@!@!@!@!@!@!@!@!@!@!@!@!@!@!@!@!@!@!@!@!@!@!@!@!@!@!@!@!@!@!@!@!@!@!@!@!@!

!@ !@
@! P/H/A PRESENTS... @!
!@ !@
@! Network User Address (NUA) Attacker v1.01 @!
!@ Documentation !@
@! Program By Doctor Dissector @!
!@ !@
@! Dox By Dark Helmet @!
!@ !@
@!@!@!@!@!@!@!@!@!@!@!@!@!@!@!@!@!@!@!@!@!@!@!@!@!@!@!@!@!@!@!@!@!@!@!@!@!
\ This documentation was compiled and written on 03/30/90 at 7:00pm. /
------------------------------------------------------------------------

[0.0] CONTENTS -----------------------------------------------------------

Section Subject
======= ============================================================
0.0 Contents - You're fuckin' looking at it!

1.0 Introduction.

1.1 Files - Description of, Use of, etc...

1.2 Running NUA Attacker.

1.3 Setting up your scan.

1.4 Setting up your modem.

1.5 Scanning, Status Screen.

1.6 Credits, Conclusion, P/H/A.

======= ============================================================

--------------------------------------------------------------------------

[1.0] INTRODUCTION -------------------------------------------------------

Well, this is the first original P/H/A Release. NUA Attacker was
programmed in Turbo C v2.0 by Doctor Dissector. The purpose of NUA
attacker is to call SprintNet and scan NUAs. The range of NUAs to be
scanned, of course, are provided by the user of the program. In the
accompanying file, SND390.TXT, there is a list of NEARLY all the SprintNet
dialups in the U.S.A. Refer to it for your nearest dialup. This program
also includes mouse support for an increase in the ease of use. Any and
all bugs found should be reported to any P/H/A member, namely Doctor
Dissector, Dark Helmet, Killer Korean, or Anonymous Anarchist. Now onto
the procedures and use of NUA Attacker.

--------------------------------------------------------------------------

[1.1] FILES --------------------------------------------------------------

 In the ZIP file you should have got the following files:

NUAA.EXE - Main Program

NUAA.DOC - Documentation (You're reading it now!)
README.PHA - READ THIS FIRST!
SND390.TXT - List of SprintNet Dialups.

NUA Attacker will create the following files:

NUAA.CFG - NUAA's current attack/modem configuration.

NUAFILE.PHA - List of NUAs that NUA Attacker connected to.
LOGFILE.PHA - List of NUAs that NUA Attacker did not connect to.

This file also shows the response code NUA

Attacker received.

* NOTE: The NUAfile and the Logfile filenames can be changed.

These are the files that NUA Attacker will use. NUAFILE.PHA and
LOGFILE.PHA are both ASCII compatible text files, so you can TYPE these
files to view them or use LIST or anything of the sort. In addition, if
the filename given already exists, any data to that filename will be
appended at the EOF mark in the existing file.

--------------------------------------------------------------------------

[1.2] RUNNING NUAA -------------------------------------------------------

To run NUA Attacker enter the following.

C:\>NUAA [/I]

The '/I' option will allow you to run NUA Attacker without it initializing
the modem before scanning. When you go to "Begin attack," NUAA will begin
scanning, so if you had logged onto a system previously, you should be
logged onto SprintNet, and at the '@' prompt.

--------------------------------------------------------------------------

[1.3] SCAN SETUP ---------------------------------------------------------

Setting up your scan can be done by going to the 'Setup attack' option
on the top selection bar. The options that follow selecting this option
are as follows:

Phone Number - SprintNet Dialup number (SND390.TXT).

Starting NUA** - NUA to begin scanning at.
Ending NUA** - NUA to terminate scanning at.
Timeout - Time (seconds) to wait for response from NUA.
Log filename - Name of file to output any non-connections and
error messages.
(LOGFILE.PHA, Default)
NUA filename - Name of file to output any connecting NUAs.
 (NUAFILE.PHA, Default)
Decimals* - Enable/Disable Decimal scanning.

* Notes on Decimals.

Most of those are self-explanatory except Decimals. SprintNet also

uses NUAs with the format XXXXXX.XX. NUA Attacker supports the scanning of
decimals also. For example, if you put the following:

Starting NUA: 619100.10

Ending NUA: 619200.10

NUA Attacker will start with 619100.10 and the next NUA to scan would be
619100.11, then 619100.12, etc... SprintNet only supports decimals to the
hundredths digit.
While in the 'Setup attack' window, there are some valid hotkeys.
They are:

ESC - Abort setup.

ALT-S - Save setup to memory.
Cursor Keys - Scroll through fields.

When you are done setting up your scan, you might want to save the
setup to disk also (not only temporary memory). This can be done by
entering the 'File commands' and selecting the 'Save options' option.
The attack setup and modem parameters are saved in the same file also,
so this command will also save the current modem parameters to disk.

Also, if you fuck up your setup by accident, but haven't saved it

to disk yet, you can restore your setup that is saved to disk by entering
the 'File commands' and choosing the 'Load options' option. This also
goes for the modem parameters.

