34                                               The Boxing Book
_______________________________________________________________________
                            Chapter 4

                            The Boxes
                            ---------

The Aqua Box by Kopy Kat
------------ 
 
     For a long time, it was impossible to escape from the lock 
in trace, this box does offer an escape route with simple direc
tions to it. This box is quite a simple concept, and almost any 
phreaker with basic electronics knowledge can construct and use 
it.
 
     The Lock in Trace
     -----------------

     A lock in trace is a device used by the F.B.I. to lock into 
the phone users location so that he can not hang up while a trace 
is in progress. For those of you who are not familiar with the 
concept of `Locking In', then here's a brief explanation.

     The F.B.I. can tap into a conversation, sort of like a 
three-way call phone line. All the phone connections are held 
open by a certain voltage of electricity, that is why you some
times get static and a faint connection when you are calling far 
away, because the electricity has trouble keeping the line up. 
What the lock in trace does is cut into the line and generate 
that same voltage straight into the lines. That way, when you try 
to hang up, voltage is retained. Your phone will ring like some
one was calling you even after you hang up. (If you have call-
waiting, you should understand better about that.)

     So, in order to eliminate the tracer, you must lower the 
voltage on your phone line.  You should know that every time 
someone else picks up the phone line, then the voltage decreases 
a little. In the first steps of planning this out, K.K. suggested 
getting about hundred phones all hooked into the same line that 
could all be taken off the hook at the same time. That would 
greatly decrease the voltage level. That is also why most three-
way connections that are using Bell service three way calling 
become quite faint after a while.

     By now, you should understand the basic idea. You have to 
drain all of the power out of the line so the voltage can not be 
kept up.  A rather sudden draining of power would quickly defeat 
the F.B.I's voltage machine, because it was only built to sustain 
the exact voltage necessary to keep the line open.

     For now, imagine this: One of the normal Radio Shack genera
tors that you can go pick up one end of the cord that hooks into 
the central box has a phone jack on it and the other has an 
electrical plug. This way, you can "Flash" voltage through the 
line, but cannot drain it. So, some modifications have to be 
done. 


_______________________________________________________________________
                        Copyright 1990
35                                                    The Boxes   
_______________________________________________________________________
     The Aqua Box 
     ------------

     Materials Needed- 
     ----------------

  A BEOS (Basic Electrical Output Socket), like a small lamp 
     type connection, where you just have a simple plug and wire 
     that would plug into a light bulb. 

  One of the cords mentioned above, if you can't find one then 
     construct your own...  Same voltage connection, but the 
     restrainer must be built in. (I.E. the Central Box).

  Two phone jacks (one for the modem, one for if you are being 
     traced, to plug the aqua box into). 

  Some creativity and easy work. 

     NOTICE:  No phones have to be destroyed/modified to make 
this box, so don't go out and buy a new phone for it! 

     All right, this is a very simple procedure. If you have the 
BEOS, it could drain into anything, a radio, or whatever.

  1) Take the connection cord. Examine the plug at the end. It 
     should have only two prongs, if it has three, still, do not 
     fear. Make sure the electrical appliance is turned off 
     unless you want to get fried the quick way while making this 
     thing. Most plugs will have a hard plastic design on the top 
     of them to prevent you from getting in at the electrical 
     wires inside. Well, get a nice sharp blade and remove it. If 
     you want to keep the plug, ( I don't see why..) then just 
     cut the top off. When you look inside, low and behold, you 
     will see that at the base of the prongs there are a few 
     wires connecting in. Those wires conduct the power into the 
     appliance. So, you carefully unwrap those from the sides and 
     pull them out until they are about an inch ahead of the 
     prongs. If you don't want to keep the jack, then just rip 
     the prongs out. If you are, cover the prongs with insulation 
     tape so they will not connect with the wires when the power 
     is being drained from the line. 

  2) Do the same thing with the prongs on the other plug, so you 
     have the wires evenly connected. Now wrap the end of the 
     wires around each other. If you happen to have the other end 
     of the voltage cord hooked into the phone, stop reading now, 
     you're too stupid to continue. After you've wrapped the 
     wires around each other, then cover the whole thing with the 
     plugs with insulating tape. Then, if you build your own 
     control Box or if you bought one, then cram all the wires 
     into that and reclose it. That box is your ticket out of 
     this. 




_______________________________________________________________________
                       M & M Enterprises
36                                               The Boxing Book
_______________________________________________________________________
  3) Re-Check everything to make sure it's all in place. This is 
     a pretty flimsy connection, but on later models when you get 
     more experienced at it then you can solder away at it and 
     form the whole device into one big box, with some kind of 
     cheap MATTEL hand-held game inside to be the power connect
     er. 

     In order to use this, just keep this box handy. Plug it into 
the jack if you want, but it will slightly lower the voltage so 
it isn't connected. When you plug it in, if you see sparks, 
unplug it and restart the whole thing. But if it just seems fine, 
just leave it. 

     Using it!!
     ----------

     Now, so you have the whole thing plugged in and all. Do not 
use this unless the situation is desperate! When the trace has 
gone on, don't panic, unplug your phone, and turn on the appli
ance that it was hooked to. It will need energy to turn itself 
on, and here's a great source. Just plug it into the phone jack 
and your troubles are over! The voltage to keep a phone line open 
is pretty small and a simple light bulb should drain it all and 
you will no longer need to worry about the system attempting to 
invade upon your privacy.



Introducing the Beige Box by The Exterminator & The Terminal Man
-------------------------    (5/17/85)
                             
     INTRODUCTION
     ------------

     Have you ever wanted a lineman's handset? Surely every 
phreak has at least once considered the phun that he could have 
with one. After searching unlocked phone company trucks for one 
for months, we had an idea. We could build one. We did, and named 
it the "Beige Box, " simply because that is the color of ours. In 
the following file we will give complete instructions for the 
construction and use of a Beige Box.

     CONSTRUCTION
     ------------

     The construction is very simple. First, you must understand 
the concept of the device. In a modular jack, there are four 
wires. These are red, green, yellow, and black. For a single line 
telephone, however, only two matter: the red (ring) and green 
(tip). The yellow and black are not necessary for this project. A 
lineman's handset only has two clips on it: the ring and the tip.






_______________________________________________________________________
                        Copyright 1990
37                                                    The Boxes   
_______________________________________________________________________
     You will need a phone (we recommend a touch-tone) with a 
modular plug, a modular jack, and two large alligator clips 
(preferably red and green, respectively). Take the modular jack 
and look at the bottom of its casing. There should be a gray jack 
with four wires (red, green, yellow, and black) leading out of 
it. To the end of the red wire attach a red alligator clip. To 
the end of the green wire attach a green alligator clip. The 
yellow and black wires can be removed, although I would only set 
them aside so that you can use the modular jack in future 
projects. Now insert your telephone's modular plug into the 
modular jack. That's it.

     This particular model is nice because it can be easily made, 
is inexpensive, uses common parts that are readily available, is 
small, is lightweight, and does not require the destruction of a 
phone.

     BEIGE BOX USES
     --------------

     There are many uses for the Beige Box. However, before you 
can use it, you must know how to attach it to its output device. 
This device can be any of several Bell switching apparatus that 
include terminal sets (i.e., remote switching centers, bridging 
heads, cans, etc.). To open most Bell Telephone switching appara
tus, you must have a 7/16 inch hex driver. This piece of equip
ment can be picked up at your local hardware store. With your 
7/16 hex driver, turn the security bolt(s) approximately 1/8 of 
an inch counter-clockwise and open. If your output device is 
locked, then you must have some knowledge of destroying and/or 
picking locks. However, we have never encountered a locked output 
device. Once you have opened your output device, you should see a 
mass of wires connected to terminals. On most of your output 
devices, the terminals should be labeled "T" (Tip - if not la
beled, it is usually on the left) and "R" (Ring - if not labeled, 
it is usually on the right). Remember: Ring - red -  right. The 
"Three R's" -- a simple way to remember which is which.

     Now you must attach the red alligator clip (ring) to the "R" 
(ring) terminal. Attach the green alligator clip (tip) to the "T" 
(tip) terminal. NOTE: If instead of a dial tone you hear nothing, 
re-adjust the alligator clips so that they are not touching each 
other or other terminals. Also make sure that they are firmly 
attached. By this time you should hear a dial tone. Dial ANI and 
find out the number that you are using (you wouldn't want to use 
your own).











_______________________________________________________________________
                       M & M Enterprises
38                                               The Boxing Book
_______________________________________________________________________
   Here are some practical applications:

  o  Eavesdropping
  o  Long distance, static-free phone calls to friends
  o  Dialing direct to Alliance Conferencing (also static-free)
  o  Phucking people over
  o  Bothering the operator at little risk to yourself
  o  Blue Boxing with a greatly reduced chance of getting caught
  o  Anything at all that you want, since you are an extension 
     on that line

     Eavesdropping:
     -------------

     To be most effective, first attach the Beige Box and then 
your phone. This eliminates static caused by connecting the box, 
therefore reducing the potential suspicion of your victim. When 
eavesdropping, it is always best to be neither seen nor heard. If 
you hear someone dialing out, do not panic; but rather hang up, 
wait, and pick up the receiver again. The person will either have 
hung up or tried to complete their call again. If the latter is 
true, then listen in, and perhaps you will find information 
worthy of blackmail! If you would like to know who you are lis
tening to, after dialing ANI, pull a CN/A on the number.

     Dialing Long Distance:
     ---------------------

     This section is self-explanatory, but don't forget to dial a 
"1" before the NPA.


     Dialing Direct to Alliance Conferencing:
     ---------------------------------------

     Simply dial 0-700-456-1000 and you will get instructions 
from there. I prefer this method over PBXs, since PBXs often have 
poor reception and are more difficult to come by.

     Phucking People Over:
     --------------------

     This is a very large topic for discussion. Just by using the 
other functions described, you can create a large phone bill for 
the person (they will not have to pay it, but it is a hassle for 
them). In addition, since you are an extension of the person's 
line, leave your phone off hook, and they will not be able to 
make or receive calls. This can be extremely nasty because no one 
would suspect the cause of the problem.








_______________________________________________________________________
                        Copyright 1990
39                                                    The Boxes   
_______________________________________________________________________
     Bothering the Operator:
     ----------------------

     This is also self-explanatory and can provide hours of 
entertainment. Simply ask or say things to her that are offensive 
and you would not like traced to your line. This also corresponds 
with the previous described section, Phucking People Over. After 
all, guess who's line it gets traced to?

     Blue Boxing:
     -----------

     See a file on Blue Boxing for more details. This is an 
especially nice feature if you live in an ESS-equipped prefix, 
since the calls are, once again, not traced to your line.

     POTENTIAL RISKS OF BEIGE BOXING
     -------------------------------

     Overuse of the Beige Box may cause suspicions within the 
Gestapo, and result in legal problems. Therefore, I would recom
mend that you:

  o  Use more than one output device
  o  Choose a secluded spot to do your Beige Boxing
  o  Keep a low profile (i.e., do not post under your real name 
     on a public BBS concerning your accomplishments)
  o  In order to make sure that the enemy has not been inside 
     your output device, I recommend that you place a piece of            
     transparent tape over the opening of your output device. 
     Therefore, if it is opened in your absence, the tape will be 
     displaced and you will be aware of the fact that someone has 
     been intruding upon your territory.

Beige Boxing By Cardiac Arrest [09/26/89]
------------

     Introduction
     ------------

     Well, I KNOW that nearly everybody and their brother knows 
how to beige box, but what magazine is complete without a file as 
basic as that. Anyways, if you know how to beige box, and consid
er yourself master beiger, skip this and go on to the next file.  
Otherwise, I'll try to help beginners and maybe give some experi
enced boxers food for thought.











_______________________________________________________________________
                       M & M Enterprises
40                                               The Boxing Book
_______________________________________________________________________
     What IS Beige Boxing
     --------------------

     If you've ever paid any attention to the phone company, 
you've definitely seen a guy in funny Ma Bell overalls running 
around with a funny-looking telephone with alligator clips coming 
out the bottom. That's the Ma Bell version of the "beige box", 
called a Lineman's Handset. There are literally TONS of uses for 
a beige boxes, and they are simple to make, so it's usually a 
good introduction to the phreaking world.

