How to HACK your ISP router - step by step.

Подписаться 32 тыс.

Просмотров 124 тыс.

50% 1

Thank you Anni for supporting the channel by lending me the ROG Zephyrus 16 laptop! 🙌
Visit them here 👉 anni.si/
Previous video that you should watch: • I HACKED my Internet S...
➡️ SFP GPON module: www.fs.com/de-en/products/133...
➡️ 1Gb media converter: www.fs.com/de-en/products/101...
Chapters:
0:00 Hacking went viral!
0:41 What is hacking?
2:26 The setup
4:18 Investigation
7:19 Network traffic analysis
10:59 Uploading the serial number

Наука

Опубликовано:

16 июн 2024

Ссылка:

Скачать:

Готовим ссылку...

Добавить в:

Мой плейлист

Посмотреть позже

Комментарии : 257

@sandordugalin8951 2 месяца назад

ISPs in North America: "Wait, that's illegal!"

@manitoba-op4jx 2 месяца назад

carrier-grade NAT and lack of port forwarding options drive me insane

@Daniel15au 2 месяца назад

@@manitoba-op4jxCGNAT isn't very common in the USA. There's a lot of reserved IPv4 addresses, and some ISPs (especially for mobile internet) made the good decision to go IPv6-only, using 464XLAT for connectivity to legacy IPv4-only servers. Way better than CGNAT.

@SadKris 2 месяца назад

It actually is, in fact, illegal! Specifically if you're renting it. This is only legal if you provided the device, which means the title is incorrect. ISP routers are typically only rented/loaned, so hacking those would be strictly a felony or crime

@sandordugalin8951 2 месяца назад

@@SadKris lol. I know. But if you were to buy your own equipment and all you were doing was spoofing a serial number in the powershell, it wouldn't be defacing the rented product. But probably still illegal in terms of violating some fine print somewhere. Lol

@sandordugalin8951 2 месяца назад

@@SadKris although, don't mess with cable modems because theyre also protected under radio frequency laws, and those get handled way harder than just lying to your ISP. We're talking federal charges.

@f.t.4333 2 месяца назад

Nice Video! Its a bit ironic, that we in Germany has a "Free Router Choice" per law. So the ISP has to allow to use our own router. Best law in Germany for an Networkadmin! :)

@konzekuenze Месяц назад

Even if there was no Law, I always prefer a router without backdoors like those provided by ISPs, and nobody can do nothing

@fredwupkensoppel8949 Месяц назад

Yeah, and they try to weasel around it every chance they get - sometimes you have to call multiple times until you find a service agent who knows that this is the law. Fun times! Would all be fine if they didn't tie the ONT's serial to your WAN uplink.

@pe1pqx321 Месяц назад

Same in NLD, and as far as I know it could be even a EU law. "Free Router Choice".

@fredwupkensoppel8949 29 дней назад

@@pe1pqx321 Well, not quite - in German it's Endgerätefreiheit, so "free end-device choice". If you tell an ISP you want to use your own router, they'll say sure, you can add a router to the ONT we're trying to force you to use. Don't give them this opportunity.

@fredwupkensoppel8949 28 дней назад

@@pe1pqx321 Man the EU is nice (all in all)

@Bongo42. 2 месяца назад

Amazing work! @8:39 you mask your serial, but the hex is still in the left - unmasked to 383A - and later on the full packet you replay with ncat.

@tomazzaman 2 месяца назад

Ha! I was wondering whether someone will notice :D You sir, have a keen eye! 🙌

@xephael3485 2 месяца назад

If its customer provided equipment you own... feel free to hack it! Watch out hacking against equipment that belongs to a telco though. It can be a felony or crime to even attempt hacking on communication provider routers

@morsikpl 2 месяца назад

Law depends on country. In UE it's legal to hack/crack something to make it interoperable. I think this should fall into that law.

