_   _   ___   _ _ _  _____   ___
                   | |_| | / _ \ | | | ||_   _| / _ \
                   |  _  || (_) || | | |  | |  | (_) |
                   |_| |_| \___/ \_____/  |_|   \___/

              get free access to the net by fake-accounts
                      a 'tutorial' by lord caligo
                          11/22/97 (mm/dd/yy)


OVERVIEW:  I.    INTRODUCTION
           II.   BASICS
           III.  HOW TO FAKE A SIGNUP
           IV.   CREDIT CARD ALGORYTHM
           V.    DISADVANTAGES

 --------------------------------------------------------------------------

I. INTRODUCTION

I'm writing this essay because FraVia (http://www.cracking.net/fravia/)
asked for it. He saw my first one (HOWTO create secure webpages) and 
encouraged me to write a new tutorial - this time I'll try to show you 
how easy it is to get free access to the Net with all its advantages 
and disadvantages. It's not the first and it won't be the last tutorial
about this topic, but that does not matter =;-]

 -------------------------------------------------------------------------

II. BASICS

Creating fake accounts is as easy as reading this text - after you
understood it for the first time, you'll never have problems any more.

The idea is very old, "hackers" used it as soon as the Internet got
popular and providers growed up all around the world. It's not my
private scheme, everybody with a BIT of knowledge "discovered" it
some time ago.

At first, what do we need to sign up for an legal account?
We need (of course) a name with address, telephone number (not always)
and ... how to pay normally?

The easiest way is to use one of the little fancy plastic cards every-
body has, we just need to use our personal, private number for it
(more in chapter III.) . Many providers give you the possibility to
sign up directly when online (Compuserve, AOL, UUNET). I don't know
how it works in your country, I can only speak for Germany.

A second way would be a signup with account- and bank code number.

 -------------------------------------------------------------------------

III. HOW TO FAKE A SIGNUP

Okay, just remember what we need:

1. A NAME, ADDRESS & TELEPHONE NUMBER

 Easy to "fake", just imagine some. NEVER use names or telephone numbers
 of known people or friends, just really IMAGINE one.
 If you don't have *any* imagination, take a look at the local telephone
 book.

2. CREDIT CARD- OR ACCOUNT-NUMBER

 There are many tools generating VISA- or Discovery-Numbers, see Chapter
 VI. Just go fetch some of them or make it on your own...
 
 Account numbers... erhm, I don't know any algorythm for it, just read
 some announces or similar. You'll find numbers of different persons soon.
 
3. SIGN UP

 Now go sign up ! You have all you need.

 Some providers like AOL (in Germany?) do not only check if the algorythm
 is VALID, they compare the Credit Card Number with a local VISA-computer
 while you're online. Just try out... if it does not work, try another
 provider or use account numbers. Perhaps you can get real numbers some-
 where... DO NOT BEG ME! 
 There are various texts about how to validate a card (whether if it's
 REAL or not), don't know if you can use them any more.

 ------------------------------------------------------------------------

VI. CREDIT CARD ALGORYTHM

The most popular card to fake is VISA, many many many generators are
out for most OS.
Just look around on the Net and ask your friends. If you can't find
anything, here are only some URLs to start from:

 http://www.twistedinternet.com/download/cctools/ (get pwd on main page)
 http://www.phreak.co.uk/datathief/carding.html
 http://credit.home.ml.org/
 http://www.nauticom.net/www/acidware/carding/
 http://www.angelfire.com/pa/voi/carding.html

Just check out some of them and get the stuff you need.