     The Purpose Of This File
     ------------------------

     If even one person reads this file and learns something, 
I've accomplished what I set out to do (how cliche, right?). But 
seriously, I'm going to attempt to provide several easy methods 
of beige boxing. Some experienced beigers will definitely see 
some familiar designs, but they might also see a new twist or 
two. I'll also include (hopefully) easy but complete directions 
of some of the possibilities for use.

     Back To Reality
     ---------------

     Ok, on with the file. There are about as many beige box 
designs as there are uses, and with both, new ideas are always 
popping up. The designs in this file are by no means the best 
designs. I HOPE that they're some of the easiest, but who am I to 
say.

     Method #1 (Generic, Phone Destroying, Design)
     ---------------------------------------------

     Required Materials

     1  Telephone that you wont miss (it'll be a permanent beige 
       box)
     2  Alligator clips
     1  Telephone cord
     1  Screwdriver
     1  Pair of wire cutters
     1  Soldering iron
        Solder

     Construction

     1.  Open up the telephone with the screwdriver. I can't give 
       exact directions, because different models vary, but if 
       you can't find the screws, try checking under the plastic 
       plate that holds the phone number of the location.

     2.  Look at the modular jack (the thing the phone cord plugs 
       into). Find the red and green wires. These are the ones 
       you want. Trace these wires with your finger to the screw 


_______________________________________________________________________
                        Copyright 1990
41                                                    The Boxes   
_______________________________________________________________________
       that holds them down. Connect your phone cord to these 
       screws, either by soldering them, or by wrapping them 
       around the screw and tightening it down.

     3.  Run the telephone cord out the modular jack's hole. If 
       you can't squeeze it through the jack, take the wire 
       cutters the cut the wires leading to  it, and yank it 
       out. That should leave plenty of room.

     4.  Re-assemble your phone.

     5.  At the end of the telephone cord hanging out of the 
       phone, connect the alligator clips to the same wires 
       hooked up to the screws inside the housing of the phone.  
       You can connect them either by soldering, or by splicing 
       the wire to them (twisting them around the hole and 
       praying that it holds).

     Method #2 (A spin-off of #1, but less permanent)
     ------------------------------------------------

     Required Materials

     1  Telephone (Don't worry, you wont wreck this one)
     1  Telephone cord (You can use one of the springy ones that 
       you always tangle up when you're on the phone)
     2  Alligator clips
     1  Pair of wire cutters
     1  Soldering iron
        Solder

     Construction

     1.  Cut the modular plug (the thing that plugs into the wall 
       or telephone set) off ONE end of the telephone cord.

     2.  Find the red and green wires and connect the alligator 
       clips to these by soldering or splicing them.

     3.  Connect the other end (the that still has a plug) to a 
       telephone.


     Method #3 (Similar to #2, but using a wall jack vice a cord)
     ------------------------------------------------------------

     Required Materials

     1  Telephone (This wont get wrecked, either)
     1  Modular telephone wall jack (This WILL get wrecked)
     2  Alligator clips
     1  Pair of wire cutters
     1  Soldering iron
        Solder



_______________________________________________________________________
                       M & M Enterprises
42                                               The Boxing Book
_______________________________________________________________________
     Construction

     1.  Look on the back of the wall jack. You should see the 
       typical red and green wires going into the back of the 
       jack. Leave the end going into the jack alone, but trace 
       them to where the go into the plate holding the jack. Cut 
       them here (being sure, as I said, to leave the jack end 
       alone).

     2.  Hook the alligator clips up to the red/green wires.

     3.  Plug the phone into the wall jack.


     Testing Your Box
     ----------------

     Ok, now that you've got one of the boxes described above (or 
a different one), you're ready to go. Go outside, and on the side 
of your house, you should be able to find a small, approximately 
3" X 3", puke-green box, with a bolt in the middle of it. Take a 
wrench (I'm not sure what the size is, but a 10mm wrench works 
for me, and that's all I really care about. But be careful, since 
it's not exact, you might strip it) and take off the bolt. You'll 
probably have to clear out some cobwebs, since it hasn't been 
used in a while. Inside the box, you should see four screws (one 
on each corner) with the typical red/green wires connected to 
them.  (If you have two phone lines, the bottom screws will have 
black/yellow wires, if you have one phone line, the bottom won't 
have any). You can probably guess what happens from here--Hook 
the alligator clips up to the screws. You should get a dial tone. 
If you didn't, make sure the connection is clean, that you're 
hooked up to the right terminals (screws), etc. If you still 
don't get one, you're screwed. That means there's something wrong 
with your box. If you do get a dial tone, you're probably guess
ing what you can do from here.

     Where Can You Use The Beige Box
     -------------------------------

     You can use the beige box on several pieces of equipment. 
You can go to you're best friend's house and use it like I de
scribed. You can open up one of those ugly green boxes about 3' 
high in the back yard of every couple houses. Inside you'll see 
pretty much the same thing as at individual houses, only there's 
several houses running through the box, not just yours. I have 
heard that you can use a beige inside a Ma Bell manhole, but I 
crawled down one (not fun) and there was a huge plastic tube. You 
can see the telephone wires inside, but I have no idea how to get 
to them. There are definitely more uses, but these are the ones 
I've been exposed to.






_______________________________________________________________________
                        Copyright 1990
43                                                    The Boxes   
_______________________________________________________________________
     The Box Of Many Uses
     --------------------

     As I've mentioned, there are TONS of uses for beige boxes, 
and the ones I explain are merely the ones I've had some fun 
with. It's all basically the same, but there are some interesting 
twists.

     Conferences
     -----------

     Definitely one of the funniest. It's easier to do than ex
plain, but I'll give it a shot. First, call up a conference 
service (I'll list them in a second). From here, you'll pretty 
much get instructions (at least on the ones I've used). Basical
ly, you call up your buddies, tell them what's going on, and hit 
a key (usually *) and they get put into the conference. From 
there, you and all your friends can all talk to each other, trade 
codes, etc. Get the idea?  (You can even call foreign numbers. On 
our conference, we voiced a user from Italy and called a hotel in 
Madrid for someone to practice Spanish).

     Conference Services :

          0-700-456-1000     0-700-456-1001     0-700-456-1002
          0-700-456-1003     0-700-456-1004     0-700-456-2000
          0-700-456-2001     0-700-456-2002     0-700-456-2003
          0-700-456-2004


     Tapping
     -------

     If you hook up your beige box, and hear voices, the rightful 
owner of the line is obviously using it.  Well, that's about all 
there is to phone tapping.  Just shut up and listen.

     L/D Calling
     -----------

     Hey, it's not YOUR bill, so go ahead and call your pal in 
France.  Maybe voice verify some users on your BBS.

     Conclusion
     ----------

     That's about it. I won't pretend to be an expert on beige 
boxes, so I won't say that these are the limits, or that these 
are the best methods. I'm just trying to provide a non-technical 
introduction to phreaking. 







_______________________________________________________________________
                       M & M Enterprises
44                                               The Boxing Book
_______________________________________________________________________
Introduction To Beige Boxing By Shooting Shark [1/13/85]
----------------------------
 
     Beige Boxes are amazingly simple to make. They are just test 
sets, which are used by telephone linemen for connecting to any 
phone line. And test sets are just ordinary telephones. They are 
called beige boxes because they are a combination of a brown box, 
a device for listening into phone lines, and a white box, which 
is a portable touch-tone generator, sold by Radio Shack and AT&T. 
(AT&T actually colors theirs white, which I find hilarious.) 
Beige Boxing is easy, fun, and offers dialing options often 
unavailable through LDC ports or extenders - you are physically 
using an unsuspecting person's phone line for making calls any
where - even to the 0-700 and 900 SACs (Special Area Codes) and 
976- numbers. The only reason I am writing this file is to make 
this enjoyable hobby aware to phreaks who want something differ
ent to try. 

     Building The Beige Box 
     ----------------------

     Take any phone (a touch-tone phone is preferred) and strip 
off the modular plug down to four wires. Connect heavy-duty 
alligator clamps to the red and green wires (these are the only 
wires you really need to make phone calls). 

     Using The Box 
     -------------

     Drive to a downtown location. Go behind a business, and look 
for any metal boxes on the wall that say General Electric, AT&T, 
the name of your BOC etc. Open the box. You may find wires of 
four colors leading to bolts. Just find any two places where a 
red and green wire terminate and connect the alligator clips of 
your Beige Box to these wires. If you don't get a dial tone, try 
another combination of whatever red and green wire endings you 
find (If the box has non-standard wire coloring, you are in for a 
bit more work). Once you have a hookup where you have a dial 
tone, you're ready to go. Note - if you get a connection where 
you hear talking, HANG UP and note the connection as a good one.  
That line is just being used now. If you are daring, speak into 
the mouthpiece, and tell them that you are a telephone repairman, 
and that they should not use the phone for an hour. This gives 
you time to call Dial-A-Muppet, set up your conference, etc!    

     Another good source of phone wiring is an apartment complex 
- all the connections for the various apartments will be in one 
box, giving you many choices! This can be a little more danger
ous. If it is in a quiet area, you may find yourself being stared 
at from a second-story window by an old woman in curlers who 
simply wondered why there was a conversation going on by her 
trash can. One possible remedy to this is to get a hat that has 
the emblem of your local BOC - If anybody asks you what you're 
doing, cheerfully say "Telephone maintenance!". A fellow phreak 
named David Letterman successfully ran a tap from the box of his 


_______________________________________________________________________
                        Copyright 1990
45                                                    The Boxes   
_______________________________________________________________________
own apartment building through his window and to his telephone. 
He knew the family who's phone bill he was adding to, and swore 
that he knew nothing about it when their bill with $50 worth of 
"unplaced calls" came. Pacific Bell reimbursed them, and he 
removed the tap soon after. If you want to do this, you may even 
consider connecting the guts of a cordless phone to the phone box 
and keeping the handset in your home. That way, if someone goes 
nosing around the tampered-with phone box, the source of the tap 
will be untraceable. 

     One good thing to do is to call your local ANI # and the 
number of the line you are borrowing will be read off to you. If 
the robot voice seems to have trouble reciting the number, you 
have a spare line, and you're only ripping off the phone company!  
If not, you can then call that # from another location to find 
out who it is, or perhaps to tell them that you are the phone 
company and that they should not use their phone for a few hours.  
In fact, if you are talking with someone on a line and the owner 
of the line picks up his/her phone to make a call, tell them that 
you are the telco, etc. etc, we're doing some testing, please 
don't use your phone, etc. Works all the time!


BLACK BOX PLANS by Uncle Joe
---------------

  Parts:
  -----

  SPST toggle switch
  10K Ohm 1/2 Watt 10% resistor

  Procedure:
  ---------

  Cut two 6 inch lengths of wire

  Attach these to the switch terminals

  Open phone

  Locate F and RR terminals in the phone

  Wrap the resistor between these 2 terminals making sure it 
     only touches 2 terminals

  Connect 1 wire from the switch to the RR terminal

  Disconnect the green wire from its terminal

  Attach this green wire to the remaining switch wire

  Bring the switch out of the phone and close it up




_______________________________________________________________________
                       M & M Enterprises
46                                               The Boxing Book
_______________________________________________________________________
  Switch to a position where you get a normal dial tone and mark 
     this NORMAL. Mark the other position FREE.

  Instructions for use:
  --------------------

  When the phone rings, lift and drop the receiver as quickly as 
     possible

  Make absolutely sure the phone has stopped ringing

  Flip the switch to FREE

  Pick up the phone and talk normally

  Schematic:

    blue wire ---|
                 |--- F
    white wire --|    |
                   resistor
                      |
                     R R --- switch ---
                                      |
    green wire ------------------------


How to build a BLACK BOX From Sherwood Forest
------------------------

  To all who dare --

     What is a BLACK BOX? A BLACK BOX is a device that is hooked 
up to your phone that fixes your phone so that when you get a 
call, the caller doesn't get charged for the call. This is good 
for calls up to 1/2 hour, after 1/2  hour the Phone Co. gets 
suspicious, and then you can guess what happens.

     The way it works:
     ----------------

     What this little beauty does is keep the line voltage from 
dropping to 10v when you answer your phone. The line is instead 
kept at 36v and it will make the phone think that it is still 
ringing while your talking. The reason for the 1/2 hour time 
limit is that the Phone CO. thinks that something is wrong after 
1/2 an hour of ringing.

