Gragg used Superscanto run a ping sweep and port scan for machines on this new network, but he discovered only the single workstation running the wireless access point. The workstation returned information on its operating system and coughed up the status of several running services-but its hard drive was sealed tight.
Gragg considered his options. He wanted a quick exploit that would give him a remote shell on the host machine with sysadmin rights. From there, he should be able to see into the hardwired LAN not yet visible to him.
Since he didn’t have the luxury of time, he opted for an attack that was effective against a wide range of devices: SNMP-a buffer overrun that exploited a known vulnerability in unpatched implementations of Simple Network Management Protocol. This service was present on the target, and it was worth a shot.
He switched to the command console and quickly keyed in the commands, pointing his exploit code to port 161 on the target machine. If the target was running an unpatched OpenBSD, he’d get to root pretty quick.
He executed the command, waited, and in a moment he got a return instructing him to telnet to port 6161 at the target IP address. He sighed in relief. Another hurdle overcome.
Gragg launched a telnet session and soon had a root prompt. He now owned Boerner’s workstation. Time to escalate network privileges.
Gragg searched the target machine’s domain but was disappointed by the results. His victim was linked to a single server-and that was sealed up tight. It barely divulged any information. Gragg took a look in the server’s shared directory and raised his eyebrows.
The directory contained a single Web page file. A page named HackMe.htm.
Gragg smiled. He was beginning to feel a connection with Sobol. Sobol wanted him to get this far-that’s what this was all about.
Gragg double-clicked on the file. A plain white Web page appeared in a browser window. It had logon and password text boxes and a SUBMIT button-nothing more.
There were options here. Unicode directory traversal? Gragg smiled. Logon.Sobol was encouraging him. This had all the earmarks of an SQL-injection attack, and he had a favorite one. In the logon and password boxes he entered:
‘or 1=1—
He clicked the SUBMIT button. After a moment’s pause an animation appeared with the words “Logon successful. Please wait…” Gragg felt a rush of endorphins. He’d just received high praise from his new mentor. He was getting more comfortable by the minute in this environment.
In a few moments a slick Flash-based diagram of a cinderblock building appeared with various features highlighted. It was an isometric view depicting the building right in front of Gragg’s car. He could see the antenna tower with a call-out label captioned “WI-FI ANTENNA ARRAY.” He moved his pointer around the diagram and noticed rollovers come to life as his mouse passed over certain features.
Gragg saw a sensor array depicted on the roof, and the illustration looked like it included at least one camera. Gragg pointed at the array, and a translucent drop-down menu unfolded to the right of it containing a submenu:
Ultrawideband Transceiver
HD Video Multiplexer
Acoustical Sensor Array
He was beginning to feel the rush now. This wasn’t a game, and it was clearly designed by a well-funded and technologically capable person. He had always sought the edge — and this was it. This was as far from Main Street as he’d ever been. This wasn’t the tattooed, pierced, neo-tribal rebellious bullshit of his generation. This was a quiet demonstration of networked power. This was it.
Gragg selected HD Video Multiplexerfrom the drop-down menu. A new browser window appeared containing a selection of six thumbnail images. They appeared to be streaming video feeds. Gragg saw an image of a car in one thumbnail, and he double-clicked on it-as anyone his age would do. It expanded to fill the window. It was a live image of his car. He waved his hand, and his hand appeared waving on the video feed. Gragg noticed a superimposed red bracket around his license plate. A call-out label showed the software’s interpretation of the tag number. It was correct. So Sobol was employing an optical license plate reader. Gragg knew it was commercially available software-used all the time on interstates and downtown roads. But Sobol needed access to DMV records to determine who owned the car. He must have cracked a DMV database in order to get his registration information. Gragg considered the hourly rate of the average DMV worker and realized that gaining access wasn’t a problem for Sobol.
In the background of the video, there was a similar bracket around the VW Vanagon’s license plate. Gragg couldn’t help but wonder what was up with that. The van was smashed all to hell.