@xephael3485 2 месяца назад

@@morsikpl I'm pretty sure you'll find Draconian laws in the EU regarding Telco equipment which is operated directly by the provider... Onsite CPE is probably excluded

@ChuckNorris-lf6vo 2 месяца назад

@@morsikpl Good job.

@morsikpl 2 месяца назад

Wtf... Again my comment is hidden/removed? Stupid RU-vid...

@xephael3485 2 месяца назад

@@morsikpl RU-vid has a pretty good censorship AI... Will even detect using @ instead of a and things like that 🙁

@patrickjeromeobaldo2450 2 месяца назад

Please don't ever cut out the parts where you make mistakes in speaking. The video sounds more casual and natural. Love your videos, keep them coming!

@kwisin1337 2 месяца назад

Agreed. Very human conversation. At least it feels like a conversation between the two devices,😅

@TenForceFalls 2 месяца назад

Here in the US, I somehow convinced my local ISP to give me a sfp+ module. They are a small provider that only serves one city. Nevertheless I was getting close to doing this with the crappy ont units driving me crazy. They are the one isp I can say nice things about because they pick up the phone and don’t immediately blame me when something is wrong. Here’s to having more local ISPs and not huge companies running the internet.

@worldhello1234 Месяц назад

The AVN Fritzbox is actually a great device. The only downsides AFAIK, it is proprietary and you don't control it. @2:00 That depends on what you want to hack and how experienced you are. @2:38 It is not just a router. It is an "internet box". Everything you might need is stuffed in a box. There is a switch, a DSL modem, a WLAN module, etc. @12:19 The "minus" is a flag, not an operator, my dude. 😉

@donaldlove4039 Месяц назад

Excellent video, Tomaz! Not too long, precise, easy to understand. I really enjoyed it. Cheers from USA!

@tompointdll 2 месяца назад

You got an easy one to bypass, in France, bypassing ISP's boxes is not that easy 😋 but it's a great educational video 👍

@tomazzaman 2 месяца назад

Thank you!

@pahnazd 2 месяца назад

The latter kind of comments you mentioned at the start of the video... it's always great to disprove them with a video proving them that you're right and they were wrong. Vindication, hell yeah.

@lonixlon Месяц назад

Those look like good old AT commands, brings back memories of the dial up days

@bigpod 2 месяца назад

great video might use this as a basis for mine, but more congratz for having what could be called sponsor even if its just for one video :), i wish i will get to that level one day but i have a long way to go with my crappy 360 subs. also fun fact hacking has multiple meaning and one of them mostly used in IT is someone who achieves their goals in non standard way. there is also the phrase Hack something together which means to finding quick workaround or solution that isnt standard.

@MichaelJones-ff9gb 27 дней назад

Excellent! Your demonstration was clear and concise, well done!

@Lazllb Месяц назад

My isp forces me to use their ONT but it's configured like a bridge to Ethernet in my house. The good thing is that it works well and doesn't interfere but I keep asking about higher speeds or adding a second line. Their own ONT even has a second port they could just provision since it's not being used for IPTV or anything. But the customer support is overseas and aren't very helpful. There was one guy named Cederich on the online support, very cool guy because I ran into him twice in one week 😂. the good news is another company has installed their own lines in our neighborhood recently and are just waiting on the city to approve the rest of the permits. Hopefully soon there'll be more competition here in my neighborhood.

@drac.96 Месяц назад

What a nice video, part laptop ad, part educational hacking video. Great!

@lv3609 Месяц назад

On previous video what found most interesting was commentators says an EU directive (in place or in making) for ISP to have an open network option, that is, you use your own ont router of FW and ISP provide basic/generic instructions how to setup. However can’t find anything online.

@nickpetrovsky Месяц назад

The main idea why it is useful: you can have access to ont vlan’s directly in your equipment, usually it reduces devices and wires in complex setups. Same thing is much more complicated with huawei replacements, which is highly popular in some Eastern Europe regions.

@pan-africanmovement938 2 месяца назад

Absolutely brilliant. Thanks for the detailed explanation....

