$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
$              LEX LUTHOR             $
$                 AND                 $
$          THE LEGION OF DOOM!        $
$               PRESENT:              $
$         HACKING COSMOS PART I       $
$                BASICS               $
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
$  IN THIS TUTORIAL WE WILL DEAL WITH $
$  THE VERY BASICS OF COSMOS, THIS IS $
$  A CONTINUING SERIES IN THE USE AND $
$  OPERATION OF BELL'S COSMOS SYSTEM. $
$                                     $
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$

    I have seen many philes written on COSMOS in which all they
did was to copy the information out of a COSMOS manual they
found while trashing. This tutorial will have some information
from the manual, but mainly was written using first-hand
experience while on the system.

------
COSMOS- Computerized System for Mainframe Operations
------

    COSMOS is a wire center administrationn system for
subscriber services, or put another way, an inter-office memo
sender. Its primary objectives are:

1) To relieve the problems of congestion and long cross
connection on the Main Distribution Frame (MFD).

2) To improve entity load balance and customer line equipment
distribution across the wirecenters switching equipment.

3) To provide an accurate and readily accessible data base for
use by all AT&T departments.

4) The loop assignment office (LAC) uses it to generate orders
for RAM use.

    Each TELCO has it's own COSMOS system, usually one in each
area code.

Capabilities:
-------------

    COSMOS is power. With it you can find out such info as:

    Give COSMOS a number and it will tell you who it's billed
to, who it's listed under, what types of service they have
(Touch Tone, rotary, flat rate, etc.).

    If a person changes their phone number, you can find out
what it was changed to.

    You can find out numbers by giving COSMOS their name, even
unpublished phone numbers!

Risks:
------

    Once unauthorized logins are detected, the COSMOS phone
number(s) will be changed immediately!. It's no big big deal for
them to change the number, they just send out a letter to their
offices saying it's changed. But they probably throw away those
papers and you will be able to find out alot of interesting info
by trashing. Also, most or all calls to COSMOS are traced, or
the number has ANI equipment hooked up to it, so be CAREFUL!

Identification:
---------------

    COSMOS logins and procedures vary from area to area, some
ask for just the login and password without a wire center,
others require it. The following information is based on
Southern Bell's COSMOS system.

    To identify a COSMOS system after connecting, you will see:

        ;LOGIN:
        PASSWORD:
        WC?

    The ;LOGIN: is the username, which usually consists of two
letters and two numbers (i.e. PA52). Sometimes NAME: is
substituted for, or required with ;LOGIN:. Again it depends on
what system you are on. Next it will ask for PASSWORD:, which,
depending on the system, has different formats for passwords.
Some make a little sense, like BASE52, while others might be
eight random characters. Last thing you will see is the
wirecenter. A wirecenter is usually an abbreviation of the city
it covers, such as OA for Oakland or PP for Pembroke Pines. In
any case, it is two letters. The wirecenter will cover a certain
amount of prefixes, and you will not be able to look up other
phone numbers unless the prefixes are in the specific
wirecenter. The prompt for COSMOS is the wirecenter and a % sign
(i.e. WC% where WC is the wirecenter you are logged in as). If
you happen to get a hold of a login and password, but the system
still asks for a wirecenter, then you can tell what are valid
wirecenters by when it asks for login and password, then the
wirecenter and you enter a wrong WC, the system will respond
with:

     ;LOGIN: PA52
     PASSWORD:
     WC? XX
     WC??
     INVALID LOGIN

    If you noticed, WC?? came after the wirecenter. Now, if you
had a valid WC, it would just say INVALID LOGIN after the WC
without the WC??. i.e.:

     ;LOGIN: PA52
     PASSWORD:
     WC?OA
     INVALID LOGIN

    That would mean you have the correct WC, but incorrect
password. If all goes well, you will get OA% as the prompt for
whatever your WC is.

Transaction Codes
-----------------

    COSMOS has a set of three letter commands called transaction
codes which tell the system what to do. They enable you to view,
modify, or add information about telephone numbers, class of
service, operating exchanges, etc.

