The Hacker's Encyclopedia 1998

home *** CD-ROM | disk | FTP | other *** search

/ The Hacker's Encyclopedia 1998 / hackers_encyclopedia.iso / zines / n_z / phun3.006 < prev next >

Wrap

Text File | 2003-06-11 | 26.4 KB | 727 lines

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= = P/HUN Issue #3, Volume #2: Phile #6 of 11 = =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= /\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\ \ / / The Pan Am Airline Computers (c)1994 "PART B" \ \ --------------------------------------------- / / \ \ By Red Knight / / \ \ A P/HUN Magazine Incorporation Productions / / \ \/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/ Introduction & clearing up a confusion -------------------------------------- Welcome to Part B of "The Pan-Am Airline Computers". I hope you have found the first part intresting. I would like to take this opportunity in clearing up a minor confusion that some of you may have while reading the first part of this file. There are 2 types of systems I talk about in the first part which are: o Pan-Am main computer & o The Panamac or PANAMAC The Pan-Am main computer is used to store and view performance of the entire network. Pan American has 3 main computer systems to serve the surrounding states. These are located in Florida, Washington and NewJersey. There may exsist one in California but we dont have enough proof to be sure.Although they may have smaller terminals connected to these 3 major terminals and all the material that is covered here also applies for these smaller terminals. The Panamac are computers that are used by sales agents to book flights, give information and the works. Although the Pan-Am main computer can also handle all the tasks that the PANAMAC can. Here is what the the Pan Am network looks like: Example of a simplified Pan Am Network -------------------------------------- Cartridge & The Panamacs will be in the same building. Like the major Pan Am building in Manhatten in Newyork. _____________________________________________ Sub Terminals | | | +------ & Other +---- Panamac +-------|-+ airlines ______________ |---- Panamac | Pan-Am | +----------+ + + |---- Panamac Sales Agents | main |--| Sub |--|Cartridge Area|---|---- Panamac on each terminal | computer| | Terminal | +______________+ |---- Panamac +---------+ +----------+ |---- Panamac | |______________ +---- Panamac Sub Terminal Other Agencies The cartridge area is where they insert physical cartridges for new rates of travelling, new routes , cancellation of rountes etc. The Panamac uses all this information supplied by the cartridge area so that the Sales agents can answer our various questions and book us flights. The cartridge area contains the main program for the Panamac's to run. All the information from the cartridge area is passed to the sub terminal then to the main computer The surrounding states may connect to one or many sub terminals then finally leading to the main computer. Our main purpose here is to infiltrate the main computer where all the information is stored and has control over the entire network that it serves. I have heard from employees that Pan-Am has the latest on ANI equipment and therefore please proceed with caution. Another thing is that when you have successfully hacked the system and you dont get the SOM ">" prompt then type in ">SOMTERM" and hopefully you will end up with the SOM. I hope this has cleared the confusion and now lets continue. Part VIII --------- Host Facts ---------- The Host facts field contains 2 types of entries: Other Service Information (OSI) entries which give information about passenger so that they can be offered proper assistance or recognition. A passengers speaks (SPKS) only a language other than English or Meet and assist (MAAS) and