@Franiveliuselmago Месяц назад

Why not just set the provided router in Bridge Mode and call it a day?

@TurboLoveTrain Месяц назад

Fun Fact--most ISP provided routers never change the default password. Usually the password default has a "random" generator that changes the password a fixed intervals but if you know the original, which they don't change, you can usually lookup online what the current password is based on the default seed.

@twentyrothmans7308 Месяц назад

Thank you, Tomaz. Nice and quick, no fluff. Instant subscribe. I have a Fritz in the UK, but they're expensive, I don't want to brick it. It's frustrating that they nuked ssh/telnet, I'd have been happy with that.

@paaao Месяц назад

You don't need to hack their router. Just drop your own router downstream of it that you have full control over. Now you have an edge router that is yours, you own, and only you can control. Pretty simple really. Add your own WAPs, and turn off the wifi on your cable provided router. Setup your own LAN, and route your network traffic through your edge router. Any and every business who has decent IT, does this no matter what their ISP/IP/Handoff consists of.

@Tntdruid Месяц назад

I don't use my ISP router, I'm using my own opnsense box.

@canlelola Месяц назад

If you got to see the modems we got here in Australia, you'd be thankful for the one you are dising on.

@Strimblaster 2 месяца назад

Great video. Unfortunately there's no SFP in the ISP Routers in Portugal. For some years now not even ONTs. Its fiber directly to the router and you get only copper twisted pair out.

@morsikpl 2 месяца назад

We have that in Poland, and that's not a problem. You can buy media converter directly from GPON fiber (without SFP cage - built-in like in ISP routers) to RJ45 ;)

@SEOng-gs7lj 2 месяца назад

@@morsikpl how would you connect up such a converter? connect wall fibre to converter? what about the ONT? i like to sniff the VoIP password

@morsikpl 2 месяца назад

@@SEOng-gs7ljsad I can't put any photo here :( First you must understand that In our new buildings in Poland it's required by law to have fibre and copper (RJ45) connection from building patchpanels to the apartments. This is for big multi-apartments multi-store buildings I mean. Then ISP gets into that building (or your home, since this moment it's very similar) puts their routers/patchpanels/whatever in basement of building and in case of multi-aparment building, patches fiber from their patchpanel to building patchpanel that has one end of your fiber. The other end is in your apartment near entrance door. There are always 2x RJ45 and 2x fiber. Now, ISP gives you their router with fiber connection and fiber cable and just connects it to the wall. Remember that their router is *also* ONT. Just not separate one, but integrated into the router. So the only thing you have to change is just replace their router with your ONT+your router and that's all ;) In terms of hardware I bought ONT LXT-010H-D by polish - ironically ISP - LeoLabs. It's 2,5G so I can have my 2G down/600Mbit up fully accessible. And I just set serial number on ONT to the one written in ISP's router label - so that was easy. In terms of password: now it really depends on your ISP. In my case, they don't provide passwords for fiber installs (I have Orange Poland). But guy on Chat gave me unofficial hint "we will give you password if you have problems with internet for example connection to our router is not working" so... I just disconnected it from the power so it "was not working", guy send me SMS with my PPPoE password (login was already available on their web portal) so I could just enter credentials into PPPoE connection on my DIY Debian-based router. I hope this comment won't be blocked because previous was... :/

@tomazzaman 2 месяца назад

Usually, you either get an SC-APC or SC-UPC terminated cable. So all you have to do is get one of those transcievers (I recommend fs.com), then put it in a media converter, and connect the other side to the router. Of course, then you have to figure out how your ISP-provided router authenticates to the ISP. Could be with serial (like mine), with MAC, or with a LOID password.

@morsikpl 2 месяца назад

@@tomazzamanwhere's my comment here... ugh :/ Why it's hidden? :/ Why I just can't help people with answers because my comments are hidden/removed? :/

@msdevel 2 месяца назад

this is perfect. am i also able somehow to discover that serial when i have external ONT? like huawei small one?

