home *** CD-ROM | disk | FTP | other *** search
- ========================================
- = Hacking RSTS Systems =
- ========================================
-
- So, you've decided that you'd like to try to down an RSTS system?
- Well, here's a beginner's guide: The RSTS system has two parts, the
- Priviledged accounts, and the User accounts. The Priviledged accounts start
- with a 1 (In the format [1,1], [1,10], etc. To show the Priv. accounts
- we'll just use the wildcard [1,*].) The priviledged accounts are what every
- RSTS user would love to have, because if you have a priviledged account you
- have COMPLETE control of the whole system. How can I get a [1,*] account?
- you may ask....Well, it takes A LOT of hard work. Guessing is the general
- rule. for instance, when you first log in there will be a # sign: # (You
- type a [1,*] account, like) 1,2 It will then say Password: (You then type
- anything up to 6 letters/numbers Upper Case only) ABCDEF If it says
- ?Invalid Password, try again' then you've not done it YET...Keep trying.
-
- Ok, we'll assume you've succeeded. You are now in the priviledged
- account of an RSTS system. The first thing you should do is kick everyone
- else off the system (Well, maybe just the other Priviledged users)....You
- do this with the Utility Program. UT KILL (here you type the Job # of the
- user you'd like to get ut of your way). If the system won't let you, you'll
- have to look for the UTILTY program. Search for it by typing
- DIR [1,*]UTILTY.* Now, you've found it and kicked off all the important
- people (If you want you can leave the other people on, but it's important to
- remove all other [1,*] users, even the Detached ones). To find out who's who
- on the system type SYS/P-(That will print out all the privileged users). Or
- type SYS to see Everyone.
-
- Next on your agenda is to get all the passwords (Of course). Do this by
- run $MONEY (If it isn't there, search for it with DIR[1,*]MONEY.* and run
- it using the account where you found it instead of the $.)
-
- There will be a few questions, like Reset? and Disk? Here's the
- Important answers. Disk? SY (You want the system password) Reset? No (You
- want to leave everything as it is) Passwords? YES (You want the passwords
- Printed) There are others, but they aren't important, just hit a C/R. There
- is ONE more, it will say something like Output status to? KB: (This is
- important, you want to see it, not send it elsewhere.)
-
- Ok, now you've got all the passwords in your hands. Your next step is
- to make sure the next time you come you can get in again. This is the hard
- part.
-
- First, in order to make sure that no one will disturb you, you use the
- UTILTY pr/gram to make it so no one can login. Type UT SET NO LOGINS. (also
- you can type UT HELP if you need help on the program.)
-
- Next thing you want to do is LIST the program and find out where The
- input of the Account # is. To get this far you have to knwo a lot about
- programming and what to look for...
-
- Here is generally the idea, an idea is all it is, because I have not
- been able to field test it yet:
-
- Add a conditional so that if you type in a code word and an account #
- it will respond with the password. This will take a while to look for, and
- a few minutes to change, but you can do it, you've got that RSTS system in
- your back pocket. Let's say you've (Somehow) been able to change the
- program. The next thing you want to do is replace it, so put it back where
- you got it (SAVE Prog-name), and the put it back to the Prot Level (The #
- in the <###> signs) by typing PIP (Prog name)<232>=Progname (Note, in all of
- this, don't use the ()'s they are just used by me to show you what goes
- where.)
-
- Now you've gotten this far, what do you do? I say, experiment! Look at
- all the programs, since you have Privilged status you can analyze every
- program. Look around forthe LOG program, and find out what you can do to
- that.
-
- The last thing to do before you leave is to set the date back to what
- it was using the UTILTY program again UT DATE (and the current date).
-
- DOWNLOADED FROM P-80 SYSTEMS.....
-