Log in

View Full Version : Cordless Phone - Exploit ??


AfterRain
October 3rd, 2002, 10:58 PM
Quesition : How many people around you have cordless phones ? 1 , 2 , 5+ ? Well i bring this up because, im thinking of a way to user there cordless phone as my fone line. Dont get what i mean? I want to exploit there hardware , and use it so i gain access to the internet/phone line thro there phone number. Its like the beige box, but with out going out side to connect to it, you just transmite and recive thro the desktop hold , a.k.a charge , answer machine .
And for all you think its corny .. Im doing this , my room does not have a phone line, the only pc in this house needs a pwd, i dont have. but my laptop, is in my room, but it only needs net access.

It is possible, im hoping, because i've seen a differnt model phone on a newer model charge. and it still works. But dont have any cordless phones. so i cant test this out - Will you be able to pick up there line if the phone is on the charger ?
So i cam up with this idea.
This is what i think you'd need to do it.
1- Transmitter / Reciver , i was thinking a cordless phone and you'd just reprogram it with the freqs.
2- Scanner - to capture the freq of the desk model and the cordless phone itself.
3- the analog hook up jawn, like you hook up your laptop to a pay phone.

See what im getting at?

This also could be good, if your line is tapped, you bypass it with out leaving your home. Thats all for now. Probally will edit it later

Machiavelli
October 5th, 2002, 10:02 AM
Please have mercy on the poor English language, after all it can't defend itself against you raping it in a most cruel and gruesome fashion.

Anyway, I think what you're trying to do is use another persons phone line by taking over their cordless connection. Back in the days in Germany it was possible to drive around the block with a handset and just wait for a "free line"-tone. Unfortunately the manufacturers changed their equipment, so now the handset and base station undergo a synchronisation procedure to ensure that only authorized handsets can be used. I don't know how the situation is in the US.
Also, if you wanted to connect to the internet this way, you'd have to use an acoustic coupler with your phone and these are not only hard to get, they also give you a very slow connection.

But if you're willing to go to these lengths to get net access, couldn't you try to run a hidden cable to your room?

nbk2000
October 5th, 2002, 11:57 AM
It's got to be a pretty bad raping when a german has better grammer than the native english speaker. :p

But I get the...hahaha I can't stop laughing "Help! RAPE!" "sut Uop BytCh! taKe !iT" HAHAHAHA!...idea. :D

Seriously, you'd likely be much better off trying your hand at "whacking". That's wi-fi hacking, where you use an 802.(whatever) wireless card to find an unsecured wireless LAN connection in your neighborhood. Given a decent high gain antenna, you could leech of a net connection a mile away. In one magazine article I've got, a guy set up a wi-fi between his home and office, 4 MILES apart. Though it cost almost $1,000 to do so. I've read on the net of using pringle cans for kilometer connections.

Why use a snail slow dialup when you can leech DSL or cable. That, and fucking with the phones is federal time. Though the idea of using a snatched cordless phone connection to bypass a tap is a good one. <img src="http://www.roguesci.org/ubb/icons/icon14.gif" alt=" - " />

AfterRain
October 5th, 2002, 04:33 PM
Nbk, i thought about it , but my area, does not offer ANY dsl/cable . I spoke with a few companys and there saying latter this year. So the next best thing i came up with was this. And I've started looking into wlan a bit back, but the best i came up with was a program that maps the signals with a gps signal, so you can see the gps location of the outputting signal. Other then that i've not found anything that tells you how to leech from it. And at this time, i really dont care till i get a new laptop, Mine is old, its a p133-16meg ram,2gig h/d,and the life span of the battery is like 30-50 min.And plus the cd-rom is broke ass , too. So , im not in that much of a hurry now.

And for the pringles cans, i found a link for that, <a href="http://computerworld.com/mobiletopics/mobile/story/0,10801,74806,00.html" target="_blank">Secret Service 'war driving' for unsecure WLANs - Computerworld</a> .

<a href="http://www.oreillynet.com/cs/weblog/view/wlg/448" target="_blank">And here is one to make them out of Pringle Cans</a>

This got me thinking to, Do the hubs of Wlans, have a standard open port or what not , so that you can find a wlan by doing a port scan ? that'd be some shit, do a port scan find a wlan and have that pc do scans from that area, and jump around there. :) ~

<small>[ October 06, 2002, 02:40 AM: Message edited by: AfterRain ]</small>

Anthony
October 6th, 2002, 07:50 PM
IIRC, a little whilse ago in london, someone went around finding unsecure WANS with web access, and marked out the locations where you could use it, out on the pavement, all over the city.

What a considerate person :)

nbk2000
October 6th, 2002, 11:11 PM
That's called "war chalking" and is happening all over the place, especially large metropolitan areas. It's just a matter of recognizing the symbols for what they are.

Fl4PP4W0k
October 13th, 2002, 12:12 PM
Netstumbler. Using linux.
Easy.

Im pretty sure you cant do dialup internet at decent speeds over a cordless phone. Over an analog phone, you would be lucky to get 4800bps Even then its pushing it. 1200 or 2400bps would be a better bet.
Over a digital phone, you dont have any better chances.

Most digital fones i have seen (900MHz, 2.4GHz)compress the analog signal (voice) into digital pulses. Note COMPRESS!! You do _not_ want your modems signal to be compressed. This will corrupt the analog signal, giving you crappy speeds of about 2400-4800bps depending on the fone. This is even noticable on GSM mobile phones, where the digital compression causes a 9600bps max speed.