@LayKxD Месяц назад

I have read too many comments about how it is illegal because technically we are renting the equipment. If they do not offer an option to OWN, the equipment, then it is wrongly forced upon us to be rented. At least that is how I justify the fact these should be hacked and bypassed. I am having issues getting past my Calix for my provider, but I offered to spend a couple hundred bucks to buy a replacement one that doesn't have a back door from the ISP, if they would just allow it on their network. They tell me that is absolutely not possible. Which is a lie, it is possible, they just don't want to do it. I get that I am living in an apartment and when I leave it would be super inconvenient to have to send a technician out to swap it back out... But I am willing to pay the price for both those services.

@sysadmin-info 2 месяца назад

Finally I know how did you do that. You mentioned in previous video that on German forum, that I also followed, there is a firmware for Fritzbox that allows packet capture that by default is not available. But even with a Wireshark you can just connect any router via RJ-45 (of course you have to connect only a router that is not connected to any other device) choose the ethernet interface to capture the data sent and received between the computer and a router or modem and look for a payload. I am just wondering is is doable with Huawei HG8245X6-10 that in fact can alos work in bridge mode and then on your router eg. Mikrotik you have to configure PPPoE as I did currently. I just would like to replace this Huawei with a TP-Link converter that exists on the market a really long. The only one thing you need to know it this case - do you have a multimode or single-mode optical fiber and buy a proper gbic SFP module.

@florianh20b 2 месяца назад

Great video for all networking enthusiasts. I myself am very satisfied with my Fritzbox for home usage (it is a very current model). Nevertheless, I was able to learn something because I now know that the Fritzbox is able to capture network traffic 🙌 I just love content like this

@tomazzaman 2 месяца назад

Thank you! There will be plenty more! :)

@bryanmora4996 Месяц назад

I got the same FS module you mentioned in the past video and tried to use it with my FRITZ!Box 5590 but the device keeps telling me that "No SFP module found" and gets really hot after triyng to configure it, I tried with a different ZTE module I got from AliExpress and at least it shows as "Unknown SFP module" Is this a problem with the SFP module itself? Does the 5590 support the FS module? I am missing something? Please I'll appreciate any help, I am struggling with this since past year

@tkteun 2 месяца назад

I'm all for using your own equipment, but this is the GPON equivalent of finding your PPPoE/SIP credentials and VPI/VCI. At least on the Fritzbox you can disable TR.069 manually. Unfortunately your ISP chose to use the router instead of the ONU to authenticate you on their network otherwise you probably wouldn't have noticed. Although I don't think they went above and beyond, they're probably very lazy and scan the big barcode on the box they send you. Cool addition to be able to run it in a switch, most SFP programming I've seen was directly connected to a CPU, definitely not DHCP. Nice to see you succeeded, hacking can be very frustrating ;)

@jfbeam 2 месяца назад

I would agree it's a lazy way to do it, but on the other hand, it makes replacing the SFP module simple. And everything the customer might ever need to see is right there on the label of the router.

@toumpanis 2 месяца назад

I have just bought the ONT LXT-010H-D ONT from Poland, it shipped really fast here in Greece. I read the content of my ISP's ONT and with telnet (Putty client) pasted the serials etc from my ISP's ONT to the Leox ONT and this is how I use my own mini-pc with intel N100 cpu and 4x2.5gbps ports and pfsense as a router

@Sithhy 2 месяца назад

What more did you need to do to use the mini PC as your router? It's a cool idea

@tomazzaman 2 месяца назад

I haven't heard of them before. Will order one and test it myself, sure looks like a great idea! Thanks!