     All parts are available Radio Shack. Using the least possi
ble parts and arrangement, the cost is $0.98! And that is parts 
for two of them! Talk about a deal! If you want to splurge then 
you can get a small PC board, and a switch. There are two sche
matics for this box, one is for most normal phones. The second 
one is for phones that don't work with the first. It was made for 
use with a Bell Trimline touch tone phone.


_______________________________________________________________________
                        Copyright 1990
47                                                    The Boxes   
_______________________________________________________________________

            **  Schematic 1 for most phones  **
            **         LED ON: BOX ON        **

          FROM >--------------------GREEN->  TO
          LINE >--|   1.8k  LED  |---RED--> PHONE
                  |--/</</<--|>--|
                  |              |
                  ------>/<-------
                        SPST

          Parts:  1 1.8k 1/2 watt resistor
                  1 1.5v LED
                  1 SPST switch

     You  may just have two wires which  you connect together for 
the switch.

            **  Schematic 2 for all phones  **
            **        LED ON: BOX OFF       **

          FROM >---------------GREEN->  TO
          LINE >-------      ---RED--> PHONE
                      |  LED |
                   -->/<--|>--
                   |         |
                   ---/</</---
                       1.8k

          Parts:  1 1.8k 1/2 watt resistor
                  1 1.5v LED
                  1 DPST switch

     Here is the PC board layout that I recommend using. It is 
neat and is very easy to hook up.

             Schematic #1        Schematic #2

            **************     ****************
            *            *     *  -------     *
            * --<LED>--- *     *  |     |     *
            * |        | *     *  | <SWITCH>  *
            * RESISTOR | *     *  | |      |  *
            *        | | *     *  | |      /R *
            * -------- | *     *  | |      \E *
            * |        | *     *  | <LED>| /S *
            * --SWITCH-- *     *  |      | \I *
            *  |      |  *     *  |      | /S *
          L *  |      |  * F L *  |      | |  * F
          I>RED-      -RED>O I>RED-      ---RED>O
          N>-----GREEN---->N N>-----GREEN------>N
          E *            * E E *              * E
            **************     ****************




_______________________________________________________________________
                       M & M Enterprises
48                                               The Boxing Book
_______________________________________________________________________
     Once you have hooked up all the parts, you must figure out 
what set of wires go to the line and which go to the phone. This 
is because of the fact that LED's must be put in, in a certain 
direction. Depending on which way you put the LED is what con
trols what wires are for the line & phone.

     How to find out:
     ---------------

     Hook up the box in one direction using one set of wires for 
line and the other for phone.

     *NOTE*  For Model I switch should be OFF.
     *NOTE*  For Model 2 switch should be set to side connecting 
the LED.

     Once you have hooked it up, then pick up the phone and see 
if the LED is on. If it is, the LED will be lit. If is doesn't 
light then switch the wires and try again. Once you know which 
are which then label them.

     *NOTE*  - If neither directions worked then your switch was 
in the wrong position. Now label the switch in its current posi
tion as BOX ON.

     How to use it:
     -------------

     When the box is *ON* then you may only receive calls. Your 
phone will ring like normal and the LED on the box will flash. If 
you answer the phone now, then the LED will light and the caller 
will not be charged

     Hang up the phone after you are done talking like normal. 
You will not be able to get a dial-tone or call when the box is 
on, so turn the box *OFF* for normal calls. I don't recommend 
that you leave it on all the time, as you don't want it to answer 
when Ma Bell calls!


Building Your Own Blue Box By Jester Sluggo [11/27/86]
--------------------------

     This Blue Box is based on the Exar 2207 Voltage Controlled 
Oscillator. There are other ways to build Blue Boxes, some being 
better and some not as good, but I chose to do it this way. My 
reason for doing so: because at the time I started this project, 
about the only schematic available on BBS's was the one written 
by Mr. America and Nickie Halflinger. Those plans soon (in about 
90 seconds) became very vague in their context with a couple in-
consistencies, but I decided to "rough it out" using those plans 
(based on the Exar 2207 VCO) and build the Blue Box using that as 
my guide. During the construction of the Blue Box, I decided to 
type-up a "more complete and clear" set of Blue Box schematics 
than the file that I based mine on, in order to help others who 


_______________________________________________________________________
                        Copyright 1990
49                                                    The Boxes   
_______________________________________________________________________
may be trying/thinking of building a Blue Box. I hope these help.

     Note:  You should get a copy of the Mr. America/Nickie 
Halflinger Blue Box plans. Those plans may be of help to anyone 
who may have difficulty understanding these plans. Also, these 
plans currently do not support CCITT.

     Why should I build a Blue Box?
     ------------------------------

     Many of you may have that question, and here's my answer. 
Blue Boxing was the origin of phreaking (excluding whistling). 
Without the advent of Blue Boxes, I feel that some of the ad
vances in the telecommunications industry would've taken longer 
to develop (The need to stop the phone phreaks forced AT+T Bell 
Laboratories to "step up" their development to stop those 
thieves!).

     There is no harm in building a Blue Box (except the knowl
edge you will gain in the field of electronics). Although there 
are software programs (Soft Blue Boxes) available for many mi
cro's that will produce the Blue Box Multi-Frequency (MF) tones, 
they are not as portable as an actual Blue Box (you can't carry 
your computer to a telephone, so you must use it from home which 
could possibly lead to danger).

     Many phreaks are announcing the end of the Blue Box Era, but 
due to discoveries I have made (even on ESS 1A and possibly ESS 
5), I do not believe this to be true. Although many people con
sider Blue Boxing "a pain in the ass", I consider Blue Boxing to 
be "phreaking in its' purest form". There is much to learn on the 
current phone network that has not been written about, and Blue 
Boxes are necessary for some of these discoveries. The gift of 
free phone calls tends to be a bonus.

     Note: Blue Boxes also make great Christmas gifts!

     Items needed to construct a Blue Box.
     -------------------------------------

     Here is the list of items you will need and where you can 
get them. It may be a good idea to gather some of the key parts 
(the chips, and especially the potentiometers, they took about 6 
months to back order through Digi-key. Also, basic electronics 
tools will be necessary, and you might want to test the circuit 
on a bread board, then wire-wrap the final project. Also, you 
will need a box of some sort to put it in (like the blue plastic 
kind at Radio Shack that cost around $5.00).

     Note: An oscilloscope should be used when tuning in the
           potentiometers because the Bell system allows
           only a 7-10% tolerance in the precision of the
           frequencies.




_______________________________________________________________________
                       M & M Enterprises
50                                               The Boxing Book
_______________________________________________________________________
Qty.  Item                 Part No.    Place
-------------------------------------------------
 1  | 4 x 4 Keypad       |           | Digi-Key
 6  | Inverter Chip      | 74C04     |
 32 | Potentiometer      |           |
 1  | 4-16 Converter Chip| 74LS154   |
 1  | 16 Key Decoder     | 74C922    |
 2  | 2207 VCO           | XR2207CP  | Exar Corp.
 3  | .01 uf Capacitor   | 272-1051  | Radio Shack
 5  | .1 uf Capacitor    | 272-135   | Radio Shack
 2  | 1.5K Ohm Resistor  |           | Radio Shack
 2  | 1.0K Ohm Resistor  |           | Radio Shack
 1  | Speaker            |           | From an old Autovon phone
 1  | 9 Volt Battery     |           | Anywhere

  The resistors should be a +/- 5% tolerance.

  The speaker can be from a regular telephone (mine just hap
     pened to be from an old Autovon phone). But make sure that 
     you remove the diode.

  The Potentiometers should have a 100K Ohm range (but you may 
     want to make the calculations yourself to double check).

  The 9-volt battery can be obtained for free if you use your 
     Radio Shack Free Battery Club card.

  The Exar 2207 VCO can be found if you call the Exar Corp. 
     located in Sunnyvale, CA. Call them, and tell them the state 
     you live in, and they'll give the name and phone number to 
     the distributor that is located closest to you. The 2207 
     will vary from about $3.00 for the silicon-grade (which is 
     the one you'll want to use) to about $12.00 for the high-
     grade Military chip.

  Note:  When you call Exar, you may want to ask them to send 
     you the spec-sheets that gives greater detail as to the 
     operation and construction of the chip.



















_______________________________________________________________________
                        Copyright 1990
51                                                    The Boxes   
_______________________________________________________________________
     Schematic Diagram
     -----------------

           +--------------+            +-------------+
           |  1  2  3  A  |            |  Figure #1  |
           |  4  5  6  B  |            +-------------+
           |  7  8  9  C  |            | Logic Side  |
           |  *  0  #  D  |            +-------------+
           ++-+-+-+-+-+-+-+
            1 | 3 | 5 | 7 |           (VCC)
            | 2 | 4 | 6 | 8           (+5 Volts)    +----+
            | | | < u | | |             [+]         |   _|_
            | | | | | | | |              |          |   \_/GND
         +--+-+-+-+-+-+-+-+----+      +--+----------+---+
         |  2 | 11| 10| 7 |    |      |  14         7   |
 (.01C)  |  | 3 | 4 | 8 | 1  12+------+1                |
 +--||---+5                  13+------+2   (*74C04*)    |
_|_      |                     |      |                 |
\_/GND   |     (*74C922*)      |      +-----------------+
   +--||-+6                    |
   |(.1C)|                     |
  _|_    |                    |
  \_/GND |   9  17 16 15 14  18|
         +--+--+--+--+--+---+--+                          +---+
            |  |  |  |  |   |                             |   |
           _|_ A  B  C  D   |                            _|_  |
        GND\_/ |  |  |  |  [+] (VCC)      [+] (VCC)      \_/  |
               |  |  |  |      (+5 volts)  |  (+5 volts) GND  |
               |  |  |  |                  |                  |
        -------+--+--+--+------------------+----------------- |
        |      23 22 21 20                 24             18+-+
  +-----+12                                                 | |
  |     |                 (*74LS154*)                     19+-+
 _|_    |                                                   |  
 \_/GND |  1  2  3  4  5  6  7  8  9 10 11 13 14 15 16 17   |  
        +--+--+--+--+--+--+--+--+--+-+--+--+--+--+--+--+----+
           1  2  3  4  5  6  7  8  9 10 11 12 13 14 15 16
           |  |  |  |  |  |  |  |  | |  |  |  |  |  |  |
                                                       |
                       +-------------------------------+
                       |       +--+       +------->
                       |       |  |       |(Connects to Fig. 2)
                    +--+-------+--+-------+---+
                    |  3--|>o--4  5--|>o--6   |
                    |   (Invtr.)   (Invtr.)   |
    +---------------+7                        |
   _|_              |        (*74C04*)        |
GND\_/   (VCC) [+]--+14                       |
       (+5 volts)   |                         |
                    +-------------------------+







_______________________________________________________________________
                       M & M Enterprises
52                                               The Boxing Book
_______________________________________________________________________
    +-------------+                                _
    |  Figure #2  |                               / |
+---+-------------+----+        +----------------+  |
| Tone Generation Side |       _|_               |  | SPKR
+----------------------+    GND\_/    +---+--+---+  |
                                      |   |       \_|
                                      |   |
                                      |   |  +---------------+
         +-------+                    |   |  |               |
         |      _|_                   |   +--+14             |
         |      \_/GND                |      |  (Repeat of)  |
         |                            |      |    (First)    |
       ----- (.1C)                    |      |   (Circuit)   |
       -----                          |      |               |
         |                            |      | (*XR2207CP*)  |
         |       +-----------------+  |   +--+6              |
         |       |                 |  |   |  |               |
 [+]-----+-------+1              14+--+   |  +---------------+
(VCC)            |                 |      +--------------------+
(+9 Volts)  +----+2                |                           |
            |    |               12+---------------------+     |
   (.01C) -----  |                 |                    _|_    |
          -----  |  (*XR2207CP*)   |                    \_/GND |
            |    |                 |       1.5K Ohms           |
            +----+3              11+---+---\/\Rx/\/---+--+     |
                 |                 |   |              | _|_    |
                 |                 |   +---\/\Rx/\/---+ \_/GND |
                 |                 |       1.0K Ohms           |
                 |               10+----+                      |
   +-------------+6               9+----+---+                  |
   |             |                8+----+   |                  |
   |             |                 |      ----- (.1C)          |
   |             +-----------------+      -----                |
   +---------+                             _|_      +----------+
   |         | Pot.                     GND\_/ Pot. |          |
   |        \/\/\/\/--+-----------------------\/\/\/\/         |
   |         1400 Hz. |                        1600 Hz.        |
   +---------+        |                             +----------+
   |         | Pot.   |                        Pot. |          |
   |        \/\/\/\/--+----------------+------\/\/\/\/         |
   |         1500 Hz. |                |       900 Hz.         |
   |                  |                |                       |
   |     14 more      |                |       14 More         |
   |   Potentiometers |                |     Potentiometers    |
   |     in this      |                |       in this         |
   |   area left out  |                |     area left out     |
   |   for simplicity |                |     for simplicity    |
   |                  |                |                       |
   |                  |                |                       |
                      |
          (Connects)  |
        <-------------+
          (Figure 1)




_______________________________________________________________________
                        Copyright 1990
53                                                    The Boxes   
_______________________________________________________________________
     Multiplex Keypad System
     -----------------------

     First, the multiplex pattern used in the 4x4 keypad layout. 
I suggest that keys 0-9 be used as the Blue Box's 0-9 keys, and 
then you can assign A-D, *, # keys to your comfort (i.e., * = Kp, 
# = St, D = 2600, and A-C as Kp1, Kp2 or however you want).