He closed that dialog box and checked out the other video feeds. There were cameras placed all around the cinderblock building, guarding it from every direction. Every time the wind blew, the swaying branches were outlined by vectored lines trying to resolve into something recognized by the software. Gragg found himself watching the red lines appear and disappear like a lava lamp. Motion-capture software? This was sophisticated stuff. No one would ever suspect that this isolated blockhouse held so much processing power.
Gragg closed the video feeds and moved around to the other visible features of the diagram. He noticed that a garage-like protrusion extended from the rear of the building. He pointed his mouse at it, and the words “H1 Alpha” materialized beneath his pointer. That explained the damage to the Vanagon. There was an automated Hummer here-just like at Sobol’s mansion. Gragg smiled. It was Sobol. He was walking in the footsteps of a genius. To his dismay, there was no more information visible for the Hummer, so he clicked on one of the nodes around the base of the building. The label “Seismic Sensors” appeared. Probably for detection of approaching vehicles and people.
As Gragg scrolled around the base of the building illustration, a rollover displayed the red, glowing outline of a door in the front wall. He looked up at the real wall some twenty feet ahead of him. He couldn’t see any indication that there was a door in the plain cinder blocks. He hovered his mouse cursor back over the section of wall in the diagram, and a drop-down menu appeared. It had two selections: «Open» and “Close.” Gragg clicked “Open.”
In front of his car, he saw a section of the cinderblock wall move inward and then slide sideways-revealing a dark doorway about five feet wide. Gragg half expected roiling steam to emanate from the opening. It was outlined with a soft red glow.
Was this it? Was he supposed to enter? He looked around warily. That would require getting out of his car.
The spotlight from the building still shined down on the area, revealing what a horrendous morass of mud he’d driven into. He had no idea how he’d get the car out without a tow truck. He couldn’t stay in here forever.
Gragg shut down his laptop and packed up all his gear. In a few minutes he had everything in his rucksack except for his Glock 9mm-which he kept in his right hand. Gragg opened the Tempo’s driver door with its trademark 1980s-Detroit-crack-squeak sound. He gingerly placed one combat-booted foot into the quagmire and felt it sink up to his knee. He groaned in disgust, but realizing he had no choice, he followed it with his other foot, closing the car door behind him. Pretty soon he was stagger-stepping through the deep mud toward the dark opening in the cinderblock wall.
Gragg stopped and took another look at the smashed VW Vanagon with Louisiana plates and anarchy bumper stickers. Shattered taillight plastic and twisted side moldings littered the area. The left rear wheel of the VW was smashed into immobility, set at an angle to the axle. The passenger door of the Vanagon was slightly open, with deep footprints leading out of the mud and toward the road.
Gragg stood for a moment, deciding whether to check it out. He realized he didn’t want to be walking around out here and continued staggering through the foot-sucking mud toward the building.
Before long he climbed up onto a ledge of solid ground that ringed the building. Gragg examined his legs. They were caked in mud. His feet were sopping wet. He tried to s
crape the mud off his boots by dragging them against the ground but gave up and slung his rucksack over his shoulder. Then he chambered a round in the Glock and faced the opening.
Diffuse red light emanated from the edges of the door. It was just enough light to reveal a polished stone floor extending into the blackness beyond. Red. Low-frequency light not visible from any significant distance.
Suddenly a British-accented female voice spoke in midair right alongside Gragg’s head. “Come inside, Mr. Gragg.”
Gragg was so startled he reflexively squeezed off a shot with the Glock. The deafening crack echoed off into the sky. The bullet whined off the cinderblock wall, then howled out into the woods.
The female voice spoke again. It sounded slightly artificial, clipped. “Are you familiar with gunshot detectors? Police departments in major U.S. cities deploy them to identify and triangulate the precise location of gunshots the moment they occur. A gunshot has a distinct acoustic pattern. Even the weapon fired can be identified by its sound pattern. You apparently have a…nine millimeter.” There was a pause. “You won’t need it. You’ve earned the right to enter.”
