8:44A     2.5  $    .71
    735   87002    (813)293-4319 09/01/92  8:58A     1.2  $    .49
    255   80009    (800)944-1535 09/01/92  8:56A     6.9  $    .00
    247   80015    (800)944-1535 09/01/92  9:02A     3.7  $    .00
    261   80011  O (513)825-3931 09/01/92  9:09A     3.6  $    .00
    261   87001    (   )644-1061 09/01/92  9:16A     1.3  $    .38

<<ETC....>>

<-CTRL Z->
COMMAND ?00]
PROGRAMMING TERMINATED

PROGRAMMING ENABLED 09/05/92  8:40A
<-CTRL Z->
COMMAND ?37
 ]TRUNK ASSIGNMENTS

09/05/92   8:40A  PAGE  1


TRUNK 000 =      ,00      TRUNK 001 =  8080,01      TRUNK 002 =  8086,01
TRUNK 003 =  8087,01      TRUNK 004 =      ,00      TRUNK 005 =      ,00
TRUNK 006 =      ,00      TRUNK 007 =      ,00      TRUNK 008 =      ,00
TRUNK 009 =      ,00      TRUNK 010 =      ,00      TRUNK 011 =      ,00
TRUNK 012 =      ,00      TRUNK 013 =      ,00      TRUNK 014 =      ,00
TRUNK 015 =      ,00      TRUNK 016 = 80001,01      TRUNK 017 = 80002,01
TRUNK 018 = 80003,01      TRUNK 019 = 80004,01      TRUNK 020 = 80005,01
TRUNK 021 = 80006,01      TRUNK 022 = 80007,01      TRUNK 023 = 80008,01
TRUNK 024 = 80009,01      TRUNK 025 = 80010,01      TRUNK 026 = 80011,01
TRUNK 027 = 80012,01      TRUNK 028 = 80013,01      TRUNK 029 = 80014,01
TRUNK 030 = 80015,01      TRUNK 031 = 80016,01      TRUNK 032 = 86001,01
TRUNK 033 = 86003,01      TRUNK 034 = 87001,01      TRUNK 035 = 87002,01
TRUNK 036 = 84002,01      TRUNK 037 = 95001,01      TRUNK 038 =      ,00
TRUNK 039 =      ,00      TRUNK 040 =      ,00
<-CTRL Z->
COMMAND ?15
CLEAR CALL RECORDS - ARE YOU SURE ? Y END DATE NOT FOUND -- CLEAR ALL ??<-CTRL Z->
<< Nice command!.. 50 is a macro using command 15  with a Y piped into it >>
OK
51
<-CTRL Z->]
<-CTRL Z->
COMMAND ?54
AREA CODE SORT

                        SUMMARY OF AREA CODES


    REPORT PERIOD                                                    PAGE  1
    09/01/92 - 09/05/92                                     09/05/92   9:15A

     AREA       TOTAL        TOTAL      AVG TIME      AVERAGE        TOTAL
     CODE       TIME         CALLS      PER CALL       COST          COST
    ------     -------      ------      --------     --------     ----------
      ***         357          139         2.5       $    .52     $    72.89
      212          24            8         3.0       $    .84     $     6.75
      215           1            1         1.0       $    .46     $     0.46
      216           4            1         4.0       $    .92     $     0.92
      303           6            3         2.0       $    .58     $     1.75
      305           3            2         1.5       $    .38     $     0.77
      404           4            2         2.0       $    .69     $     1.38
      504           3            2         1.5       $    .46     $     0.92
      508           5            4         1.2       $    .37     $     1.50
      513          11            2         5.5       $    .80     $     1.61
      516          19            4         4.7       $   1.18     $     4.75
      606          11            1        11.0       $   2.53     $     2.53
      612           1            1         1.0       $    .50     $     0.50
      615           5            1         5.0       $   1.15     $     1.15
      703           9            1         9.0       $   2.30     $     2.30
      708           9            3         3.0       $   1.00     $     3.00
      800         371          109         3.4       $    .00     $     0.00
      813          96           21         4.5       $   1.11     $    23.49
      818           1            1         1.0       $    .50     $     0.50
      904          93           19         4.8       $   1.21     $    23.06
      912          64            1        64.0       $  14.72     $    14.72
    ------     -------      ------      --------     --------     ----------
     TOTAL       1097          326         3.3       $    .50     $   164.95