     Note: On your 2600 Hz. key (The D key in example above)
           it may be a good idea to tune in a second
           potentiometer to 3700 Hz. (Pink Noise).

    Keypad      Key Assignments   Multiplex Pattern
  +---------+   +-------------+    +------------+
  | 1 2 3 A |   | 1  2  3  4  |    | 1  2  3  A |----Y1=8   X1=3
  | 4 5 6 B |   | 5  6  7  8  |    | 4  5  6  B |----Y2=1   X2=5
  | 7 8 9 C |   | 9  10 11 12 |    | 7  8  9  C |----Y3=2   X3=6
  | * 0 # D |   | 13 14 15 16 |    | *  0  #  D |----Y4=4   X4=7
  +---------+   +-------------+    +------------+
                                     |  |  |  |
                                     X1 X2 X3 X4

     Schematic Help
     --------------

     This is the Key to the diagrams in the schematic. I hope 
that they help more then they might hurt.

    _|_
    \_/GND   is the Ground symbol

     | |
  ---| |--   is the Capacitor symbol
     | |     (.1C)  stands for a .1 uf Capacitor
             (.01C) stands for a .01 uf Capacitor
     |
   -----
   -----     is another Capacitor symbol
     |

--\/\Rx/\/-- is the Resistor symbol (The 1.5K Ohm and 1.0K Ohm
                                     Resistors are at +/- 5% )
---+
   |
  \/\/\/\/-- is the Potentiometer symbol (The frequencies I 
               supplied above are just examples.)

 --|>o--     is the Inverter symbol









_______________________________________________________________________
                       M & M Enterprises
54                                               The Boxing Book
_______________________________________________________________________
     Blue Box Frequencies
     --------------------

     This section is taken directly from Mark Tabas's "Better 
Homes and Blue Boxing" file Part 1.

Frequencies (Hz)  Domestic  Int'l
----------------------------------
 700+900            1        1
 700+1100           2        2
 900+1100           3        3
 700+1300           4        4
 900+1300           5        5
1100+1300           6        6
 700+1500           7        7
 900+1500           8        8
1100+1500           9        9
1300+1500           0        0

 700+1700          ST3p     Code 11
 900+1700          STp      Code 12
1100+1700          KP       KP1
1300+1700          ST2p     KP2
1500+1700          ST       ST
2600+3700      *Trunking Frequency*

     Note: For any further information about the uses or duration 
of the frequencies, read the Mark Tabas files.


     Now that you have built your blue box here's the correct way 
to use it. Call any long distance information # through 1 or more 
extenders. Enter a 2600 Hz tone just before information answers. 
This will disconnect them and will place you in outward operator 
mode. Enter a KP tone or KP2 if you're placing an international 
call. This enables the dialing sequence. Enter the # you're 
dialing using Multi Freq. tones. Use the format XXX-XXX-XXXX.

     Enter an ST tone. This stops the dialing sequence and places 
the call.

     Before you do any of this it is important to realize that 
AT&T doesn't look favorably upon people who use blue boxes. It's 
a federal crime to use one and it is very easy to get caught if 
you're not careful. Only you can decide whether or not you're 
willing to risk putting yourself into very deep trouble.

     As to use, the first thing you need to understand is that 
there are two(2) types of toll completing trunks: INWARD and 
OUTWARD. The names are reference to the office that is switching 
the call (the toll center that serves the watts line you called) 
and each type of trunk has a different class of service. From an 
INWARD toll completing trunk, you  can reach the different serv
ice operators, the toll test board, and the inward operator. Some 
offices also allow remote testing and it is in these offices that 


_______________________________________________________________________
                        Copyright 1990
55                                                    The Boxes   
_______________________________________________________________________
you can access the outward toll completing trunks. The outward 
trunks allow you to make verification (emergency) calls, do serv
ice monitoring(tapping), stack trunks(busy out all trunks between 
LA and NYC), enable and disable TSPS positions, and in some 
cases(on some 4A's) issue temporary rerouting instructions(send 
all calls from LA to NYC via Miami, Boston, or any other class 5 
office or offices). Both type of trunks allow you to place a 
'standard' call with a box.

     In some offices, mostly the small ones with a toll test 
board that is unattended at night and on weekends, you can get an 
outward toll completing trunk as well as performing other test 
and routing functions. You do this by using three digit codes 
that are invalid exchanges(not of the pattern nnx;see note 1=). 
During the Sixties, the codes used were fairly standard and 
consistent; however, when the boxes became popular and the 
phreaks started doing things like routing all calls from Dallas 
to Ft. Worth via Washington D.C., Mother started changing the 
test codes on a random(as far as I know ) basis. What I would 
suggest is that everybody interested in doing this sort of thing 
pick out a nice quiet little office somewhere and work on discov
ering the codes acceptable to that office.

     Each numbering plan area (NPA, also known as area code) has 
an office designated as its master office. This office controls 
all of the other toll offices in the area as well as serving as a 
concentration point for most out of area calls. To access the 
services of a non-master office you need it's 'city  code', this 
is a three(3) digit code that is of the form 0xx, and is sent 
after the area code;see note 2 =. As an example, the 'city code' 
for Canton, Ohio is 042; thus to reach the inward operator in 
Canton, you would send 'KP-216 -042-121-ST' where as if you 
wanted the inward operator in Cleveland, you would send 'KP-216-
121- ST'. The reason this is necessary is that the operator in 
Cleveland can't verify a number in Canton, so if you want to 
verify someone in Canton you need the city code. Also, most area 
master offices have  dedicated data trunks to the network control 
center and thus don't accept test and rerouting commands over the 
switched network.

     Note 1:  the normal format for telephone numbers is as 
follows: nyn/nnx-xxxx.  where n=any digit except 1 and 0; y=0 or 
1, and x= any digit. Yes, I know that in some area codes the nnx 
format has changed to nxx. This is a new occurrence and only 
occur where there has been an outrageous population increase in 
the last few years and all of the funny exchanges are connected 
directly to master offices and thus don't conflict with the 'city 
code' format.









_______________________________________________________________________
                       M & M Enterprises
56                                               The Boxing Book
_______________________________________________________________________
     Now, if you're wondering about what to call from an operator 
trunk, here are some goodies to help you out:

0-700-456-1000 Teleconference Line (free, because you
               are the operator!)
xxx+101    - toll  switching
xxx+121    - local operator
xxx+131    - information
xxx+141    - rate & route
xxx+181    - coin refund operator
xxx+11501  - mobile operator
xxx+11521  - mobile operator
xxx+11511  - conference operator (800-544-6363)

     Here are some examples of what you may find if you dialed KP 
+ 213 + PXX + ST:

 PXX      Effect
---------------------------
 101      LA 2 Toll switching
 117      Disconnect
 121      213 Inward Op.
 131      Local Information
 162      DA (555-1212)
 163      Information
 167      818 DA
 181      Dial Assistance
182-188   Satellite Senders
          (kp+Country+city+#+St)
 025      Spanish Translator!

     Conclusion
     ----------

     This is just one way to build a Blue Box. If you choose this 
way, then I hope this file is adequate enough to aid you in the 
construction. Although these are not the best plans, they do 
work. This file does not tell you how to use it or what to do 
once it's built. For that information I suggest that you read the 
Mark Tabas's "Better Homes and Blue Boxing" files.


Brown Box Plans
---------------

     Introduction
     ------------

     This is a fairly simple modification that can be made to any 
phone. All it does is allow you to take any 2 lines in your house 
and create a party line. So far I have not heard of Any problems 
with it from my friends that have set one up and I have not had 
any either. There is one thing that you will notice when you are 
one of the two people who is called by a person with this box. 
The other person0will sound a little bit faint. I could overcome 


_______________________________________________________________________
                        Copyright 1990
57                                                    The Boxes   
_______________________________________________________________________
this with some amplifiers but then there wouldn't be very many of 
these boxes made.

     I think that the convenience of having two people on line at 
any one time will make up for the minor volume loss.

     Phone Modification Instructions
     -------------------------------

     Here is the diagram:

       *    =    -    +    KEY:                     
       *    =    -    +    ___________________________
       *    =    -    +    | PART           | SYMBOL |
       *    =    -    +    ---------------------------
       *    =    -    +    |BLACK WIRE      |   *    |
       *    ==_/_-    +    |YELLOW WIRE     |   =    |
       *******_/_++++++    |RED WIRE        |   +    |
       |              |    |GREEN WIRE      |   -    |
       |              |    |SPDT SWITCH     |  _/_   |
       |              |    |                |  _/_   |
       |_____PHONE____|    |VERTICAL WIRE   |   |    |
                           |HORIZONTAL WIRE |   _    |
                           ---------------------------

     In some houses the black and yellow are already wired, in 
others you will have to go out to your box and rewire it. A good 
way to figure out which line is which is to take the phone you 
are looking for off the hook. Then you only need to take the red 
and green wires entering your phone and hook them to the differ
ent pairs of red and green going into the house. You can't hurt 
anything in the phone or telephone by probing. When you find the 
pair that you want take the black from your line and attach it to 
the red of the other line then take the yellow and attach it to 
the green line. Now you are all set to go. For people with rotary 
phones you can have one person call you then place the second 
call out to the other person. Though not a phreakers tool, the 
brown box can be phun.


MAKING YOUR PHONE INTO A CHEESEBOX By SIR KNIGHT
----------------------------------

     A Cheesebox (named for the type of box the first one was 
found in) is a type of box which will, in effect, make your 
telephone a pay-phone. This is a simple, modernized, and easy way 
of doing it.

     Inside info: these were first used by bookies many years ago 
as a way of making calls to people without being called by the 
cops or having their numbers traced and/or tapped.






_______________________________________________________________________
                       M & M Enterprises
58                                               The Boxing Book
_______________________________________________________________________

     How to Make a Modern Cheese Box
     -------------------------------

     Ingredients:
     ------------

     1 Call Forwarding Service on the line
     1 Set of Red Box Tones
       The number to your prefix's Intercept Operator (do some 
         scanning for this)

     How to Use:
     ----------

     After you find the number to the Intercept Operator in your 
prefix, use your call-forwarding and forward all calls to her. 
This will make your phone stay off the hook (actually, now it 
waits for a quarter to be dropped in). You now have a Cheese Box. 
In order to call out on this line: you must use your red box 
tones and generate the quarter dropping in, then you can make 
phone calls to people. As far as I know, this is fairly safe, and 
they do not check much, although I am not sure, I think you can 
even make credit-card calls from a Cheese Box phone and not get 
traced.


The Clear Box By The Bit of The Postmen.(c) 1984 by 2600 Magazine
-------------

     The clear box is a new device which has just been invented 
that can be used throughout Canada and rural United States. The 
clear box works on "PostPay" payphones (fortress phones). Those 
are the payphones that don't require payment until after the 
connection is established. You pick up the phone, get a dial 
tone, dial your number, and then insert your money after the 
person answers. If you don't deposit the money, then you can not 
speak to the person on the other end, because your mouth piece is 
cut off, but not the ear piece (obviously these phones are nice 
for free calls to weather or time or other such recordings). 