Gragg looked down at the Glock in his hand. He took a breath. He’d never felt out of his depth technologically, but the disembodied voice was as close to magic as he’d ever experienced. He didn’t like the role of awed primitive. It didn’t suit him. He took another deep breath and tentatively spoke to the voice. “Who are you?”
The voice shot back. “This door will close permanently in ten seconds.”
Gragg’s thoughts scattered, and he hesitated for a moment before rushing through the doorway and into the darkness-feet squishing mud. The moment he did so, the door slid noiselessly closed behind him. The red glow from the door frame faded away as the opening sealed shut. Gragg stood in pitch-black darkness for a moment. It smelled not at all musty. It was super-clean, dry, filtered air. He wasn’t in South Texas anymore…
Suddenly a diffuse white light began to emanate from the walls. It didn’t flicker on, like fluorescent lights, but steadily rose from nothing to a comfortable, even glow. It was confident, effortless light, and completely silent.
Gragg found himself in a room twenty feet square, with a single steel door set in the middle of the wall straight ahead of him. The door had a dappled gunmetal look to its surface, as though it were meant to draw the eye. The walls in here were all glowing white panels-made of some nylon or fiberglass material. The floor was simple polished concrete.
The voice came back suddenly, startling Gragg as it circled around him. Gragg was hearing it, but he was still having difficulty accepting it. In real life a voice couldn’t appear in thin air. It wasn’t possible.
“You’ve come a long way, and you’ve accomplished much.” A pause. “Don’t be frightened by my voice. Its appearance in midair is accomplished through a HyperSonic Sound system. This technology is commercially available. Would you like to hear a technical explanation? Yes or no?”
Gragg looked around at the ceiling and walls. There were tiny plastic pods of various sorts mounted there. He cleared his throat. “Yes.”
“A HyperSonic Sound system-or HSS-does not use physical speakers. HSS pulsates quartz crystals at a frequency thousands of times faster than the vibrations in a normal speaker-creating ultrasonic waves at frequencies far beyond human hearing. Unlike lower-frequency sound, these waves travel in a tight path-a beam. Two beams can be focused to intersect each other, and where they interact they produce a third sonic wave whose frequency is exactly the difference between the two original sounds. In HSS that difference will fall within the range of human hearing-and will appear to come from thin air. This is known as a Tartini Tone-in honor of Guiseppe Tartini, the eighteenth-century Italian composer who first discovered this principle.”
Gragg was feeling slightly faint.
“This is only the beginning of what you will learn. You do wish to learn, don’t you?”
“Yes,” he blurted.
“Then we must determine your sincerity.”
The whir of a precise electrical motor came to his ears, and Gragg glanced around the room. A small console had opened up in the wall next to the door. Gragg warily approached it, his feet squishing mud onto the concrete floor. He saw no other muddy prints. He must have been the first to make it this far. A smile stole across his face, and he approached the console with more courage.
The console appeared to be an array of biometric devices-a handprint reader, a camera lens with a rubber viewfinder, and a microphone. There was also a small LCD screen-like the type found on the backs of airline seats. It was not illuminated.
The voice was right next to him. “Place either hand on the reader. Place your eye against the viewfinder, and adjust the microphone to a position approximately three inches to the right of your mouth.”
Gragg did as instructed. It was not the most comfortable setup, but he didn’t think complaining was a good idea.
“Very good. I can administer this test in one of seven different languages. Is English your primary language? Answer ‘yes’ or ‘no.’”
Gragg cleared his throat. “Yes.”
“Good. I am going to ask a series of questions. You must answer truthfully-even if you think the truth is not the optimal response. This is not a test of your skills as a hacker. It is an effort to determine if you bear us ill will. A pattern of falsehoods will terminate the test. Early termination of the test will cause the air to be pumped from the room. This will create a partial vacuum that will cause the nitrogen to bubble out of your blood-resulting in an excruciating death. An MPEG video of your death will be placed on the Internet as a warning to others. Do you understand? Answer ‘yes’ or ‘no.’”