@toumpanis 2 месяца назад

@@tomazzaman You are welcome. Ask them in the support since they do not list prices but I can tell you how much was mine. I got the one one that gives 2.5gbps ethernet port so I can get a little bit extra speed from TCP/IP overhead. They have one that is 1gbps ethernet. Not sure the price difference, I went only for the 2.5gbps. The fiber as medium runs at 2500mbps downstream and 1250 upstream, at least here in Greece. Soon in my area we are going to get an ISP which will provide 10gbps symmetric, basically they will put it up to the customer how fast he wants to go depending on the gear the customer has. So I might change my ONT to a 10gbps. Please correct me where I am wrong. Leox I think is an ISP in Poland and they are making their own equipment which to their credit is "hackable" without too much trickery. So kudos to them! Price was: 56.58 EUR. Including shipping and all. They also included a nice mousepad and a pen!

@toumpanis 2 месяца назад

@@tomazzaman also they are selling an SFP+ module that is "hackable" like the ONT. So in the router you will be making and most likely I will be buying, if you add an SFP+ 10gbps port, we might be able to just use 1 module from them directly without the need of a switch or even ONT!

@toumpanis 2 месяца назад

@@tomazzaman this is the GPON I am talking about (GPON STICK LXT-010S-H)

@vladislavkaras491 3 дня назад

I liked the the final part, of it not being so practical, but where is fun in that? Thanks for the video!

@riekstc 28 дней назад

As a former ISP technician for 5+ years I must say, good job. In my country if you know "how to ask" (at least mainly correct terminology which shows them that you are not a complete tool and actually know what you want) ISP will let you (providing needed parameters) and in some cases if needed even help you set up your own device.

@Kazyek 2 месяца назад

My god, yes you're right that this is technically "hacking", but you were given a pretty nice deal of cards from your ISP: - Your ISP's modem ship with a firmware containing an actual packet capture tool (yes it's not linked anywhere but it is available on the modem at least, which is not the case for most of them) - The SFP module is actually exposed on the same network, and not communicating in a separate network not exposed by the modem to the outside (which I believe is what most other ISPs do) - Your SFP module is easily physically accessible on the modem, instead of not being hidden inside the modem and accessible in a non-destructive way Sadly, this is not as "easily" doable on other ISP's modems :(

@ajaxupgrades 2 месяца назад

Nice job. My Jurassic Fibre Nokia PON has the web config locked down so I can't even access it. Bridge mode was my only choice to secure my network. Mesh FritzBox setup from the prior DSL connection slotted straight in.

@entropy_69 2 месяца назад

13:42 it's not just about FUN.. Simply putting router to bridge mode may not be an option for many, my ISP disabled bridge mode and only allow it if I buy a Static IP, so this 'hack' is pretty useful!

@mvstermlnd Месяц назад

Have you tried changing your router ip that was communicating with that isp ip and just merge somehow this new ip im talkin about w that same serial number and bake it into that black box w cmd? In other words, do you just need to have the serial of a neighbors router , understand what ip ranges his isp provides and get free internet forever? or the exact ip is a must also?, also are there any isp ips that are kinda universal that you can merge with that serial of your router and estabilish connection? I hope i didnt sound too dumb cuz i have no clue how these things work. Btw we dont have those extended dongles at all at my country, but what pissed me off the most is that they hard baked the dns of my isp into my router, and each time id change it they would revert it back. First time here, sorry about this essay.

@M3LP Месяц назад

I need to learn how to do this because my ISP has the public share opened, and it can't be disabled, which is a security risk. Also when people use the ISP Hotspot I'm the one who loses speed, even after paying a premium to get those speeds.

@SirPeterlll 2 месяца назад

1. Get a laptop with an rj45, I hate it when customers call and doesnt have a proper laptop with rj45 port or an converter. 2. ISPs doesnt mind if people doing this stuff. Just have the ability to have the stock router setup when calling in if you lost connection for trouble shooting purposes.

@EpicLPer 2 месяца назад

Meanwhile my provider literally sent me a step by step description on how to set the correct VLAN and other settings for pfSense/OPNsense to configure it...

@serdalo5035 2 месяца назад

Dutch?