Also, cordless analog AND digital phones dont transmit all the data that a modem could produce. They have filters that trim off the higher and lower limits of the audio signal = less bandwith = more channels.

Assuming there was no bandwith limit as such, a typical modems error correction hardware could not keep up with the terrible static \ images etc... that would be present on a not too near cordless phone.
The error correction is designed for wires, where the odd crackle or static may be observed. A far cry from radio.

I have infact tried 1200bps and 2400bps communication with an old Toshiba Luggable 386 and its internal modem. With little success.
I bypassed the voice filter of the Panasonic cordless phone (40MHz), and inserted the analog signal. I think I reduced the power somewhat... cant really remember.
At 300bps, I could contact the server no problems. Looking good.
(right next to the basestation). Moving up to 1200 had a few problems.. random characters and the like.
2400 wouldnt even connect.

This is due to interferance, and the telephone \ base station internal circuitry which still alters the signal. Argh.

Good for a test though.

You could always try to be a l33t h4}{0r and use an acoustic coupler. *cough*

probity
October 23rd, 2002, 06:36 PM
Netstumbler is for windows not linux, and I talked to the guy who runs the project and he doesn't plan on porting it to nix any time soon. It doesnt even have prism2 support yet. BSD airtools is the shizat mah nigga if you be runnin tha bee ess dee :D

Eliteforum
October 23rd, 2002, 06:47 PM
Woah, freaky, I downloaded FreeBSD (www.freebsd.org) about an hour ago, and am just getting around to installing it. Might have a few things to play around with then! :D

Fl4PP4W0k
October 24th, 2002, 08:44 AM
lol, k

I could have sworn there was a linux version... I must be thinking of something simmilar. *scratches head*

AfterRain
October 24th, 2002, 08:35 PM
There's a linux os , called War Linux , its for all you war-driving kiddies. When i find the url , i'll post it..
I found it : <a href="https://sourceforge.net/project/showfiles.php?group_id=57253" target="_blank">WAR LINUX</a>

<small>[ October 25, 2002, 03:09 AM: Message edited by: AfterRain ]</small>

Eliteforum
October 25th, 2002, 11:54 AM
I'v just downloaded it, and 52.6mb for an Operating System seems pretty small, is it a program that runs over the top of your existing OS?

Does it support dualboot?

AfterRain
November 3rd, 2002, 11:03 AM
Elite, It is it's own OS. its meant for war driving and only that.. I dont know about dual boot .. I just have it brunt to a cd, so it bootable from the cd. And im sure if you set it up right, you could dual boot. But since i lack the wifi, i've not really messed with it

Eliteforum
November 3rd, 2002, 02:27 PM
I burnt it to a CD and tried to install it to a blank hard drive. It didn't register in the boot seek, so it's not bootable. And nor would it install, so in full, a waste of time.

AfterRain
November 4th, 2002, 01:45 AM
yo. elite it is boot able.. I can boot it from cd .. Are you sure it burnt right?

jimmyboy
November 19th, 2003, 02:00 AM
the cordless base always transmits a key each time the phone is put in the base -- the key is always proprietary to the manufacturer as well as the encryption -- plus the phone base will only pay attention to the strongest signal --- the only feasible way i see for you is the get the same model phone get access to the base and sit the phone in it once while they are occupied - other than that its a total waste - just make a lineman set and hook it up down the line somewhere - cordless is getting even tougher to toy with with Digital and Spread Spectrum becoming more common - when they first came out cordlesses were easy to trick -- just get the same phone as your neighbor and stand a few feet from his house.

Oh yes has anyone used/bought a watsonlinc? curious device the taps a phone line without having to cut it.. a regular induction coil could never do that -- maybe a hall effect sensor - im trying to figure it out

PyroNitrate
November 19th, 2003, 11:38 PM
Go buy a wifi card.. 802.11g (Oricon Gold Combo Card) and purchase a 2.4 ghz Antenna Grid ( $98) www.hyperlinktech.com
This baby will travel 7 miles
You will also need an Nfemale connector ($14)

Far cheaper than $1000

Although I assume you ave no money to spend... So i would go with hideing a line to ur room.

theone
November 22nd, 2003, 08:07 AM
Most cordless phones now have something similar to pgp(some kind of secure line thing)
that prevents from what you say from happening, it's supposed to allow
only the preprogrammed or coded babies(extensions) to connect to the mother(base).
THIS WOULD DEPEND ON HOW OLD THE CORDLESS PHONE IS
So I am thinking rather then cordless phones.... cellular phones

I dunno about the cellular phones in the U.s but here(korea) most cell phones
are capable of transfering up a 1mb+ over cell phones
(you get a watered down version of the internet of the cell phone)
But you can use the cell phone as a wireless modem.

Anyway you can send mail and other various junk through it so it'd be
intresting to see what you can program into the phone. Or even
program a "cell phone emulator" for the pc if that is possible.
(the cell phones cost around 500$ or so and then you have to
pay for the internet service etc etc but there are used cell phones available)

But if you know the number of another guys phone you can actually
program your cell phone to the guys number and use it for free
(its quite easy.... most wives use it to check if their husbands are cheating on
them or not etc etc,)But you need to know how to acess the phones
"admin" menu through the keypad which differs from model to model
and make to make.

And you can use the atenna system to triangulate where the phone user is.
I think the acuraccy was something like +-10 meters? more or less and now
new cell phones are comming out with the GPS function (remote detonation?)

uh yeah... well thats about it..... as for unsecure lans I think all you needed was
a wireless lan card and you were in but that was like years ago, I suppose most
of the wireless lans now have security but with a little computer ingenuity, far easier.