     All you must do is to go to your nearby Radio Shack, or 
electronics store, and get a four-transistor amplifier and a 
telephone suction cup induction pick-up. The induction pick-up 
would be hooked up as it normally would to record a conversation, 
except that it would be plugged into the output of the amplifier 
and a microphone would be hooked to the input. So when the party 
that is being called answers, the caller could speak through the 
little microphone instead. His voice then goes through the ampli
fier and out the induction coil, and into the back of the receiv
er where it would then be broadcast through the phone lines and 
the other party would be able to hear the caller. 

     The Clear Box thus 'clears up' the problem of not being 
heard. Luckily, the line will not be cut-off after a certain 


_______________________________________________________________________
                        Copyright 1990
59                                                    The Boxes   
_______________________________________________________________________
amount of time because it will wait forever for the coins to be 
put in. The biggest advantage for all of us about this new clear 
box is the fact that this type of payphone will most likely 
become very common. Due to a few things: 

     1st, it is a cheap way of getting the DTF, dial-tone-first 
service, 

     2nd, it doesn't require any special equipment (for the phone 
company). This payphone will work on any phone line. Usually a 
payphone line is different, but this is a regular phone line and 
it is set up so the phone does all the charging, not the company.


GOLD BOX PLANS By DR. REVENGE  
--------------

     What It Does:
     -------------

     When you put a Gold Box on two phone lines, it lets anyone 
who calls one of the lines call out on the other. So when MCI or 
Sprint traces the line it will tell them that you're calling from 
the line you hooked the Gold Box up to.


     This is great for hooking up to pay phones. Just think, 
phreaking without the heart attacks when you hear a click and the 
phun you can have with a Red Box and AT&T calling cards. Just 
don't use a Blue Box, call the President and say you want to kill  
him, government computers, or anything that they trace by detect
ing a tone in the line. But you can still call the operator and 
ask for her bra size or if she knows what a trunk tone is! 

     How to build it:
     ----------------

     You will need the following:

     two   10k ohm resistors 
     three 1.4k ohm resistors 
     two   2N3904 transistors 
     two   photo-cells,
     two   red LED's (the more light produced the better), 
           a box that won't let light in 
           red and green wire.

     Light from the #1 LED must shine directly on the photocell 
#1. The Gold Box I made needed the top of the LED's to touch the 
photocell for it to work. The same applies to the #2 photocell & 
LED.






_______________________________________________________________________
                       M & M Enterprises
60                                               The Boxing Book
_______________________________________________________________________
            #1
       :-Photocell--:
       :            :
       :            :Base
       :          -----
       :          Transistor
       :   #1     -----
       :  +LED-    : :
       :  -I(--    : :Collector
   RED1--<     >:--: :-------:-----GREEN2
          -I(-- :            ----------:
           #2   :                      :
          LED   :-/\/\/-/\/\/-/\/\/-/\/\/
                  10K    10K   1.4K 1.4K
                    Resistors

           #2
       -Photocell-----------------
       :                         :
       :Base                     :
     -----                       :
     Transistor                  :
     ------                      :
      : :Emitter                 :
GREEN1- --------------------------RED2
     :   :
     /\/\/
      1.4K Resistor

     The 1.4k resistor is variable and if the second part of the 
Gold Box is skipped, it will still work, but when someone picks 
the phone up they hear a faint dial tone in the background and 
might report it to the Gestapo, er, AT&T. 1.4k will give you  
good reception with little risk of a Gestapo agent at your door.

     Now that you have built it, take 2 green wires of the same 
length. Strip the ends, twist 2 ends together and connect them to 
Green1 and place a piece of tape on it with line #1 writing on  
it. Continue the process with red1, only use red wire. Repeat 
with Red2 and Green2, but change to line #2.

     How to Install:
     ---------------

     You will need to find two phone lines that are close togeth
er. Label one of the phones lines line #1. Cut the phone lines 
and take the outer coating off it. There should be 4 wires. Cut 
the yellow and black wires off & strip the red and green wires 
for both lines.

     Line #1 should be in two pieces. Take the green wire off one 
end and connect it to one of the green wires on the Gold Box. 
Take the other half of line #1 and hook the free green wire to 
the green wire on the phone line. Repeat the process with Red1 & 
the other line.


_______________________________________________________________________
                        Copyright 1990
61                                                    The Boxes   
_______________________________________________________________________

     All you need to do now is to write down the phone numbers of 
the place you hooked it up at and go home & call it. You should 
get a dial tone! If not, try changing the emitter with  collec
tor. 


THE GREEN BOX By BIOC Agent 006
-------------
               
     Paying the initial rate in order to use a red box (on cer
tain fortresses) left a sour taste in many red boxer's mouths 
thus the GREEN BOX was invented. The green box generates useful 
tones such as COIN COLLECT, COIN RETURN, and RINGBACK. These are 
the tones that ACTS or the TSPS operator would send to the CO 
when appropriate. Unfortunately, the green box cannot be used at 
a fortress station but it must be used by the CALLED party. Here 
are the tones:

     COIN COLLECT	700 + 1100 Hz
     COIN RETURN       1100 + 1700 Hz
     RINGBACK		700 + 1700 Hz

     Before the called party sends any of these tones, an opera
tor released signal should be sent to alert the MF detectors at 
the CO. This can be accomplished by sending 900 + 1500 Hz or a 
single 2600 Hz wink (90 ms) followed by a 60 ms gap and then the 
appropriate signal for at least 900 ms.  Also, do not forget that 
the initial rate is collected shortly before the 3 minute period 
is up.

     Incidentally, once the above MF tones for collecting and 
returning coins reach the CO, they are converted into an appro
priate DC pulse (-130 volts for return & +130 volts for collect). 
This pulse is then sent down the tip to the fortress. This causes 
the coin relay to either return or collect the coins.

     The alleged "T-Network" takes advantage of this information. 
When a pulse for COIN COLLECT (+130 VDC) is sent down the line, 
it must be grounded somewhere. This is usually either the yellow 
or black wire. Thus, if the wires are exposed, these wires can be 
cut to prevent the pulse from being grounded. When the three 
minute initial period is almost up, make sure that the black & 
yellow wires are severed; then hang up, wait about 15 seconds in 
case of a second pulse, reconnect the wires, pick up the phone, 
hang up again, and if all goes well it should be "JACKPOT" time.


How to Build Your Own Mauve Box by Captain Generic With Help from 
-------------------------------    The Genetic Mishap. [11/24/86]

     Please bear with me, as the construction of this box will 
seem rather silly. This box was found in a construction site. Or 
rather, it found us at a construction site. We were using a $5 
Radio Shack phone out of a semi-completed office building. One 


_______________________________________________________________________
                       M & M Enterprises
62                                               The Boxing Book
_______________________________________________________________________
afternoon during a holiday, and immediately following a storm, we 
found our bus in shambles. To our surprise, we also found that 
one of the phone connections we were tapping had been draped 
through a murky puddle. The fact that surprised us even more was 
that this line still worked and now possessed some great capabil
ities.

     Materials:
     ----------

     2 Tupperware or similar 8oz containers
     1 small bag earth (dirt) (12oz)
     1 pint water
     2 lantern batteries
     1 nine volt battery
     1 battery clip
     2 SPST switches
     4 ounces of iron shavings
     2 polar magnets
     5 feet wire
     1 set soldering equipment

     This is the part you won't believe. Take the Tupperware 
containers, and fill them with a mixture of the earth and the 
iron shavings. Make sure that the mixture is well done. 

     (*NOTE* for best results, use the sand in fine ash trays.)  

     Cut the red and green wires and splice the switches into 
them. From the switches, solder wire to the magnets. Connect the 
red to the + (positive) side of one magnet, and the green to the 
- (negative) side of the second magnet. From the other poles of 
the magnet, solder wires the battery & clip. Make sure the + 
(positive) and - (negative) are correct. Set the nine-volt bat
tery between the two Tupperware containers and place the battery 
end of the two magnets into the Tupperware. Now connect wire to 
the two poles of the lantern battery, and place them in the same 
containers as the poles of the magnets/9-volt battery. You are 
almost done. Finally, add just enough water to the two pots, and 
let them sit in the sun and bake like bricks. At this point, you 
have a MAUVE BOX.

     Explaining and Using What You Have:
     -----------------------------------

     The red and green wires have been placed into a magnetic 
field which is being charged continually by a lantern battery.  
(It is necessary to change this battery every one to one and a 
half months.) This will literally pull in the nearest phone 
conversation. (Don't try this in a big apartment or dorm.) When 
the 9-volt battery is connected, this will now create enough 
current for the poles of the magnets to reverse themselves 
(perhaps you're seen Mr. Wizard do this. It's just like with the 
soap). At this point, you have a phone transmitting to one (if 
not more) of the nearest phones. (Again, if you're in a dorm, 


_______________________________________________________________________
                        Copyright 1990
63                                                    The Boxes   
_______________________________________________________________________
don't try this.) I suppose this just accomplishes what a tap 
would do, but with a MAUVE BOX, your fingerprints never will show 
on a terminal or on someones telephone lines.

     Notes and Addendum:
     -------------------

     This will only work with a touch-tone phone connected to a 
phone line. When the switches are pulled, it's off your line and 
into the air. This is named a MAUVE BOX, because this is the most 
disgusting box, and I find mauve to be the single most disgusting 
color I know of. Also, this file is for information purposes 
only. This is not to be used in an illegal manner.


Olive Box Plans By Arnold
---------------

     This is a relatively new box, and all it basically does is 
serve as a phone ringer. You have two choices for ringers, a 
piezoelectric transducer (ringer), or a standard 8 ohm speaker. 
The speaker has a more pleasant tone to it, but either will do 
fine. This circuit can also be used in conjunction with a rust 
box to control an external something or other when the phone 
rings. Just connect the 8 ohm speaker output to the inputs on the 
rust box, and control the pot to tune it to light the light 
(which can be replaced by a relay for external controlling) when 
the phone rings.

             ______________
            |              |        ^
       NC --|-- 5      4 --|-----/\/\/------->G
            |              |      / R2
G<----)|----|-- 6      3 --|-- NC
    | C3    |      U1      |
     -------|-- 7      2 --|---------- --- -- - > TO RINGER
            |              |
        ----|-- 8      1 --|--
       |    |______________|  |
       |                       ---/\/\/----|(----- L1
       |                           R1      C1
        ------------------------------------------ L2

                  a. Main ringer TTL circuit


                                   _
FROM PIN 2 < - -- --- ----------| |_| |------------->G
                                    P1

                  b. Piezoelectric transducer






_______________________________________________________________________
                       M & M Enterprises
64                                               The Boxing Book
_______________________________________________________________________
FROM PIN 2 < - -- --- ---------|(---------.  .-------|  |/ |
                                          >||<       |S1|  |
                                          >||<     --|  |  |
                                          >||<    |  |__|\ |
                              G<---------.>||<.---        \|
                                           T1
                c. Electro magnetic transducer

Parts List
----------

U1 - Texas Instruments TCM1506
T1 - 4000:8 ohm audio transformer
S1 - 8 ohm speaker
R1 - 2.2k resistor
R2 - External variable resistor; adjusts timing frequency
C1 - .47uF capacitor
C2 - .1uF capacitor
C3 - 10uF capacitor
L1 - Tip
L2 - Ring
     L1 and L2 are the phone line.


Shift Rate:
-----------

  This is the formula for determining the shift rate:

                   1                   1
    SR = --------------------- = ------------ = 6.25 Hz
         (DSR(1/f1)+DSR(1/f2))    128     128
                                 ----  + ----
                                 1714    1500

              DSR = Shift Divider Rate ratio = 128
               f1 = High Output Frequency    = 1714
               f2 = Low Output Frequency     = 1500


How to make a Pearl Box By Dr. D-Code
-----------------------

     The Pearl Box:Definition
     ------------------------

     This is a box that may substitute for many boxes which 
produce tones in hertz. The Pearl Box when operated correctly can 
produce tones from 1-9999hz. As you can see, 2600, 1633, 1336 and 
other crucial tones are obviously in its sound spectrum.