this passenger is elderly and needs assistance. Into the OSI goes anything pertinent from age to language, that they should know in order to talk to the passwngers as an individual. All the entries in the FAX field begin with digit 4. The code "PA" os used to send message to Pan Am only, This special information is entered as follows: >4 OSI PA_MAAS PSGR ELDERLY ASSIT IN TRANSIT A space is madatory only after PA then free form test is permitted. OSI information will be transmitted to the airport so that the appropriate action may be taken. In addition, special 4 chracter codes are to be used if the OSI details are to be taken transmitted directly to the airport check system. >4 OSI PA SPKS SPANISH ONLY >4 OSI PA FRTV PA62634678J-STARK/AMR If the passenger's description does not match one of the codes listed in the system enter the information as free form test after the "PA" For eg. >4 OSI OA VIP MAYOR OF N.Y In addition there is a special format to indicate that a passenger is an infant (INF) which include the age indicated in months (1yr=12MTS) For eg. >4 OSI PA INF DAVIDSON/JR MSTR 5MTHS Note: If there are two or more infants traveling, seperate OSI entries must be made for each other Part IX -------- Special Service Requirements (SSR) entries which require prior arrangements for something special to be provided to the passenger at the airport or on the plane. Entries in this category arrange for a specific item. (e.g. special meal) to be provided on a flight for the passenger, or to advice the Airport the passenger is traveling with something which may require advance preparation: e.g a large pet in cargo or a large amount of excess baggage. Since we are requesting that a specific items be provided (e.g special meal be put on the flight), the entry is made with an action code. At the same time, the entry is related to a specific segment(s) in an intinenary and to a particular passenger name(s) in the PNR. We need to look at an example. Here is a PNR: 1.1 SHAH/BUPENDRA 2.1EZRA/AMR 1 PA 66 P 19APR JFKBOM HS2 2145 0015 RCVD/RLOC-MR SHAH FONE-NYC-D 212/555/1234/H TKT-026FEBNYC00020 Mr. Shah wants a vegetarian meal. Here is the entry: >4 A VGML FS1 S1 N1 Lets break this down: 4 - 4 field A - Means add SCR VGML - Vegetarian meal code FS1 - Action Code (free sell ) + Number requested. S1 - Related to Segment 1 N1 - Related to Name number 1 Look at this PNR carefully. The entry relates the special meal in this case vegetarian to the first segment (S1) and to the first passenger, Mr. Shah, who is name number 1 (N1). When re-displayed, the HA FAX field appears as follows: HA FAX-SSRVGML.PAHS01 PA0066P19APRJFKBOM 1SHAH/BUPENDER Information about Pan Am policy and procedures governing some SSR entries can be found in KISSR. Here is a display of the index: SSR STATION INFORMATION INDEX BASSINETS B SPECIAL MEALS S WHEELCHAIRS W In the KISSR you will find description and codes for all special meals and facts about the current meal and wheelchair policy. Not all SSR items may be freely sold (FS). The R.M describes the procedure for requesting (needing) special service requirements. For example, request (NN) on: Special meals within 8 hours of departure or Excess baggage over 150 kilos (350 lbs) Looks at this example: Mr. C. Tuc in addition to his free allowance has baggage which will weigh about 175 Kkilos. The entry will be: >4A XBAG NN 175KGS S1 N2 . RECORDING EQUIPMENT XBAG - This is the excess baggage code NN - Action code 175KGS - Weight in Kilos S1 - Segment number N2 - Name number 2 . - This separator which is compulsory RECORDING EUIPMENT - Text In this case there is also a description of the excess baggage. The description or text is mandatory for this entry. The period(.) which acts as a separator preceeds the text. All SSR entries