home *** CD-ROM | disk | FTP | other *** search
/ Hacker Chronicles 1 / HACKER1.ISO / phrk3 / phrack33.9 < prev    next >
Text File  |  1992-09-26  |  11KB  |  190 lines
  1.                                                                         
  2.                                 ==Phrack Inc.==
  3.  
  4.                 Volume Three, Issue Thirty-Three, File 9 of 13
  5.  
  6.                   /////////////////////\\\\\\\\\\\\\\\\\\\\\
  7.                  ||                                        ||
  8.                  ||  A Real Functioning RED BOX Schematic  ||
  9.                  ||                                        ||
  10.                  ||      Written by: R.J. "BoB" Dobbs      ||
  11.                  ||                                        ||
  12.                   \\\\\\\\\\\\\\\\\\\\\/////////////////////
  13.  
  14. ::What is a Red Box?::
  15.  
  16.      Essentially, the Red Box is a device used to fool the phone company's
  17. computer into thinking coins are deposited into a payphone.  Every time you
  18. drop a coin into a payphone, the phone signals the type of coin inserted with
  19. one or more bursts of a combination of 1700hz and 2200hz.  The tone bursts are
  20. coded as follows:
  21.  
  22. Nickel : One 60 millisecond pulse
  23. Dime   : Two 60 millisecond pulses separated by 60 milliseconds
  24. Quarter: Five 35 millisecond pulses separated by 35 milliseconds
  25.  
  26. ::How to use it::
  27.  
  28.      Simply dial a long distance number (some areas require you to stick in
  29. a genuine nickel first), wait for the ACTS computer to demand your cash, and
  30. press the "deposit" button on the red box for each coin you want to simulate.
  31. The coin signals are coupled from the red box into the phone with a small
  32. speaker held to the mouthpiece.  For local calls, either you must first deposit
  33. a genuine nickle before simulating more coins or place your call through the
  34. operator with 0+xxx+yyyy.  Use some care when the operator is on the line -
  35. sometimes they catch on to your beeper ploy.
  36.  
  37.  ::Circuit Operation::
  38.  
  39.      Each time the pushbutton is pressed, it triggers half of IC1, configured
  40. as a monostable multivibrator to energize the rest of the circuit for a length
  41. of time determined by the setting of the coin selector switch. This in turn
  42. starts the other half of IC1, configured as an astable multivibrator, pulsing
  43. on and off at regular intervals at a rate determined by the 100k pot between
  44. pins 12 and 13.  The output of the astable thus alternately powers of IC2,
  45. configured as a square wave oscillator, providing the required 1700hz and
  46. 2200hz to the op amp which acts as a buffer to drive the speaker.
  47.  
  48. ::Alignment & Testing::
  49.  
  50.      When you are making this thing by no means should you use a 9v AC to DC
  51. adapter! I also suggest not using a bread board. So be careful with that
  52. sodering iron. Both of these things will cause you problems.
  53.      For alignment, a frequency counter is desired but you can use a good
  54. oscilloscope as well. (These are not ABSOLUTELY necessary, but to help.) In
  55. order to figure frequency in Hz with your scope you can use the following
  56. formula.
  57.  
  58.            1          S = The measurement of the wave that is on the display
  59. Hz =   -----------
  60.        S*(T*10^-6)    T = The setting of the time selector (milliseconds)
  61.  
  62.               1
  63. Hz =  ------------------  Hz = 2198
  64.       9.1 * 50ms * 10^-6
  65.  
  66.      Carefully remove IC1 from it's socket. Install a temporary jumper from
  67. +9v supply to pin 14 of IC2 and temporarily disconnect the 0.01uF capacitors
  68. from pins 5 and 9 of IC2. Power up the circuit.  Measuring the output from pin
  69. 5 of IC2 with the frequency counter or scope, adjust the 50k pot between pins 1
  70. and 6 for an output of 1700hz.  Now adjust the 50k pot between pins 8 and 13
  71. for an output of 2200hz from pin 9 of IC2.  Remove the temporary jumper and
  72. re-attach the capacitors to pins 5 and 9 of IC2, and re-insert IC1.  (Note: if
  73. no frequency counter is available, the outputs can be adjusted by ear one at a
  74. time by zero-beating the output tone with a computer generated tone of known
  75. precision.)
  76.      Next, using a multimeter, adjust the 10K pot at the cathode of the
  77. "quarter" diode for resistance of approximately 8K ohms.  (This sets the
  78. difference between the duration of the quarter pulses and those of the
  79. nickel/dime -- fine tuning of this ratio may be necessary durring the latter
  80. stages of alignment; this can be done by ear.)
  81.      Now, temporarily disconnect the wire between pins 5 and 10 of IC1.  Set
  82. coin selector switch in the "N" (nickel) position.  With the oscilloscope
  83. measuring the output from pin 9 of IC1, adjust the 100k pot between pins 12 and
  84. 13 of IC1 for output pulses of 60 millisecond duration.  Reconnect the wire
  85. between pins 5 and 10.  (Note: If no scope is available, adjust the pulse rate
  86. by ear using computer generated tones for comparison.)
  87.      Leave the selector switch in the "N" position. Adjust the 50K pot
  88. labeled "Nickel" for a single beep each time the deposit pushbutton is pressed.
  89.      Next set the coin selector switch to "Dime". Adjust the 50k pot labelled
  90. "Dime" for a quick double beep each time the pushbutton is pressed.