_______________________________________________________________________
                        Copyright 1990
65                                                    The Boxes   
_______________________________________________________________________
     Materials:
     ----------

     C1, C2 .5mf or .5uf ceramic disk capacitors
     Q1     NPN transistor (2N2222 works best)
     S1     Normally open momentary SPST switch
     S2     SPST toggle switch
     B1     Standard 9-Volt battery
     R1     Single turn, 50k potentiometer
     R2       "     "    100k potentiometer
     R3       "     "    500k potentiometer
     R4       "     "    1meg potentiometer
     SPKR   Standard 8-ohm speaker
     T1     Mini transformer (8-ohm works best)
     Misc.  Wire, solder, soldering iron, PC board or perfboard,
             box to contain the completed unit, battery clip

     Instructions for building The Pearl Box:
     ----------------------------------------

     Since the instruction are EXTREMELY difficult to explain in 
words, you will be given a schematic instead. It will be quite 
difficult to follow but try it any way.

        (Schematic for The Pearl Box)

                +-------------+-------+---------+
                |             |        \        +--S1----
                C1            C2        \           SPKR
                |             |          +      +--------
                +             |      ----+T1    |
                |\            +----------+------+
                |  b  c-------|          |  
                |   Q1                   |
                |     e-----S2---+       |
                |                |       |
                |               B1       |
                |                |       |
                |                +-------+
                |R1   R2   R3  R4|
                /\/\ /\/\ /\/\/\/\
                  +--+ +--+ +--+

     Now that you are probably thoroughly confused, let me ex
plain a few minor details. The potentiometer area is rigged so 
that the left pole is connected to the center pole of the poten
tiometer next to it. The middle terminal of T1 is connected to 
the piece of wire that runs down to the end of the battery.

     Correct operation of The Pearl Box:
     -----------------------------------

     You may want to get some dry-transfer decals at Radio Shack 
to make this job a lot easier. Also, some knobs for the tops of 
the potentiometers may be useful too. Use the decals to calibrate 


_______________________________________________________________________
                       M & M Enterprises
66                                               The Boxing Book
_______________________________________________________________________
the knobs. R1 is the knob for the ones place, R2 is for the tens 
place, R3 if for the hundreds place and R4 is for the thousands 
place. S1 is for producing the all the tones and S2 is for 
power.

  Step 1: Turn on the power and adjust the knobs for the desired 
     tone. (Example: For 2600hz- R1 = 0: R2 = 0: R3 = 6: R 4 = 2)

  Step 2: Hit the pushbutton switch and you have the tone. If 
     you don't have a tone, then recheck all connections and 
     schematic.


PEARL BOX Schematic by Dispater [7/1/89]
-------------------

     Introduction:
     -------------

     After reading the earlier renditions of schematics for the 
Pearl Box, I decided that there was an easier and cheaper way of 
doing the same thing with an IC and parts you probably have just 
laying around the house.


     What Is A Pearl Box and Why Do I Want One?
     ------------------------------------------

     A Pearl Box is a tone generating device that is used to make 
a wide range of single tones. Therefore, it would be very easy to 
modify this basic design to make a Blue Box by making 2 Pearl 
Boxes and joining them together in some fashion.

     A Pearl Box can be used to create any tone you wish that 
other boxes may not. It also has a tone sweep option that can be 
used for numerous things like detecting different types of phone 
tapping devices.


     Parts List:
     -----------

     CD4049 RCA integrated circuit
     .1 uF disk capacitor
     1 uF 16V electrolytic capacitor
     1K resistor
     10M resistor
     1meg pot
     1N914 diode
     Some SPST momentary push-button switches
     1 SPDT toggle switch
     9 Volt battery & clip





_______________________________________________________________________
                        Copyright 1990
67                                                    The Boxes   
_______________________________________________________________________

State-of-the-Art-Text Schematic:

                               + 16V  1uF -
      _____________________________||_____
     |        |     |              ||     |           _
     |   _______________________          |__________| |/| 8ohms
 ____|__|_____:__|__:__|_       |          __________| | |
| 9 10 11 12 13 14 15 16 |      |         |          |_|\|
|        CD4049UBE       |      |         |
|_1__2__3__4__5__6__7__8_|      |         |          _
  |  |  |__|  |__|  |  |__________________|_________[-]
  |  |  |           |                               [b]
  |  |__________________________|                   [a]
  |     |           |           |                   [t]
  |     |    1N914  |           |                   [t]
  |___________|/|___________________________________[+]
        |     |\|   |           |
        |           |           |
        |    10M    |           |
        |___/\/\/\__|           |
        |           |           |
        |_____||____|           |  <-- These 2 wires to 
              ||    |           |      the center pole of
         .1uF   50V |           |      the switch)
____________________|           |___________________________
|                  __[Toggle Switch]________                |
|                  |                        |          ___  |
|                  |                        |          o o  |
|                  |                        | /\/\/\___| |__+
|_/\/\/\____/\/\/\ |                        |    ^          |
    1K         ^   |                        +____|     ___  |
               |___|                        |          o o  |
                                            | /\/\/\___| |__|
      (pot side)              (push-button  |  ^
                                     side)  |__|

     Explanation:
     ------------

     The 2 wires that lead from the main part of the circuit 
should be connected to the center poles on the toggle switch.  
Put the 2 wires to the pot on one side and the 2 wires going to 
the push-buttons to the other side. That way you can switch 
between tone sweep and the favorite tones you like (the push-
button side).

     To keep tones that you want to use frequently like 1850 Hz 
then all you have to do is put in a variable resistor and adjust 
it to where you have the correct tone, then just put a push-
button switch on the line. You can link them together in a chain, 
etc. There are many other good modifications to make to the box 
so have fun and be smart.

 


_______________________________________________________________________
                       M & M Enterprises
68                                               The Boxing Book
_______________________________________________________________________
How To Build A Pink Box By Baba O'Riley 
-----------------------

     The function of a "Pink Box" is to add a hold button that 
allows music or any thing else to be played into the telephone 
while the person is on hold. This Modification can either be done 
right in the telephone as a separate box.

     Materials Needed
     ----------------

     Some Bell wire or Phone wire
     SPST momentary switch         RS # 275-1547
     470 ohm resistor              RS # 271-019   
     1 LED (Approx 5V)             RS # 276-041
     SCR, 2N5061  (Transistor)
     Audio Transformer (Ratio 10K:600)
     RCA phono Jack                RS # 274-346
     Screw drivers, Soldering Irons, Ser, Etc.

     Construction
     ------------

  1. Open the wall box and locate the RED and GREEN wires.

  2. Take a piece of RED wire and strip the end and attach it to 
     the red lead on the wall box. Do the same for the Green.

  3. Connect the GREEN wire to the ANODE of the LED.

  4. Connect the CATHODE side of the LED to the UPPER pin of the 
     primary side of the transformer.  See diagram below.
                         ______
 To one pole of phono ---!Top !--- To CATHODE of LED
                        -!View!-        Primary side
 To other phono pole  ---!____!--- To pole of trans. & one pole
                                                       of switch
   
  5. Connect the pin directly across from the transformer to one 
     pole of the phono jack.

  6. Connect the RED wire to one side of the resistor and to the 
     "C pole" of the transistor.

  7. Connect the open pin of the switch the other side of the 
     resistor and to the "G pole" of the transistor.











_______________________________________________________________________
                        Copyright 1990
69                                                    The Boxes   
_______________________________________________________________________
     Wiring Diagram
     --------------

          RCA Jack    X-former    LED
                      _____      C   A 
  Pole or Jack --/---| Top |---/--(*)--\------GREEN wire
                    -|View |- Primary   --|---RED wire 
  Pole of Jack --/---|_____|---/-+       (O)
                                 |        |
                                 |     [--+-----Pole of Switch        
                                 |      
                                 |--------/-----Pole of Switch

     Key to Symbols
     --------------

|, --, /   Connection or wire


 _/    C pole of transistor    --(*)--  LED

[_)--  G pole of transistor     
                               |
 I     A pole of transistor   (O)  Resis
                               |
     _____
 ---| Top |---
   -| View|- Primary    Transformer
 ---|_____|---


     Use of the Pink Box
     -------------------

     Hook the RED and GREEN wires up to the appropriate terminals 
and hook the RCA jack to the output on your stereo. Turn on your 
stereo at a good volume. Now call a friend. To test the Box, Hold 
down the switch and hang up the phone. The LED should light up 
and your friend should hear music, If not then start over. The 
hold is shut off if you pick up a phone on that line or your end 
hangs up.



Red Boxes Revived By Pink Panther
-----------------

     Probably most of the information I am about to tell you, you 
probably already know or have it stored somewhere. But I have 
seen quite a lot of questions on the subject lately, and thought 
to explain a couple of things.

     Blue boxing has been dead for quite some time since every
thing went to ESS, and the same with black boxing. The latest 
form of boxing is red and green boxing. They both deal with 


_______________________________________________________________________
                       M & M Enterprises
70                                               The Boxing Book
_______________________________________________________________________
fortress phones and can only be used with a fortress phone.

     With a red box, you dial a number at a fortress, insert a 
nickel, which is the ground check, and play the tape. It will 
emulate coins being dropped into the fortress. Since there is 
also questions on what are and how to get these tones, I've 
created a simple step process:

  1)  Obtain a recorder that you can directly hook into a phone 
     line. If you use a regular recorder, you will need some 
     modification on it. If you have an answering machine, then 
     you have it made.

  2)  Find a fortress, and follow the metal pipe (usually metal) 
     from the fortress to where ever it ends up. At some point on 
     the pipe, there will be a small box which is held together 
     by two screws. Unscrew the box.

  3)  You now should find two bolts with wires connected to 
     them. The wires are 22 gauge (which is fairly thin wire).  
     If you see thicker wires, such as 12 gauge wires, these are 
     220 volt AC lines, usually connected to the light in the 
     phone booth. Do not touch the AC lines, unless you are 
     stupid. Connect the tape recorder to the proper bolts, which 
     means the 22 gauge wire.

  4)  Now dial a long distance phone number, and you will get a 
     recording to insert some money. Insert about $6.00 in quar
     ters, then hang up and your money will be returned. The 
     tones should have been recorded with a normal tape with no 
     dolby.

  5)  Obtain a recorder with a built in speaker, or rip apart a 
     phone set and obtain the earpiece. If there is a diode 
     across the earpiece, remove it. Connect the earpiece to the 
     output of the recorder. (I recommend using an earpiece 
     rather than a built in speaker).

  6)  To test your tones, dial 0-959-1230 from a fortress, and 
     you should get 'Coin Test . Please Deposit .' Play back the 
     tones you recorded and if everything goes well, you should 
     hear 'Quarter' everytime a tone is played. Remember you only 
     recorded quarter tones. You can record any tones you want by 
     inserting different coins at the recording stage. If you are 
     having problems, try adjusting the volume.

  7)  To use, dial a non-local number, insert a real nickel, and 
     play the tones. Make sure you have enough tones on the 
     recorder to complete the call.

     Now I will explain a little about what exactly happens when 
you deposit coins. When you deposit a coin, it goes through a 
series of tests, determining what type of coin it is. It will be 
deposited in various coin slots within the fortress itself if 
everything goes right. But before it is deposited in the right 


_______________________________________________________________________
                        Copyright 1990
71                                                    The Boxes   
_______________________________________________________________________
slot it will cause a wheel to be turned. A nickel will turn the 
wheel once, a dime twice, and quarter five times. This will cause 
a frequency to be generated which is sent to a operator or com
puter. A capacitor is placed across the speech circuit while 
these tones are generated so that the customer does not here 
them. Here are the tones and PPS (pules per second):

                 Nickel:  1 beep   5-8.5 PPS
                          (1700hz + 2200hz for 66ms)
                   Dime:  2 beeps  5-8.5 PPS
                          (1700hz + 2200hz for 66ms on, 66ms off,
                           then 66ms on)
                Quarter:  5 beeps  12-17 PPS
                          (1700hz + 2200hz for 33ms on and
                           33ms off, repeated a total of 5 times)


SILVER BOX PLANS By Silent Screen, Telcom 7, Floppy Disk, and
----------------     Anonymous

     Well, now that I have you here, I may as well bore you with 
a little history of silver boxes. One day, some engineer over at 
Bell Labs got the bright idea to sing to his computer, and found 
that the computer responded by dialing a phone number. Well, sort 
of. Anyway, the 10 digits (old style, with the # and * blocked 
out) touch tone pad was born. Lo and behold, though, 2 sets of 
people decided that 10 buttons just wasn't enough. They needed 
more. The two people of whom I am speaking are of course Ma Bell 
and Pa Autovon (the military phone network). So, Ma decided to 
add an extra column to her phones, this one merging the standard 
row tones with a 1633 Hz tone (to provide the mystical DTMF). 
Bell named these buttons A,B,C and D. Aren't you glad we have 
such imaginative people at the Bell System? The army named them 
Flash, Flash Overide, Priority, and Priority Interrupt, or is it 
Flash Interrupt and Priority Overide? Anyway, these are used as 
varying degrees of priority during wartime and wargame activities 
so generals can call their secretaries very quickly. Bell's use 
of A,B,C and D is not so clear. However, the last button D has an 
interesting property.