regarding excess baggage must include a text and may relate to only one passenger When redisplayed, the HA FAX field now apprears follows: HA FAX 1.SSRVGMLPAGS01 PA0066P19APRJFKBOM 1 SHAH/RMR 2.SSRKSMLPAHSO1 PA0066P19APRJFKBOM 1 TUC/AMR 3.SSRXBAGPANN0175KG PA0066P19APRJFKBOM 1 TUC/AMR RECORDING EQUIPMENT SSR Name relating ----------------- In from of each name is a name item number. You already know that PANAMAC assigns numbers for each different surname in a PNR. Also, each passenger has a passenger name number. In the FACTS example so far, the item number and the passenger name number were the same. A B C 1. 1AOKI/LSMRS 2. 1YAMADA/YRMRS 3. I/1YAMADA/GLENMSTR 1,2,3 are Name Item NBR & the A,B,C are passenger name numbers When you relate an SSR fact, your entry really refered to the name item i.e N2 refers to all the passengers in name item 2 (in this case only Mrs. Yamada) If however the entire Yamada family had been travelling together as in the following example the name item include more than one name: 1.1AOKI/LSMRS 2.3YAMADA/GOMR/YRMRS/LAMISS 5.1/1YAMADA/GLENMSTR 1 PA 82 Y 16 NOV HNLAX HS4 2300 0604 1 PA 81 Y 28 NOV LAXHNL HS4 1300 1702 If you SSR entry showed name relation to name N2, then the request would be for all the passengers in NAME ITEM 2... Mr/Mrs/Miss Yamada/ To show a special request for only one passenger in a name item, use a slash (/) after the name number. The slash acts to "separate" an individual passenger from the name item may which may include multiple passenger. For example: Mrs Yamada is name NBR 3. To confirm a baby meal on both flights the entry would be: >4A BBML FS1 S1/2 N3/ The N3 indicates the name number only Change/Delete/Cancel -------------------- If you are in the process of making an SSR entry and you have ended the transaction, no action has yet been taken on the request, You can therefore delete the entry. For example >4 3 [change symbol] You on the other hand while at home can user "*" which works the same way. The 4 is the field, the 3 is the Fact ITEM number . You cannot modify an SSR entry to correct it. If your entry is incorrect, you must delete the entry and reenter the correct SSR fact itme. In all instance, whether working on a new or retrieved PNR, cancellation of an itinenary segement will automatically cancel the related SSR item. For e.g. you have booked: 1.1BROWN/HARRYMR 2.1TOBAR/EMILEMR 1 PA 100 Y 13NOV JFKLHR HS2 1000 2140 Before ending transaction you notice you accidentally confirmed the wrong date. After cancellation of the incorrect segment, the HA FAX SSR item will look like this: HA FAX 1.SSRKSMLPA(XX)02 PA0100Y13NOVJFKLHR 1BROWN/HARRYMR 1 TOBAR/EMILEMR Cancelled SSR entries will automatically be removed from the PNR when you End Trasaction. Now you would rebook the correct flight and the Kosher meals. Part X ------ Other Airlines...General Facts ------------------------------ The GFAX or the General Facts, 3 filed contains the same (2) types of entries as the Host Fax...OSI and SSR..Entries in the GFAX are included to outgoing messages to other airlines upon ending trasaction. When an itinerary includes space on another airlines, you must use the GFAX field to notify the other airline about the special requirements or service information. All entries in GFAX befin with the digit 3. To send "OSI" information to one (1) other airlines, use the applicable carrier code. For instance, if the passenger is an infant travelling on PA and AF, you notify Air France that you booked an infant by sending an OSI message. The entry is: >3 OSI AF INF JONES/MARK MSTR 5 MTS This is in addition to an OSI entry in the 4 field to notify Pan Am at the airport, Thus 2 entries with the same information are required. >4 OSI PA INF JONES/MARK MSTR 5 MTS If a passenger's itinenary include more than one