@forid200 20 дней назад

That's actually awesome

@harounhajem7972 Месяц назад

Thanks for a great presentation! Even when you butchered the English words you came out on top of it. People forget how hard it is for bon English people to speak English. Well done sir 🎉

@eniggma9353 2 месяца назад

That's very insightful.

@borisvokladski5844 2 месяца назад

I am glad that I have the opportunity to use my router for my Internet connection. This Fritzbox thing reminds me my last vacation in Germany, there I rented an apartment with a Fritzbox modem / router. I was only allow to use port 80 and 443 for outgoing traffic. So I could only get my VPN to my home server working by using port 443, which was a bit annoying.

@Lucaat 2 месяца назад

My fiber ISP uses AON instead of GPON, I don't know if that makes it different but at the moment I can just use my own SFP module with a transparent "dumb" media converter and just plug that into my router of choice. Nice for now. Rumors were flying they stop this, but has been fine for years. In the beginning you needed to use MAC cloning, but if you request bridge mode, you can remove the isp modem as well for some reason. Now they have the fritz 5530 and no longer offer bridge mode, but it still works with your own equipment out of the box. The ISP modem does have a serial number but for now it seems to be irrelevant. I feel lucky because here in Austria we dont have "router freedom law" like they do in Germany.

@Middicom 2 месяца назад

The "problem" with GPON, if one wants to call it that way, is that the technology makes use of passive optical splitters, which are one of the reasons for the p = passive in GPON. That means that the ISP splits the same data stream to multiple customers which then need to filter out the relevant data without gaining access to all the date destined to other customers. AON on the other hand usually consists of one (or more) dedicated fibre runs from your home to the ISPs point of presence in which the fibre is terminated. Building the network this way the ISPs active equipment can directly send the relevant date to the corresponding customer. This is why you as the customer do not need to "authenticate" yourself via a serial number or MAC address to the ISP.

@Lucaat 2 месяца назад

@@Middicom thanks!

@mikegleasonjr 11 дней назад

@@Middicom When the P is not there, it's just GON! (gone, ok I'll see myself out)

@mohamed-bana 2 месяца назад

Excellent video!

@Boz1211111 18 дней назад

I really learn about how stuff works from this! Cool

@svensyoutube1 Месяц назад

where can i read the full guide

@MultiTimotej 2 месяца назад

would this also be applicable to Innbox routers? afaik, they have built-in sfp module so i don't know if replaying the payload is even necessary here. just cloning the mac address of the innbox modem should be fine?

@tomazzaman 2 месяца назад

Telekom doesn't use MAC address to authenticate with the OLT - they use the serial. So you could get yourself one of the FS.com PON sticks I link to in the description (and a media converter, if you don't have a SFP-compatible switch), and copy over the serial from Innbox router.

@pav431 2 месяца назад

Man, having to do this sort of stuff just to get rid of an old, shitty router makes me so glad my ISP just lets me use my own Mikrotik router, and so all I have in my home network is a simple media converter / modem going from optical to copper. The rest is up to me.

@dynameis 2 месяца назад

does router you making now have hardware pppoe offloading? since we need use PPPOE for 100M~2G (mine is 500M/500M) network here

@JosephANagyJr Месяц назад

I have a Calix Systems ONT from my ISP, I imagine I might have to go on a similar path. You rightly presumed in another comment it has the green connector, is that important?

@omegatotal 2 месяца назад

Not all of the SFP's with larger shells are 'smart', or ONTs. Some are just oversized to support SC/APC connectors

@Daniel15au 2 месяца назад

My ISP in the USA provides 10Gbps fiber using XGS-PON. They provide an ONT, but customers are allowed to use their own router (using a TP-Link Omada ER8411 with mine). Works much better than some other ISPs that provide a combined ONT and router with some proprietary authentication scheme, that they force you to use.

@tomazzaman 2 месяца назад

Uf XGS-PON. Spoke with one of the ISPs around here. They offer it, but no sales in residental customer base. Too expensive.