    Here is a brief description of the most commonly used
transaction codes:

    CAY - Create an assembly
    CCA - Change customer attributes
    DAY - Delete an assembly
    DRE - Deny and restore establishment
    FLR - Frame layout report
    ISH - Inquire about a circuit <- phone number
    LOE - List originating line equipment
    MAL - Manual assignment list
    MAY - Modify an assembly
    MCH - Manually change hunt
    MDC - Manually disconnect a circuit
    SCA - Service order completion - auto
    SIR - Sorting inquiry by range
    SLC - Subscriber line counts for customer calling features
    USL - List USOC (US) file data
    WCC - Wire center change

    Here's an example of a transaction, using ISH (inquire about
a circuit), which gives information about a telephone number:

    WC% ISH
    H TN 935-2481
    -.

    It will then print various information about the phone #
935-2481. But it is doubtful you will understand since it is all
abbreviated. After printing the info about the #, COSMOS will
say:

    ** ISH Completed DD-MMM-YY **

    When using certain commands, there are various lines to be
used. Some are:

    H-Line - Required in most transactions for order, inquiry,
and report data

    I-Line - Transaction involves inward movement (i.e.
installing a phone)

    O-Line - Transaction involves outward movement (i.e.
disconnecting a phone)

    R-Line - Used for making remarks to service or work orders

    To signify the end of input for most commands, type '.'
(without quotes). You use a ';' to separate circuits, which is
good when you (or the phone co,) has to enter massive amounts of
info.

Prefixes, Formats, and Code Values:
-----------------------------------

    COSMOS provides a language by means of which the user can
communicate with the system. The language includes various
prefixes as well as input formats and input values.

    Prefixes are abbreviations which represent specific data
categories to the system when input by the user. An example of a
prefix is 'TN' which means 'telephone number'. An input format
defines the number of characters following a prefix as well as
the pattern in which these must be entered. For example, 'TN
XXX-XXXX' means that the prefix 'TN' must be followed by seven
characters in the format shown.

    Input values are the allowable data entered for each prefix
in the correct input format. As mentioned in the previous
paragraph, the input format for the prefix 'TN' is 'TN
XXX-XXXX'. The first three characters (XXX) must be
alphanumeric, the last four (XXXX) must be numeric. So, COSMOS
would consider an input of 'TN 935-2481' as valid. But you
*MUST* use the correct wirecenter for the (XXX) in question.

COSNIX
------

    COSNIX is a mutated version of COSMOS and UNIX, both written
by Bell Labs. COSNIX is the operating system of the COSMOS
system.

System Commands
---------------

    As some of you will notice, if you read The Basics of
Hacking II - VAX's UNIX, by The Knights of Shadow, alot of the
commands used on UNIX are also used on COSMOS.

Some of the commands are as follows:

WHERE- Gives location of the system. This command can be *VERY*
useful since you can go trashing at the location that the center
is at.

       WC% WHERE

       COSMOS 5
       Street Address
       City, State Zip

WHAT - Tells what version of COSNIX the system is running on.

       WC% WHAT

       COSNIX Operating System 9.2.3 Release December 7, 1983
       14.2.2
       March 1, 1984

WHO -  Just like on a UNIX, to see who else is on the system.

       WC% WHO

       COM3     TT00     GB
       FW56     TT04     HH
       PA52     TT12     PZ
       FC55     TT14     OA
       RS52     TT15     PZ

       In the first column is the username, the next is their TT#,
       and last is the wirecenter.

LS -   To see what files are in the directory you are logged in on.

    WC% LS

       and to see *ALL* files you have access to

    WC% LS /*

DATE - Simply gives the date.

TTY -  Gives the teletypwriter number you are logged on as.

    Using CTRL-C will interrupt any process you are executing at
the time. Sometimes you will have to enter it more than once.
CTRL-S pauses, CTRL-Q restarts, and CTRL-Y logs you off.

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Acknowledgements: The Warlock
                  TUC - TUCBBS
                  Agrajag the Prolonged