  91.      Finally, set the selector to "Quarter".  Adjust the 50k pot labelled
  92. "Quarter" until exactly 5 very quick beeps are heard for each button
  93. press.  Don't worry if the quarter beeps sound shorter and faster than
  94. the nickel and dime ones. They should be.
  95.  
  96. ::Conclusion::
  97.  
  98.      If all went well to this point, your red box should be completely
  99. aligned and functional.  A final test should now be conducted from a payphone
  100. using the DATL (Dial Access Test Line) coin test.  Dial 09591230 and follow the
  101. computer instructions using the red box at the proper prompts.  The computer
  102. should correctly identify all coins "simulated" and flag any anomalies.  With a
  103. little discretion, your red box should bring you many years of use.  Remember,
  104. there is no such thing as spare change!
  105.  
  106. ::Parts list for Red Box::
  107.  
  108. 2  556 Dual Timer IC's             8 0.01uF Caps
  109. 1  741 Op Amp IC                   2 0.1uF Cap
  110. 2  1N914 Diodes                    1 1.0uF Electrolytic Cap
  111. 5  10k Resistors                   2 10uF Electrolytic Caps
  112. 1  4.7k Resistor                   1 3 Position Rotary Switch
  113. 2  100k Resistors                  1 SPST Toggle Switch
  114. 1  100k PC Mount Pots              1 Momentary Push Button Switch (n/o)
  115. 3  50k PC Mount Pot                1 9v Battery Clip
  116. 1  10k PC Mount Pot                2 14 Pin Dip Socket
  117. 2  50k Multi-Turn Pots             1 8 Pin Dip Socket
  118.  
  119. ::Schematic::
  120.        _
  121. +9__S1/  _____________________________________________________________
  122.         |        |           |          |                   |   S3    |
  123.        R1       R2           |         R3                o  @  o      |
  124.         |___C1___|      _____|          |_________|/___ /   o   \___  |
  125.         |    ____|_____|_____|____      |     |   |\   |    |      _| |
  126.      _| o   |    6     4    14    |    R4    R5    D1  |    |   R9<   |
  127.  S2   | o  _|5                  13|_____|     |        |    |__  |    |
  128.         | | |                     |     |__   g        |      _| |    |
  129.         g |_|10       IC1        8|_      _|           |   R8<   |    |
  130.             |         556         | |__R6<             |__  |    |    |
  131.            _|9                  12|_|                    _| |    |    |
  132.           | |                     | |__C2__g          R7<   |    |    |
  133.           | |_11___3___7___2___1__|                    |    |    |    |
  134.           |    |   |   |   |___|_______________________|____|____|    |
  135.           |    |  C3   |       |                                      |
  136.           |__|/|   |   |      C4                                      |
  137.           |  |\    |   |       |                                      |
  138.           |   D2   g   g       g                                      |
  139.           |_____________________                                      |
  140.                |       |        |                                     |
  141.          ___  R10      |       R11  ___                               |
  142.         v   |  |       |        |  |  v                               |
  143.       __R12 |__|    ___|___     |__| R13__                            |
  144.      |        _|___|___|___|____|_        |                           |
  145.      |       | 1   4  14  10   13 |       |                           |
  146.      |       |                    |       |                           |
  147.      |_______|6                  8|_______|                           |
  148.      |    |  |        IC2         |  |    |                           |
  149.     C5    |__|2       556       12|__|   C6                           |
  150.      |       |                    |       |                           |
  151.      g     __|3                 11|__     g                           |
  152.           |  |_____7___5___9______|  |                                |
  153.          C7        |   |   |        C8                                |
  154.           |        |  C9  C10        |                                |
  155.           |        |   |___|         |                                |
  156.           g        g     |           g                                |
  157.                          |                                            |
  158.                          |            ________________________________|
  159.                          |           |                 |
  160.                          |          R14                |
  161.                          |           |           |\    |
  162.                          |           |           |  \  |
  163.                          |___________|___________|3   \|
  164.                          |           |           |    7 \
  165.                        C11          R15          |IC3     \
  166.                          |           |           |741    6/___
  167.                          g           g           |    4 /     |
  168.                                                  |    /|      |
  169.                           g_[speaker]___C12______|2 /  |      |
  170.                                               |  |/    g      |
  171.                                               |_______________|
  172.  
  173. ::Schematic Parts Code::
  174.  
  175. R1:10K          R4:10K          R7:50K pot      R10:10K         R13:50K pot
  176. R2:10K          R5:10K          R8:50K pot      R11:10K         R14:100K
  177. R3:4.7K         R6:100K pot     R9:50K pot      R12:50K pot     R15:100K
  178.  
  179. C1:0.01uf       C4:10uf         C7:0.01uf       C10:0.01uf
  180. C2:1.00uf       C5:0.01uf       C8:0.01uf       C11:0.10uf      D1 :1N914
  181. C3:0.01uf       C6:0.01uf       C9:0.01uf       C12:10uf        D2 :1N914
  182.  
  183. S1 - SPST toggle
  184. S2 - Momentary push button Normally Open
  185. S3 - 3-position rotary switch                   g - Ground
  186.  
  187. \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\?///////////////////////////////////////
  188.  
  189. Downloaded From P-80 International Information Systems 304-744-2253 12yrs+
  190.