Here is a PASCAL-program for checking valid numbers (VISA, MasterCard, 
American Express & Discovery):

 = = = = = = = = =
program checkccard;
{$N+} {turn coprocessor on }

FUNCTION  NUMBERS(C:STRING):STRING;
VAR A:STRING;
    X:INTEGER;
  BEGIN {strips out all non-numeric digits from a string}
    A:='';
    IF LENGTH(C)>0 THEN FOR X:=1 TO LENGTH(C) DO
      IF C[X] IN ['0'..'9'] THEN A:=A+C[X];
    NUMBERS:=A;
  END;

FUNCTION VALOF(CONST A:STRING):LONGINT;
VAR I:INTEGER;
    L:COMP;
  BEGIN {guarantee no crash VAL function}
    VAL(A,L,I);
    IF I<>0 THEN L:=0;
    IF L>HIGH(LONGINT) THEN L:=HIGH(LONGINT);
    IF L<LOW(LONGINT) THEN L:=LOW(LONGINT);
    VALOF:=TRUNC(L);
  END;

FUNCTION VALIDCCARD(A:STRING):BOOLEAN;
VAR C:CHAR;
    T:WORD;
    X,M,N:BYTE;
  BEGIN
    VALIDCCARD:=FALSE;
    A:=NUMBERS(A);
    IF A[0]<#4 THEN EXIT;
    C:=A[LENGTH(A)];
    DEC(A[0]);
    M:=2;
    T:=0;
    FOR X:=LENGTH(A) DOWNTO 1 DO
      BEGIN
        N:=(BYTE(A[X])-48);
        N:=N*M;
        IF N>9
          THEN BEGIN
                 N:=N-10;
                 INC(T);
               END;
        T:=T+N;
        M:=3-M;
      END;
    T:=(TRUNC((T+9)/10)*10)-T;
    IF T=(BYTE(C)-48) THEN VALIDCCARD:=TRUE;
  END;

FUNCTION CCARDTYPE(A:STRING):BYTE;
{returns
  0:invalid credit card type
  1:VISA
  2:MC
  3:American Express
  4:Discovery
  5:Unknown type}
VAR W:LONGINT;
  BEGIN
    A:=NUMBERS(A);
    IF VALIDCCARD(A)
      THEN BEGIN
             W:=VALOF(COPY(A,1,6));
             IF (W>=510000) AND (W<=559999) AND (BYTE(A[0])=16)
               THEN CCARDTYPE:=2 {Mastercard}
               ELSE
             IF (W>=400000) AND (W<=499999) AND (BYTE(A[0])=13)
               THEN CCARDTYPE:=1 {VISA}
               ELSE
             IF (W>=400000) AND (W<=499999) AND (BYTE(A[0])=16)
               THEN CCARDTYPE:=1 {VISA}
               ELSE
             IF (W>=340000) AND (W<=349999) AND (BYTE(A[0])=15)
               THEN CCARDTYPE:=3 {American Express}
               ELSE
             IF (W>=370000) AND (W<=379999) AND (BYTE(A[0])=15)
               THEN CCARDTYPE:=3 {American Express}
               ELSE
             IF (W>=601100) AND (W<=601199) AND (BYTE(A[0])=16)
               THEN CCARDTYPE:=4 {Discover}
               ELSE CCARDTYPE:=5;{Unknown type}
           END
      ELSE CCARDTYPE:=0;
  END;

BEGIN
 { mainroutine }
END.
 = = = = = = = = =

 ------------------------------------------------------------------------

V. DISADVANTAGES

Hey, there's always the possibility that they go fetching your caller
ID or trace your line back ! Just FAKE ON YOUR OWN RISK! ;]

But there are more disadvantages:

 - you'll have to re-signup after a short period (depends)

 - you don't have a permanent email-address (!!): get one at an 
   independent free service provider like hotmail, rocketmail or
   take a look at http://payfree.home.ml.org/freemail.htm

 - your provider cannot provide webspace because your name
   changes every new signup: get space somewhere else

 - and more ...

 ------------------------------------------------------------------------

VI. LAST WORDS

Okay, this is a short essay, it was written in about an hour. But I
don't think there is much to say about fake-accounts - everybody can
create and use them ...
To get my newer tutorials, visit my page or email me (caligo@lords.com).

Do not forget to take a look at my cracking site:
      
            -==>  http://cracking.home.ml.org/  <==-


This tutorial is, was and will always be (c)opyrighted by myself, Lord
Caligo. You can spread it around everywhere, but please DO NOT modify.
 ------------------------------------------------------------------------