     On about 50% of the information lines in the country it will 
give you a pulsing dial tone. You can then enter commands to what 
appears to be a test system for 4A boxes.

     Anyway, the mod. WARNING: Read these instructions several 
times before you actually try them. Make sure you know how to 
solder. This could permanently damage your phone!

     Unscrew the 2 large screws on the base of your phone. Take 
the cover off and place it and the screws in a safe place. Now, 
loosen but don't remove the screws on the sides of the touch tone 
keypad. These are on the sides and attach it to its mounting 
brackets. Now carefully remove the pad from its brackets without 
ripping any wires. You will notice a plastic cover on the pad. 
Separate the 2 halves and get them out of your way. Don't destroy 


_______________________________________________________________________
                       M & M Enterprises
72                                               The Boxing Book
_______________________________________________________________________
them, they'll be needed. Just move them down the wire harness 
that goes thru them.

     Now look at the top of the pad so the 1-2-3 row is facing 
away and the *-0-# row is toward you. Turn over the pad. You 
should see a mass of wires, gold plated contacts, discrete compo
nents and 2 large donut shaped black things. These are coils that 
generate the frequencies. Ma Bell was always one for standards so 
the coils she manufactures are capable of generating all 4 pri
mary tones. She only gives you connections to 3 of them, though. 
You're about to make your own connections to the 4th and make the 
3rd column of keys "bank switched" between normal and 4th row. 
Cut 3 lengths of wire of different colors about 2 ft. long. 
(Better overkill than underkill.) I used blue, gray and brown, 
but these colors are arbitrary. But I will be referring to these 
colors in this message. Look at the coil on the left with the 5 
solder contacts facing you rather than perpendicular to you. 
Count over 4 contacts from the left or 2 from the right and 
solder a wire to the 4th post from the left. This is the 1633 Hz 
output. Solder the other end of this wire to the left pole of the 
smallest PDT switch you can find. This is the point of no return 
now. Take a look at the bottom edge of the keypad. You should see 
a row of 3 gold plated contacts to the right of 2 very large 
capacitors. Look at the one on the left. This one controls the 
rightmost bank of keys on the phone.

     Gently separate the 2 touching connectors; They are soldered 
together. Spread them apart. Solder the brown wire to the top 
contact (the one furthest from you) and solder it to the right 
pole of the SPDT. Now, take the blue wire and solder it to the 
bottom closest contact. Solder the other end of this wire to the 
center pole of the SPDT. You have now completed your mods.

     When the switch is in one position you will get normal 
tones. In the other you'll get 1633 tones. Some finesse can be 
added by passing the 3 wires thru the plastic cover and in thru 
the gap in the case of your phone under the place where you hang 
it up. Then solder the wires to the switch in the proper places 
and you can glue the switch to the wall on the inside of that 
small alcove in the slack wire back into the phone. This was just 
to make sure you read the whole thing before trying it.

     Now call out-of-state directory assistance (XXX-555-1212) 
using normal tones. Switch quickly to 1633 and press down on the 
# key (now the D key). If you are on an old 4A switchbox you will 
get a pulsing dial tone. You can then switch back to normal and 
try dialing different #'s. Two of the most interesting are 6 and 
7. These often form a loop-around type connection and 2 people 
can call in, one using 6 and the other 7, and talk in this man
ner.

     NOTE: You will not receive a pulsing tone until the operator 
actually picks up on the line. If you hear ringing keep pressing. 
The tone must be on at the same time the operator gives her 
"beep." If you hear her cursing at stupid people with stuck 


_______________________________________________________________________
                        Copyright 1990
73                                                    The Boxes   
_______________________________________________________________________
buttons chances are this one doesn't work. Try out of the way 
states like Montana or Wyoming.



Combined Silver Box and White Box By Explorer & Cat 033
---------------------------------

     These are the instructions on how to build a combined Silver 
Box and White box. Most of the parts required can be found at 
your nearest Radio Shack. The only real important part required 
not sold at Radio Shack is the keypad. This can be picked up at 
any electronic store. These instructions are for a 12 button 
keypad. A toggle switch is added for the Silver Box application. 
if you have a 16 button keypad, then the toggle switch isn't 
needed.

     The tones made by a touch tone telephone are not single 
tones. They are a combination of two tones, making "DTMF" (Dual 
Tone Multi-Frequency). The normal telephone dials 12 different 
signals but is capable of dialing 16 different signals.

     The power required by a keypad is about 25 volts, but they 
will work with as little as 15, thereby allowing the use of two 9 
volt batteries. This design allows you to use a standard 8ohm 
speaker instead of a telephone speaker. To accomplish this we use 
a matching transformer.
 
  Parts Required:
  ---------------

  1)  5089 dtmf tone encoder (rs 276-1301)
  2)  audio transformer (rs 273-1380)
  3)  tv colorburst crystal 3.579545 mhz (rs 272-1310)
  4)  9v battery straps x2 (rs 270-325)
  5)  9v battery x2 (rs 23-464)
  6)  wire wrap socket (rs 276-1994)
  7)  switch dpdt (rs 275-663)
  8)  keypad (cardinal electronics)
  9)  speaker 8ohm (rs 40-245)
  10) circuit board (optional)
  11) connecting wire or wire wrap
  12) box (optional)

  How to Construct it:
  --------------------

  A few construction notes. I suggest that you solder and tape 
     all connections.
 
  [1]  Connect the red wire of the transformer to either termi
     nal on the speaker.

  [2]  Connect the white wire from the transformer to the other 
     terminal on the speaker.


_______________________________________________________________________
                       M & M Enterprises
74                                               The Boxing Book
_______________________________________________________________________

  [3]  Connect the red (positive) wire of one battery clip to 
     the black wire of the other battery clip.

  [4]  Connect the remaining red wire on the battery clip to pin 
     #1 on the IC.

  [5]  Connect the crystal to pin #7 and pin #8 on the IC.

  [6]  Connect the blue wire from the transformer to pin #16 on 
     the IC.

  [7]  Connect the green wire from the transformer and the other 
     black wire from the battery clip to pin #6.

  [8]  Connect one side of the switch to pin #9. Connect the 
     other side of the switch to pin #5 (only for 12 button 
     pads).

  [9]  Since keypads may differ, try to get a pinout of the pad 
     you are using. The pad I have has 8 pinouts. One is a ground 
     (this goes to pin #6 on the IC). 1,4,7,* keys connect to pin 
     #3. 2,5,8,0 keys connect to pin #4. 3,6,9,# keys connect to 
     the center of the switch. 1,2,3 keys connect to pin #14. 
     4,5,6 keys connect to pin #13. 7,8,9 keys connect to pin 
     #12. *,0,# keys connect to pin #11.

  [10] Check all connections to make sure none are touching each 
     other.

  [11] Connect the two nine volt batteries and your keypad is 
     complete.
 
     Note: the remaining pins on the IC are not used. The black 
wire on the transformer is also not used. When none of the but
tons are pressed, this unit uses no power, thereby eliminating 
the need for a power switch.




















_______________________________________________________________________
                        Copyright 1990
75                                                    The Boxes   
_______________________________________________________________________
   CRYSTAL (3.579545 MHZ)
 +-#-+
 | +-+         +--------------------------- +18V --+
 | |           |                                   |
 | | +---------|----------+--- <- XFMR (GREEN)    ---
+----------------+        |                        -
|8 7 6 5 4 3 2 1 |       ---                   
|                /        -                 
|               | NOTCH                     
|  1 1 1 1 1 1 1 \         \   XFMR (RED)   
|9 0 1 2 3 4 5 6 |  SPKR-> |]============   
+----------------+         /   XFMR (WHITE)   
               |                          
               +----------- <- XFMR (BLUE)
  IC   IC                                  
  #3   #4    +--------------------------+       
   |    |    |                          |
  [1]  [2]  [3] -> IC #14    IC #5 <-+  |  +-> IC #9
  [4]  [5]  [6] -> IC #13            +--+--+
  [7]  [8]  [9] -> IC #12              / DPDT SWITCH
  [*]  [0]  [#] -> IC #11
 
      KEYPAD
 
KEY      FREQ. #1    FREQ. #2
---      --------    --------
1          697        1209
2          697        1336
3          697        1477
A          697        1633
 
4          770        1209
5          770        1336
6          770        1477
B          770        1633
 
7          852        1209
8          852        1336
9          852        1477
C          852        1633
 
*          941        1209
0          941        1336
#          941        1477
D          941        1633
 
All frequencies are measured in Hertz.










_______________________________________________________________________
                       M & M Enterprises
76                                               The Boxing Book
_______________________________________________________________________
     Usage of a Silver Box
     ---------------------
 
     First off, a Silver Box adds the four extra tones to your 
phone that Ma Bell never told you about. They go like this:
 
               1  2  3  A
               4  5  6  B
               7  8  9  C
               *  0  #  D
 
     There used to be many places where you could use Silver Box 
tones, but now you can only use it in places where Ma Bell hasn't 
gotten around to replacing her old switchboxes, (4a), or on 
AUTOVON. AUTOVON is a special military phone line, like a mass of 
private lines hooked together. To see if a specific area has the 
old 4a switchboxes try this test:

     Call up the directory assistance by using xxx-555-1212, 
(where xxx is the area code you are checking out. Now hold down 
the "D" key as soon as you finish dialing. (If you are using the 
toggle switch type then flip the switch and hold down the "#" 
key.) The phone should start ringing and the operator will an
swer.

     If the operator screams at you to stop pressing your keypad, 
then hang up and try a different areacode (this one does not 
work.)

     If you get a pulsing tone then you got a good line! Now try 
out different numbers. 6 and 7 usually form a loop line and two 
people with Silver Boxes can talk. Some of these are watched, so 
don't say anything you wouldn't want your mother to hear!



SWITCHBOX PLANS by Autopsy Saw
---------------

     This tutorial is notable in that it is totally and absolute
ly within legal bounds. It's only object is to guide you in 
building a device with which you can control, on many different 
levels, your home phone lines. It is designed primarily for two 
phone numbers, although I suspect that provisions for more than 
two can be easily added. With it, you can put one or both phone 
lines on hold with visible indicators of each lines status; 
conference call with two people; change a phone from line #1 to 
line #2; and lastly, make one phone line physically dead to 
outside world. This is good, for instance, if you don't want to 
receive any calls, or if you want to stop someone from talking on 
that line really quickly.

     The circuit is relatively simple to build and I believe it 
is much more economical than buying something like Radio Shack's 
line controller. It will require some knowledge of electronics 


_______________________________________________________________________
                        Copyright 1990
77                                                    The Boxes   
_______________________________________________________________________
and the phone line in general, but I don't think that should be a 
problem. I have personally found many uses for the controller, 
and have put in into a pleasant "project box" so it is not an 
eyesore.

     Parts List
     ----------
 
     Two pushbutton (on-off) switches for hold
     Two LED's for line status indication
     One DPDT switch for conferencing
     One SPST switch for line shut off
     Another DPDT switch for phone line switching
     Wire
     2 modular phone plugs with at least 10 feet of wire each
     Two 1.7K ohm resistors
     *OPTIONAL* - Project Box

     Construction
     ------------
 
     We will take the construction of the switchbox-controller in 
parts. First, the hold switches and status indicators. The fol
lowing is a diagram of the essential circuit:
 
               Pushbutton #1    LED
--------------------------|x|-----0---
Phone Line #1     1.7K Resistor      |
-----------------/\/\/\/\/------------
 
     Some word of explanation is in order. First of all, the 
second phone line hold is constructed the same as the first. 
Basically, there are two wires that come out of your phone line, 
the red and the green. You have to experiment to find out which 
one is connected to the pushbutton switch and which one to the 
Resistor. To do this, just connect it in any way and then turn 
the switch on. If the LED lights up, you connected it right, 
otherwise reverse the connections. Got it? Good, now do the same 
for line #2, following exactly the same procedure.
 