“Fuck!” Gragg pulled his head up from the viewfinder and looked back at the featureless cinderblock wall.
“Stop!” The voice was so loud that it actually hurt. Then it returned to a comfortable volume. “Your earlier work was impressive. Your future lies ahead of you. Not behind you. Please return your eye to the viewfinder.” There was a pause. “I will not ask you a second time.”
Gragg was suddenly sweating. He felt his palm damp against the hand reader as he quickly returned his eye to the viewfinder. “Fuck, fuck, fuck…”
“Stop talking until you are asked a question.”
Gragg bit his lip and couldn’t stop shaking. The phrase excruciating death kept running through his mind. This was not an idiot he was dealing with here-he was the idiot. And he was truly afraid.
“Answer truthfully or die. Do you know who built this place? Yes or no?
“Yes.”
“Speak the name slowly-first name, then last.”
“Matthew…Sobol.”
“Do you dislike Mr. Sobol? Yes or no?”
“No.”
“Do you admire Mr. Sobol? Yes or no?”
“Yes. Very much.”
“Answer just ‘yes’ or ‘no.’”
The sweating returned. “Yes!” Jesus H. fucking Christ…
“Would you be interested in playing an active role in Mr. Sobol’s plans?”
“Yes.”
“If you were generously rewarded with power, knowledge, and wealth, would you be willing to break the law and expose yourself to personal risk as required to fulfill the plans of Mr. Sobol?”
He didn’t hesitate. “Yes.”
“Do you believe in God?”
“No.”
“Would you be willing to follow the instructions of a dead person?”
Ahhhh…The feelings welling up inside of him surprised even Gragg. Here he was strapped to the polygraph from hell, and he still hated taking orders from anyone-and yes, he had a subtle prejudice against the dead. They had no skin in the game. Sobol was impressive, but Gragg wasn’t going to spend the rest of his fucking life serving a macro on steroids. Goddamnit.
“Answer ‘yes’ or ‘no.’”
Fuck!“No.” Gragg closed his eyes and waited to die.
>
“Keep your eyes open.”
He complied immediately.
There was a pause. “To clarify. Your powerful intellect will be required to define the precise path to reach objectives set by Mr. Sobol. There will be a considerable degree of freedom in the means. The outcome will be all that matters. Knowing this, would you still have a problem performing in this role? Yes or no?”
Relief flooded over him. “No.”
“Would you be willing to direct others in the pursuit of Mr. Sobol’s goals-possibly resulting in the deaths of these subordinates?”
No problem.“Yes.”
“Do you have knowledge of a warrant out for your arrest in any state, territory, protectorate, or nation?”
“No.”
“Do you have a criminal record in any state, territory, protectorate, or nation?”
“No.”
“Do you take drugs?”
“No.”
“Do you have any significant medical condition or physical limitation?”
“No.”
“Are you currently in a significant romantic relationship?”
“No.”
“Do you have pressing family obligations?”
“No.”
“Do you have a history of mental illness?”
Hmmm.“Yes.”
“Have you ever purposely caused the death of another person?”
Gragg paused. “Yes.” He’d never really taken ownership of it before. He felt a strange pang of guilt that surprised him. It passed quickly.
“Are you available to begin work immediately?”
“Yes.” Gragg shrugged. Apparently this wasn’t a typical organization.
There was silence. It was deafening. Then-
“Mr. Gragg. You may lift your head from the viewfinder and remove your hand from the reader. Your convictions appear genuine. You are now under our protection. The remaining test is to determine your service rank and is a modified intelligence quotient exam. It was designed to assess your knowledge of human psychology, logic, mathematics, language, and your ability to think creatively while under pressure. It is not possible to fail this test, but performing well on it will greatly increase your personal power and the opportunities for your Faction.”
Daemon d-1 Page 18