** Notes on NUA format:

The format of the NUA when entering it in the setup fields must be
done in a certain way. For example, if you put:

Starting NUA: 6191 *WRONG*

Ending NUA: 619100 *RIGHT*

would do start at 6191, then go up to 6199, but then it will skip to 6200.
Therefore, you must do the following:

Starting NUA: 619001 *RIGHT*

Ending NUA: 619100 *RIGHT*

The point is, the two fields should be the same length.

--------------------------------------------------------------------------

[1.4] MODEM SETUP --------------------------------------------------------

Selecting the 'Modem parameters' will take you to a window with the
following information in it:
 COM Port - Port that your modem is on.
Baud Rate - Baud Rate to connect to SprintNet with.
300, 1200, 2400, or 9600 ONLY.
Initialization - Initialization string to send before scanning.
This is totally Hayes Compatible.
Dial Prefix - Prefix to use before sending the phone number
to the modem.
Dial Suffix - Character to send after the phone number is
sent to the modem. Usually a carrige return or
extra if calling through a PBX.
Hangup - String to send to modem to hangup.

The same hotkeys apply to this window as do to the 'Setup attack' window.
Also, the methods for saving these values to disk are outlined in the
'Setup attack' section of these dox. The rest of the options in this
section are all self-explanatory so I won't go into detail on them. If you
don't know what the fuck is going on, then quit using this and go to hell!

--------------------------------------------------------------------------

[1.5] SCANNING -----------------------------------------------------------

OK, now to the good part, actually scanning something. Choosing the
'Begin attack' option on the top status bar will tell NUA Attacker to
commence the scan. The order of operations when you select 'Begin attack'
is as follows:

1. Initializes Modem.
2. Dials SprintNet Dialup entered in 'Setup attack.'
3. Waits for 'TERMINAL=' prompt and enters 'D1'
NOTE: 'D1' means a personal computer has connected.
4. Waits for '@' prompt.
5. Begins scanning from 'Starting NUA' entered in 'Setup attack.'

When it finishes scanning the desired NUAs, NUA Attacker will hangup the
phone, then it will end the attack. There are also some hotkeys you can
use while NUA Attacker is scanning. They are:

ALT-B - Sends a BREAK signal to SprintNet. This may be

necessary to break out of some manual scanning
on SprintNet.
ALT-H - Send hangup string to modem, place NUAA in PAUSE
mode.
ALT-X - Hangup modem and exit attack. If you exit the
attack before the last NUA has been scanned,
NUAA will save your configuration with the
starting NUA as the last NUA NUAA has scanned
during the session you just killed. This allows
you to continue the scan without changing values
at a later date.
ESC - Pause scan. This will enable you to enter
anything you need to while still online. This
just transfers control from NUA Attacker to the
user, or makes NUAA a dumb terminal.

The status screen is the bottom window on your screen. It contains

the following information:

Starting NUA - NUA that NUA Attacker started scanning at.

Ending NUA - NUA that NUA Attacker will end with.
Connections - Number of connections found on the current scan.
Current NUA - NUA that NUA Attacker is currently scanning.
Log - Logfile filename.
NUA - NUAfile filename.

In addition, the very last line on your screen contains some other
information that may be useful. It contains:

Time/Elapsed - Gives current REAL time and the elapsed time on

the current scan. These are separated by a '/'.
Status - Gives current response code and/or modem
information.
Last - Gives the last response code and/or modem
information.

Some PADs have a hard time connecting at higher baud rates for some
fucked up reason, so if you run into one that just fucks all hell out of
your computer, try logging on at a lower baud rate. This happens
especially with 2400 and up. Try 1200 and below.

--------------------------------------------------------------------------

[1.6] CONCLUSION ---------------------------------------------------------

That's the overview of how to use NUA Attacker. This can be most
useful when looking for PSNs, UNIXs, outdials, and shit like that. Well,
now that you have this piece of shit, use it! Relay anything great or
interesting you find to any P/H/A member. Also, any bugs you find should
be sent to P/H/A also!

Credits:

(c)1990 (03/30/90) P/H/A Software Development Team.

Written and Programmed by Doctor Dissector.
Documentation Written by Dark Helmet.
Special Thanx to the rest of P/H/A.

P/H/A are: Doctor Dissector, Dark Helmet, Killer Korean, and

Anonymous Anarchist.

P/H/A Nodes:

Insidious Infuzion - P/H/A HQ - SysOp: Doctor Dissector

Internal Stack III - P/H/A #2 - SysOp: Dark Helmet

Greets to: cDc - Where ya been?

NARC - You're getting there.
NAPPA - HELLO? Hello? hello? ...........
INC, NYC, THG, FiRM - You ALL suck! (hehe) Stop feuding!
Ex-P500 Members - Whaddup?
PHRACK Editors - Don't bend over for the soap!
StudZ - Need a little bit more activity boyz.
 NWA - We love your albums. "Fuck Tha Police!"
Eazy-E - Fuck you man! Kick more ass! New album!

Fuck Off to: Wizdom - (of CCOPS) - This dude is a lamer!

All Telco Employees - Why make it so difficult?
It's gonna happen anyway!
Cops - Watch out for that cone!

-----------------------------------------------------------------------
(c)1990 P/H/A (Phreakers/Hackers/Anarchists), Software Development Team