     Now, let's do an easy one. This will be the line blackout 
switch. First, decide which line you wish to black out. Actually, 
you can do it to both lines if you wish, just get an extra SPST 
switch. Now, connect the switch across the line as follows:
 
--------------------------------|-------|
         x                      | Hold  |
        |x| <---Switch          |Circuit|
         x                      |       |
--------------------------------|-------|
 
     Don't worry that your line can't handle both circuits, it 
can. To test out, pick up a phone on the line you have connected 
the switch to and flip it on. There should be dead silence. Now, 
turn it off. You should hear a dial tone. You have to be an 


_______________________________________________________________________
                       M & M Enterprises
78                                               The Boxing Book
_______________________________________________________________________
absolute idiot if this doesn't work.
 
     OK, let's see what we have so far. If everything is working 
you should now have two hold circuits and a blackout switch 
connected. Now it really gets tough!
 
     Next on the agenda is the conference switch. I have a few 
precautions for you on this one. First, you have to know what 
you're doing, and second, it doesn't work that well. The reason 
it doesn't is because I am naturally very lazy and didn't feel 
like adding the needed phone transformer. But, it is still good 
for many uses, limited only by your imagination (to use a 
cliche').

     First, take the double pole double throw switch into your 
hand. It should look like this on the back:
 
                    ---------
                    - 1   2 -
                    - 3   4 -
                    - 5   6 -
                    ---------

          * Note - Numbers correspond to actual pins.

     Now connect two wires to pins 3 & 4 and two wires to pins 1 
& 2. The wires going to pins one and two are connected across the 
first phone line and the wires from three and four go across the 
second phone line. Test it out: Pick up your phone (either line) 
and wait for dial tone. Then throw on the conference switch. You 
should get a second dial tone. Now dial 555-1212. You should now 
have two D.A.'s on the line, asking each other "What City?". If 
not, then reverse the connections to phone line #1 or #2, it 
doesn't matter. Now it should work. If not, then recheck EVERY
THING! You messed up!
 
     Now for the last section - the phone line switcher. With 
this, you can connect a phone directly to the switchbox and have 
it operate from line #1 or line #2, depending on the position of 
the last DPDT switch. Let me emphasize that this is optional. 
Actually, all the circuits are - they are independent of each 
other and each can be built separately or together.

     Now, referring to the diagram of the DPDT switch above: 
Connect two wires to pins 1 & 2. Then connect these to phone line 
#1. Now connect two wires to 5 & 6 and connect these to phone 
line # 2. Lastly, connect two wires to 3 & 4 and connect the ends 
of these to a phone. That's it! Now, pick up the phone and you 
should hear a dial tone. Throw the switch and you should hear 
another dial tone. In some areas you may dial '958' to hear 
exactly what number you are currently connected to, but that 
should be a problem. If you really can't figure it out, then 
either trace the circuit back or call one of the numbers and see 
if you get a busy signal or if it rings.
 


_______________________________________________________________________
                        Copyright 1990
79                                                    The Boxes   
_______________________________________________________________________
     Finally - Put the whole mess inside a project case, unless 
you like the site of wires all over the place. This also should
n't be a problem if you know even the basics of hardware con
struction.



The Tan Box by Samurai Cat and Tarkin Darklighter
-----------

     Introduction
     ------------

     The Tan box allows you to make recordings from a phone line, 
and it will only record once the victim's phone is picked up.

     Basically, this is a modified linesman's handset, or "Beige 
Box." A Beige Box consists of a speaker and two wires, a red 
(ring) and a green (tip). The Tan Box also works on this princi
ple.

     Parts:
     ------

  A small cassette recorder, preferably a micro cassette 
     recorder. (It MUST have both a microphone jack and a remote 
     jack)
  A single line recording control. (Radio Shack part number 43-
     228)
  2 alligator clips (Radio Shack number 270-374)
  A plastic box to contain the above parts (also available at 
     Radio Shack)
  Tan or Black spray paint
  7/16 inch hex driver

     Construction:
     -------------

  1.  Take the recording control and cut the modular plug off.  
     Make sure you leave enough wire!

  2.  Strip the red and green wires. (The yellow and black wires 
     are not necessary, and can be removed.)

  3.  Drill a hole on the end of the plastic box (enough for two 
     wires to go through).

  4.  Put the recording control in the box and run the red and 
     green wires through the hole. Attach one alligator clip to 
     each of the wires.

  5.  Put the micro cassette recorder in the box and plug the 
     remote and microphone wires from the recording control into 
     it.



_______________________________________________________________________
                       M & M Enterprises
80                                               The Boxing Book
_______________________________________________________________________
  6.  Close the box.

  7.  Spray paint the box and wires to make it look like it is 
     supposed to be where it is. (BE SURE YOU LABEL THE WIRES 
     BEFORE YOU PAINT THEM!)

     Installation
     ------------

     You can either hook it up to the box on the side of their 
house or a bridging head. Use the 7/16" hex driver to open either 
of these. (On older houses, you may not have to use a hex driv
er.) Attach the red wire to the right terminal and the green to 
the left. (Remember: Red-Ring-Right) If you attached the box to a 
bridging head, there may be room to leave it inside. If you 
attached it to the side of a house, run the wires out of their 
box and close it. Attach the Tan Box to the side of their house.

     Make sure you come back and get the box pretty soon, or you 
may find it gone! Micro cassette recorders are not cheap!

     Be careful, wiretapping is a felony (2-20 years, a $10,000 
fine, or both), and various other laws may be broken (i.e., 
recording without the other party knowing it, etc.)

     Ways to avoid being Beige/Tan Boxed
     -----------------------------------

     A tap detector may be purchased at Radio Shack (of course). 
If you do detect a tap, find the box, and you will have just 
gotten a new tape recorder!


Urine Box Plans By Wolfgang von Albatros [3/2/86]
---------------

     Now at last, Underground_Elite brings you these ultrasophis
ticated box plans for, well, uh, I guess we just kind of bring 
them for you. After many months of keeping this puppy secret, we 
here at Underground_Elite have finally come to the consensus that 
the public oughtn't be kept in the dark from the wrath of Ma 
Bell, that great telephone company in the sky.

     The Urine Box (tm) basically creates a capacitative disturb
ance between the ring and tip wires in another's telephone head
set. I have utilized this to the distinct advantage of the opera
tor of the Urine box and to the disadvantage of the other party 
involved, hopefully you won't get caught.

     Without further a doo, wire this schematic together. Copper 
wire (or gold) will work best due to its lessened resistance. It 
might be a good idea to keep the wiring cooled, to further reduce 
current loss.




_______________________________________________________________________
                        Copyright 1990
81                                                    The Boxes   
_______________________________________________________________________
            47k ohms  ---------------         .01 uF
|\    |----/\/\/------| SPST switch |---|------)|-------|
| \   |               ---------------   |               |
|  |--|                                 |               | +
|  |--------<-|-----|---/\/\/-----------|           ----------
| /       PVP diode |   470k ohms                   | 12 VDC |
|/                  |        _                      ----------
                    |       /         .005 uF           | -
SPKR 20W            |--/\/\/\/\/--------)|----<-|-------|
                    |    _/ VR1 (see note1)   PVP diode |
                    |                                   |
                to RING                              to TIP
               (your phone)                         (your phone)

  Note1 - VR1 is a three position variable resistor, enabling 
     settings equivalent to 100k ohms, 210k ohms, and 320k ohms 
     (all 110k apart).

  Note2 - The diodes are silicon-germanium based bipolar RF 
     reducers to limit current polarity reversal. If these are 
     placed backwards the box will not work as intended.

  Note3 - The speaker will emit low tones when the SPST is 
     closed (ie the box is "ON") and when the settings of VR1 are 
     moved to higher resistance the tone level will increase.

  Note4 - Place setting evaluation symbols to represent the 
     lowest resistance setting for VR1 to be "STEAM", the second 
     (210) to be "MELT", the third (320) to be "VAPORIZE". 

     Usage of box.
     -------------

     Use in place of your normal telephone receiver. Do not 
attempt usage as a regular phone. Call victim by sending tones 
through speaker with tape recorded noise. Use touch tone sounds 
as pulse requires electric disruption of line, not just audio. 
After answer (listen in on SPKR 1) set VR1 to desired strength 
and let her go. Victim will feel unpleasant sensations in his/her 
head and will undergo a series of high intensity seizures, not 
unlike epilepsy, and jointly proportional to VR-1 setting and 
time induced.

     Settings. (The Fun Part)
     ------------------------

  STEAM. A short -poof- of water vapor condenses within the 
     victim's earpiece, rendering the telephone short circuited 
     and the victim quite dazed.
  MELT.  Causes structural phase change of receiver (usually 
     reinforced urea formaldehyde plastic material - high tech). 
     This has the unpleasant bonus of removing the victim's hand.
  VAPORIZE. If the victim is particularly nasty, this setting 
     will remove his upper anatomy (if box is enabled properly, 
     that is!). Continued usage of this setting is generally not 


_______________________________________________________________________
                       M & M Enterprises
82                                               The Boxing Book
_______________________________________________________________________
     recommended, as death or other serious injury will result.


White Box Plans by Uncle Joe & Blacksmith
---------------

     This article will tell you how to change a normal touch tone 
keypad and convert it to a portable unit. In addition, we give 
the touch-tone frequencies. First of all, the tones made by a 
touch tone telephone are not single tones, they are a combination 
of two tones, making "DTMF" (dual tone multi-frequency). The 
normal tone telephone dials 12 different signals, but is capable 
of dialing 16 different signals.

     The power required by a keypad is about 25 volts, but they 
will work with as little as 15, thereby allowing the use of two 
9-volt radio batteries. As you may have guessed, they are also 
designed to operate with a telephone type speaker (and phone 
line), and not the standard 8-ohm speaker which needs to be used 
for adequate volume. To accomplish this, we use a matching trans
former, this is one of those miniature ones available at Radio 
Shack. Enough of the theory, now for the circuit.

     Material Required:
     ------------------

     A touch tone keypad
     A miniature 1000 to 8 ohm transformer (R.S. # 273-1380)
     A standard 8-ohm speaker
     Two 9-volt radio batteries
     Two 9-volt battery clips
     A case to put it all in (optional)

     A few construction notes, I suggest that you solder and tape 
all connections. It is also important to read this entire bulle
tin before attempting to construct this.

     First, connect the RED wire of the transformer to either 
terminal on the speaker. Now connect the WHITE wire from the 
transformer to the other terminal on the speaker. Next, connect 
the RED (positive) wire of one battery clip to the black wire of 
the other battery clip.  Now connect the remaining RED wire on 
the second battery clip to the GREEN wire from the touch tone 
pad. Connect the BLUE wire from the touch tone pad to the ORANGE-
and-BLACK striped wire from the touch tone pad. To these two 
wires, now connect the remaining black lead from first battery 
clip. You have now finished the power connection to the keypad. 
Connect the BLACK wire from the keypad to the BLUE wire on the 
transformer. Next connect the RED-and-GREEN striped wire from the 
keypad to the GREEN wire on the transformer. The BLACK wire on 
the transformer should not be connected to anything, along with 
quite a few wires from the keypad.  The connection of the keypad 
is now complete.

     Next, all you have to do is connect two nine volt batteries 


_______________________________________________________________________
                        Copyright 1990
83                                                    The Boxes   
_______________________________________________________________________
to the battery clips, and you'll be ready to go. You may want to 
mount it in a case for easy portability.

     Note that the silver box modification CAN be made to this 
unit, allowing complete remote phreaking. When none of the but
tons are pressed, this unit uses NO power, thereby eliminating 
the need for a power switch, and extending the life of the bat
teries.

     The following are the frequency combinations generated by 
each button on the keypad:

KEY  FREQ. #1  FREQ. #2
---  --------  --------
 1      697      1209
 2      697      1336
 3      697      1477
 A      697      1633
 4      770      1209
 5      770      1336
 6      770      1477
 B      770      1633
 7      852      1209
 8      852      1336
 9      852      1477
 C      852      1633
 *      941      1209
 0      941      1336
 #      941      1477
 D      941      1633

     All frequencies are measured in Hertz.  Note that A,B,C and 
D are not normally present (except for silver boxes).
























_______________________________________________________________________
                       M & M Enterprises