other airline, use the letters "YY" as the carrier code and make only one GFAX entry. A "YY" will send the information to all the airlines in the itinerary. >3 OS1 YY INF JONES/MARK MSTR 9 MTS Change/Delete ------------- The input to delete an OSI in the GFAX filed is the same as in HFAX. >3 1 (change symbol) To change an OSI entry in the GFAX field the format is the same. You delete, then reenter the correct information. >3 OSI AF.... (NEW INFO) GFAX SSR Entries: ----------------- SSR entries for other airlines are very similar to Pan Am HA FAX entries. The entry begins with "3A", followed by the segment and name related request. For e.g >3A KSML NH1 S1 N1 Breakdown 3A - This is the GFAX special service request KSML - Meal code NH1 - Action code to request S1 - Segment number N1 - Name item number. Any SSR entry to another airline is always on a request basis (NH) The request message is forwarded to the applicable airline(s) and must await a reply. Meanwhile, the passenger is adivised the Pan Am has requested the special service from the other airline(s) involved. Assume that you have made the following reservations: 1.1WILSON/ERMR 1 PA 218 Y 26FEB CCSJFK HS1 X 0940 1420 2 DL 1425 Y 26FEB JFKSLC HS1 1805 2040 The passengers desires a vegetarian meal and will be taking his dog (weight 30 lbs) with him. To book the SSRs on Pan Am the entries are: >4A VGML FS1 S1 N1 >4A AVHI FS1 S1 N1 . DOG 30 LBS (AVIH = live animals in hold) To book the SSRs on Delta Airlines the entries are: >3A VGML NN1 S2 N1 >3A AVIH NN1 S2 N1 . DOG 30 LBS Change/Delete ------------- To cancel or delete items in the GFAX handle exactly as in HFAX. Before end Transaction: >3 1 (change symbol) On a retrieved PNR: >3 . 1 XX Encode/Decode ARIMP Abbreviations --------------------------------- "ARIMP" codes are abbreviated messages which are used to communicate within the airline industry. These are listed in Panamac's "KI" information systems and may be accessed using the following entries: To find the code for a message (ENCODE), enter: >KI COD _ (using first letter of subject) To DECODE an abbreviated message, enter: >KI DCO _ (using first letter of subject) Part XI ------- Advance Seat Assignments ------------------------ It is Pan Am's policy to assign seats prior to departure only when requested by passengers. As you know many of us may want specific seat numbers or certain area for e.g smoking,non-smoking,window seats,aisle.Seats have to be requested when the booking is in progress. Lets take an example. Lets say you have booked a seat for Mr. Davdison on he has requested seat 3A which is in the non-smoking area and in the first class (P) cabin. His entries looks like: 1.1DAVIDSON/PLDR 1 PA 30 P 19APR JFKLHR HS1 X 1200 1800 2 PA 40 P 20APR LHRNBO HS1 100 700 To book his request a Host Facts entry is made. For e.g: >4A NSST NN1 S1 N1 . SEAT 3A 4A - Explained before NSST - is code for Non Smoking Seat NN1 - is the action code S1 - Segment 1 N1 - Name 1 . - Separtor which is compulsory 3A - This is the requested seat If this seat is available then you will get a "*". A display of the PNR will show the following: 1.1DAVIDSON/PLDR 1 PA 30 P 19APR JFKLHR HS1 X 1200 1800 2 PA 40 P 20APR LHRNBO HS1 100 700 HA FAX-SSRNNSTPANN01 PA0040P19APR JFKLHR 1DAVIDSON/PLDR SEAT 3A If the seat is already taken then the output will be: RE-CHECK AVAILABILITY/REJECTED DATA FOLLOWS/4SSRNSSPANN01 PA0030 P19APRJUNJFKLHR 1DAVIDSON/PLDR SEAT 3A To print an availability display (seats available) seat map must be displayed. Enter: >AC /S2 * AC - is the availability cabin S2 - This is the segment 2 * - Display You will get something like this: -PA0040P019APR JGKLHR 747-121 ZONE MAR AVAILABLE 9 * MOVIE SHOWN BETWEEN JFKLHR A B C D E F G H J K P P 1 1 $ A* A* 2 2 C F $ A* 3 3 A* A* 05---------- As you