<-CTRL Z->
COMMAND ?55
EXCEPTION REPORTS

              REPORT OF MOST EXPENSIVE CALLS


    REPORT PERIOD                                                    PAGE  1
    09/01/92 - 09/05/92                                     09/05/92   9:16A

    EXTEN-   TRUNK       NUMBER                           DURATION
     SION    USED        DIALED          DATE      TIME    MINUTES    COST
    ------  ------  ----------------   --------   ------  --------  --------
      246    80012     (912)354-2813   09/01/92    2:33P     63.5   $  14.72
      316    87001     (813)299-2068   09/03/92    4:16P     36.9   $   8.19
      248    87002     (   )863-5701   09/03/92   11:28A     21.5   $   4.89
      261    87002     (904)677-1235   09/03/92    2:20P     15.3   $   3.72
      261    87002     (904)677-1235   09/01/92    3:36P     13.1   $   3.26
      255    87001     (813)293-4319   09/04/92    9:36A     13.6   $   3.13
      270    87002     (   )649-4966   09/04/92   11:32A     14.3   $   2.85
      261    87001     (   )660-5567   09/01/92   10:16A     14.8   $   2.85
      200    87002     (904)599-1543   09/03/92    3:27P     11.2   $   2.80
      266    80009     (516)785-1200   09/03/92    3:32P     10.5   $   2.75
      261    87001     (   )660-5525   09/04/92   12:48P     13.2   $   2.66
      268    80014     (606)282-7223   09/03/92   11:00A     10.9   $   2.53
      246    87002     (904)677-2551   09/03/92    3:05P      9.7   $   2.34
      261    80010     (703)845-1400   09/01/92    9:23A      9.1   $   2.30
      316    87002     (   )290-1030   09/02/92    3:04P     11.8   $   2.28
      246    87002     (904)677-6774   09/01/92    2:20P      8.5   $   2.11
      316    87001     (   )290-1030   09/03/92    2:58P     10.5   $   2.09
      316    87001     (   )290-1030   09/02/92    8:56A      9.6   $   1.90
      316    80004     (212)605-8586   09/02/92    1:58P      6.9   $   1.75
      270    80001     (513)568-4933   09/03/92    9:15A      7.0   $   1.61


              REPORT OF LONGEST CALLS


    REPORT PERIOD                                                    PAGE  1
    09/01/92 - 09/05/92                                     09/05/92   9:16A

    EXTEN-   TRUNK       NUMBER                           DURATION
     SION    USED        DIALED          DATE      TIME    MINUTES    COST
    ------  ------  ----------------   --------   ------  --------  --------
      246    80012     (912)354-2813   09/01/92    2:33P     63.5   $  14.72
      316    87001     (813)299-2068   09/03/92    4:16P     36.9   $   8.19
      261    80001     (800)727-5663   09/04/92    2:06P     25.8   $    .00
      248    87002     (   )863-5701   09/03/92   11:28A     21.5   $   4.89
      261    87002     (904)677-1235   09/03/92    2:20P     15.3   $   3.72
      261    87001     (   )660-5567   09/01/92   10:16A     14.8   $   2.85
      270    87002     (   )649-4966   09/04/92   11:32A     14.3   $   2.85
      255    87001     (813)293-4319   09/04/92    9:36A     13.6   $   3.13
      261    87001     (   )660-5525   09/04/92   12:48P     13.2   $   2.66
      261    87002     (904)677-1235   09/01/92    3:36P     13.1   $   3.26
      260    80003     (800)999-4441   09/03/92   11:49A     12.9   $    .00
      270    80010     (800)342-3763   09/02/92    3:32P     12.5   $    .00
      316    87002     (   )290-1030   09/02/92    3:04P     11.8   $   2.28
      252    80015     (800)944-1535   09/04/92    9:00A     11.5   $    .00
      252    80008     (800)944-1535   09/02/92   11:07A     11.5   $    .00
      200    87002     (904)599-1543   09/03/92    3:27P     11.2   $   2.80
      315    80009     (800)622-4448   09/02/92   10:33A     11.2   $    .00
      268    80014     (606)282-7223   09/03/92   11:00A     10.9   $   2.53
      315    80011     (800)622-4448   09/02/92    3:35P     10.8   $    .00
      264    80012     (800)527-2274   09/03/92    3:12P     10.7   $    .00


           REPORT OF MOST FREQUENT NUMBERS


    REPORT PERIOD                                                    PAGE  1
    09/01/92 - 09/05/92                                     09/05/92   9:16A

         NUMBER             TOTAL        TOTAL         AVRG          TOTAL
         DIALED             CALLS        TIME          DRTN          COST
    ----------------       ------       -------       -----       ----------
       (   )290-1030           53          131          2.4       $    27.91
       (800)944-1535           37          121          3.2       $     0.00
       (800)812-5386           15           15          1.0       $     0.00
       (   )411-0000           13           13          1.0       $     0.00
       (   )660-5525           13           36          2.7       $     7.98
       (813)293-4319           11           38          3.4       $     9.35
       (904)677-1235            9           46          5.1       $    11.43
       (800)622-4448            8           45          5.6       $     0.00
       (   )660-5524            5           11          2.2       $     2.02
       (   )295-9119            5           11          2.2       $     2.28
       (   )660-5528            5           13          2.6       $     2.47
       (516)785-1200            4           19          4.7       $     4.75
       (800)342-3064            4            4          1.0       $     0.00
       (800)888-6823            4           16          4.0       $     0.00
       (   )660-5543            4            4          1.0       $     1.14
       (508)960-6186            4            5          1.2       $     1.50
       (800)526-4371            3            6          2.0       $     0.00
       (   )863-5701            3           32         10.6       $     7.19
       (212)708-1728            3           10          3.3       $     2.75
       (303)586-2030            3            6          2.0       $     1.75

<-CTRL Z->
COMMAND ?65
MCX-7700/PC V4.0.5  1189
EB4B     E46D     1265     0101
<-CTRL Z->
COMMAND ?10

SYSTEM PARAMETERS MENU

PRINTER = 1
PABX    = 2
REPORT  = 3
OPTIONS = 4

SELECT FUNCTION : 2

 ACCOUNTS      ------TRUNKS------   EXT   ACCESS   TOLL
SIZE    NO.    NO.   '-'  GRP  EQP SIZE  ABS  COST DIG
 04    1024    040    N    2    3    3    Y    N    1
 -+++ FUNCTION CANCELED +++
<-CTRL Z->
COMMAND ?10

SYSTEM PARAMETERS MENU

PRINTER = 1
PABX    = 2
REPORT  = 3
OPTIONS = 4

SELECT FUNCTION : 3

CALL   ----DROP OR REJECT---  AUTO  TO-  LIST
GRACE LOC  ACT  INC  TRK  EXT  PRD  DAY  NULL
 05    N    N    N    N    N    0    Y    N
 -+++ FUNCTION CANCELED +++
<-CTRL Z->
COMMAND ?10

SYSTEM PARAMETERS MENU

PRINTER = 1
PABX    = 2
REPORT  = 3
OPTIONS = 4

SELECT FUNCTION : 4

SER  PC   ZERO
IAL  PORT  OPR
 Y    Y    Y
 -+++ FUNCTION CANCELED +++
<-CTRL Z->
COMMAND ?00 <<00 terminate programming>>




******************************************************************************
<><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><>

Ending notes:
-------------
I've had this system laying around for the past 2 years and never gave a
flying fuck about it, yet when I find new systems I am unfamiliar with I
always wonder why the hell no one writes a phile on 'em to pass on the
knowledge.

Anyway, to all who have hacked not-so-well-known systems, or even something
you consider lame, WRITE A PHILE ON IT!!  If enough people start doing this,
a newz letter could be started.. call it LSD (Lame Systemz Digest) or
something.  Woa, what a concept!


            ++++++ Quantula Sapientia Regitur Mundus ! ++++++
       (What little wisdom is shown in the government of the world)



Greetz 2:
---------
Kaleidox, Garbage Heap & P/S, Night Ranger, Con Artist, Green Hell,
Maldoror (The OLD Hannibal), Citizen-One, Speed Demon, The Pyrotechnic,
Knight Lightning, King Cobra, Death Wish, Shadow Runner, Axiom Codex,
Phunatic Phreak, and all the other K-rad people I forgot to mention.

<><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><>
******************************************************************************
[ News ] [ Paper Feed ] [ Issues ] [ Authors ] [ Archives ] [ Contact ]
© Copyleft 1985-2014, Phrack Magazine.