can see from the display that the requested seat is taken. The symbol use here is "$". Now lets get into the explanation. PA0040P19APR - Flight/Class/Date JFKLHR - Board/Off points of the segment booked 747-121 - This indicated the equiment used on the flight NMR - Zone requested "N" - No smoking "M" - Movies "S" - Smoking "W" - Without movie AVAILABLE 9 - Total number of seats still available to confirm. MOVIE SHOWN BETWEEN JFKLHR - Information on which sector the movie will be shown. A* - Indicates that if given the option, confirm these seats to passengers first. For e.g Seats 2B 3A B H J $ - This indicates that it is taken. e.g Seat 1 J 2 A - Blank indicates that seats dont exists on the aircraft P - Seats behind a partition or bulkhead. F - Special seating . People that require special seating ot handling C - Compulsory seat usually assigned to F seats. 05-------- - This indicates the last row in the zone and /or compartment in this case Premium, First Class. Some other commands: > AC/S1*S - Use this entry command if passengers request smoking > AC/S1*W - Without movie ( No smoking is assured) > AC/S1*WS - Without movie , Smoking specified. Part XII -------- When originating a PNR if a passenger decides to cancel and book a different flight the seat confirmation will automatically be cancelled as in this example (partial PNR display): 1.1BRESLIN/BMS 2.1CARTER/ASFR 1 PA 102 Y 26JUN JFKLHR 2100 0840 HA FAX-SSNSSTPAH02 PA102Y26Y26JUNJFKLHR 1IBRESLIN/BMS 1 CARTERASDR SEAT 33 AB Segment 1 cancelled X1 NEXT REPLACES 1 FLT//SEG FACTS CANCELLED *R 1.1BRESLIN/BMS 2.1CARTER/ASDR HA FAX-SSRNSSTPA(XK)02 PA102Y26JUNJFKLHR 1BRESLIN/BMS 1 CARTER/ASOR SEAT 33 AB Should a passenger wish to verify the seat description and/or location of his seat. There is an entry to display a seat map. The entry is: >VSSPA106/31JULIAADLHR*27 VSS - is the Verify Seat Selection 27 - This is the row. The response will be: PA0106 1AD/LHR 31JUL Y 747-121 ROWS 27 ZONES LAST ROW F/ 7 C/19 Y/57 A B C D E F G H J K N M N M N M 21/NM N M N M N M 27/ N M N M N M | |____ | | | | no smoking Movie ROW Number Row 27 is a no-smoking seat, with a movie view, over the wing Part XIII --------- This past will teach you all about hotels. I dont plan to go into details on this but will just make you familiar. There are 4 catagories of hotels: 1. Intercontinental (IHC) the Grand Metropolitan Hotel chain (XM Inventory stored in the system 2. Sheraton (XM Inventory stored in the system) 3. Other hotels (Special Arrangement) (XP Availability ) 4. Unlisted Hotels The XH and XM hotels have the actual inventory of thier rooms stored in the system and together with XP hotels the three types give you immediate availability. The hotels with whom Pan Am has a booking agreement are listed in a City's Station Information. To display the hotel for a city the input is: >KIBKKH BKK is the 3 letter city code and H stands for Hotels. The response to this would be something like: BKK STATION INFORMATION HOTEL INDEX 1000 KENYAN CONTINENTAL 1023 SHER BANKOK HOTEL 2351 * TAMARIN * 2342 ASIA : etc The hotels are further identified in the hotel Index by a four digit number, their name and location if other that the headline City it will be displayed as "* TAMARIN *" To determine of the hotel is "XH", "XM" or "XP" and to display details about a hotel the input is: >KI[Four digits Hotel Index] Here is what the response may look like: BKK HOTEL INFORMATION 1009 SIAM INTERCONTINENTAL SIAM INTERCONTINENTAL SIOUT PLACE 4290 HACKERS ROAD * TEL 000000 * SIAMICH XH XH 0923 LHTL XH0923 H C PVKGBD0N AS TL EP BHT EP P K D0N 04 00 01JAN-30DEC89 MODR SGLB 1840 DBLB 2000 TRPB 2390 : : : : GCR - JAN/JUN SGLB 1600 DBLD 1820 JUL/DEC SGLB 1600 DBLB 1820 NOTE LANAI ROOMS AND GROUND FLOOR ROOM ARE ON PERMANANT REQUEST GUEST WILL BE MET AT AIRPORT BY HOTEL REPRESENTATIVE AND ASSISTED TO HOTEL : : : LOCATION - CENTERS OF CITY OFF SIAM AQ. WITH EASY ACCESS TO ALL SECTIONS OF THE CITY THREE MAIN FROM ROYAL BKK SPORTS CLUB NATIONAL STADIUM. TRANSPORTATION - 35 MIN BY TAXI ARPT 25 MIN BY TAXI TO DOCK SERVICES- ROOM SVC 24 HRS LAUNDRY/VALET 24 HRS SPORTS - POOL,GYM ROOM,SHOOTING END The sixth line contains the booking code (in this case XH0923) This display has been shortened to make things easy. Hotels are booked in 2 ways: 1) Short Selling them using HOTEL booking code XH ........ >N1 DBLB XH1122-10OCT 15OCT MODR XM ........ >N2 SGLB XM1355-05MAR 12 MAR MAXR XP ........ >N1 TWNB XP3087-02JUL 9JUL MODR 2) The other way is a Segment entry for UNLISTED. >0 HTL PA NH1 ROM 1N23-JUL-OUT30JUL DBLB MODR DORA Part XIV -------- Personell who can access the Pan Am main computer may also be able to call out. I am not positively sure about this because this info was recently given to me by a Pan Am employee. Enter as follows: >HOLD NETCHANNEL 1 There may be many netchannels in the systems. If it is occupied then it will give a "CHANNEL 1 BUSY" error. Then it will prompt you for a call out password. This is different from your login password. Password : XXXXXXXXXX Then the immediatly after that it will give a prompt "#" . This is where you will be able to input digits to call out. # (317)5552322 Part XV [Misc] -------------- Airline Codes ------------- Pan Am, and all other airlines, use a two-letter airline identification code for reservation and ticketing purposes. There is no hard and fast rule as to how the two-letter code is derived. These codes are assigned by IATA/ARC. This list contains some of the worlds major airlines. Hope this list will come in handy. Airline Airline Code Airline Airline Code ------------------------------------ ----------------------------------- AER LINGUS EI AEROFLOT SU AREOLINEAS ARGENTINAS AR AERO MEXICO AM AIR AFRIQUE RK AIR CANADA AC AIR FRANCE AF AIR INDIA AI AIR NEW ZEALAND - INT. TE ALASKA AIRLINES AS ALITILIA AZ ALOHA AILINES AQ AMERICAN AIRLINES AA AUSTRIAN AIRLINES OS AVENSA VE AVIANCA AV BRITISH AIRWAYS BA BWIA INT. BW CAAC - CHINA CA CATHAY PACIFIC AIRWAYS CX CHINA AIRLINES CI CONTINENTAL AIRLINES CO CP AIR (CANAIAN PACIFIC) CP DELTA AIRLINES DL EASTERN AIRLINES EA EL AL LY GULF AIR GF HAWAIIAN AIRLINES HA IBERIA IB INDIAN AIRWAYS CORP. IC JAPAN AIR LINES JL KLM ROYAL DUTCH AIRLINES KL KOREAN AIR LINES KE LACSA LR LAN-CHILE LA LUFTHANSA LH LIAT LI MEXICANA MX NORTHWEST NW OLYMPIC AIRWAYS OA PAN AM PA PIEDMONT AIRLINES PI QANTAS QF SABENA SN SAS SK SAUDIA SV SINGAPORE SQ SOUTH AFRICAN SA SWISSAIR SR TAP (AIR PORTUGAL) TP TWA TW UNITED AIRLINES UA US AIR AL VASP AIRWAYS VP VARIG RG Conclusion ---------- Hope all have found this article of some intrest. My apologies for the lenght. I have tried my best to include all major topics that may be usefull to the hacker. I suppose now you know that booking flights is not that easy process. So next time please dont start yelling at the poor sales agent for some minor problem. Using this system can be a lot of fun. Although one can create a major havoc after infiltration. I urge you all not to do any of that sort. This system is quite delicate and one should be very carefull when using it. All the reverse command processes have been included in this article. I have purposely left out some commands that proved to be harmfull to the system. Under no circumstances am I responsible for this article's contents, for this serves only as an educational tool. I would like to thank Mr. C of the Pan Am Security Division for all his help. If anyone wishes to get in touch with me, I can be contacted at the Hacker's Den or at the Phoenix Project. Best of luck! Red Knight @ Phun Magazine Inc. Hackers Den88 (718)358/9209