@ernstoud 2 месяца назад

Is this GPON or XGS-PON? With the more modern Fritzboxes (5530/5590) the SFP+ is “dumb”. The SOC in the router does all the processing. So only AVM SFP+ modules work and you can’t use their SFP+ in your own router. I am amazed that with your FB it worked.

@tomazzaman 2 месяца назад

This is GPON. I guess I'm lucky then? :D

@mrlazda 2 месяца назад

The correct technical name for the SFP module is "čikoladica" (smal chocolate). I got a name for looking like kinder chocolate.

@watpac9221 2 месяца назад

You should hold it a against them about not having rj45, Love your videos Btw.

@FluffyFoxUwU 2 месяца назад

i wonder how important or confidential is serial number? its for me just number identify the device with no user data or identification associated with it

2 месяца назад

Glad it's optional for using the ISP router in my country. 😂 I just buy what I want, configure and done. Only drawback we do have are the tv setup boxes that are ISP locked (on MAC address). But no big deal because I only use the internet and streaming services.

@n-steam 2 месяца назад

I hate the idea of "just putting your old router in bridge mode", because I hate the idea of locked-down hardware, and anyone at the ISP having access to it.

@theshazman 3 дня назад

Curious what you have to say about AT&T's hellish gateway box.

@fRUTTiFrESH76 2 месяца назад

Great Video!

@B3ll3r0ph0nt3s 2 месяца назад

Definitely beautiful hacking, thank you very much =)

@vasudevmenon2496 2 месяца назад

Mine is a gpon but even with right credentials with bridge mode enabled it could not get authenticated even with same gateway address

@Tad3j 2 месяца назад

This is I guess for Telekom Slovenia TS? Eliminating Modems on A1, is quite easy also. However I don't think you can eliminate OLT unit on GPON Fiber also, ... ?

@cheebadigga4092 Месяц назад

Step 1: build your own router. Done.

@drumaddict89 2 месяца назад

thanks a lot - if you got more in-depth videos like that, i'm looking forward you upload more stuff like that. cheers from right around the corner ;)

@Abhinav_Nayana_Sailen 2 месяца назад

I'm from India and here the ISPs have all shifted to fibre and the ONTs (Nokia g-2425ga for me) they provided are locked down af and they do not train their on field tech to enable bridge or even login with pppoe (best to keep the customer under surveillance 😈) Anyways, what I've tried till now is unlock the provided ont but that did not let me enable bridge mode. So I relocked it and bought a TP-Link XZ000-G7 and tried with that but still failed. So after a long while crying in the corner someone on the national forum informed that the ISP does VLAN mapping and whatever shown on the default ONT's page is wrong because the ISP uses Alcatel OLT in the backend which has issues with the customer side equipment if it's 3rd party. So now I'll try VLAN scanning using UART since that is the only way and see if I can achieve full control over the service I paid for. Btw, the ISP doesn't do mac-binding

@luigigaminglp Месяц назад

Had quite a frustrating experience recently when i tried to update a Fritzbox. Turns out only the ISP could do that and they were several versions late already. and also they could do this at any given time so... Meh. Upgraded my connection to a better one shortly after that, got a new Fritzbox so that was no longer an issue, at least momentarily.

@StoneyKenobi212 Месяц назад

Great video.

@ThatOneOddGuy 2 месяца назад

Ive been waiting for this

@MH-kc5jr 2 месяца назад

Been really enjoying both videos! I only got coax gigabit internet, so the upload sucks with only 50mbit and i cant really use any other router than a fritzbox or a ISP provided box, since there are no real alternatives in the EU/Germany other than the technicolor tc4400 which is really overpriced as a modem :(

@jounlow 11 дней назад

close your eyes and remember that [noise/symphony] when your computer was trying to connect using the phone line. then remember how long images of pretty ladies took to load. THEN remember the $300 bill for a xxx phone call that you never made. p.s. the phone company dropped the charge. my mom never believed that i didn't make that call and 30 years later i still wonder about those 1-900 numbers. it's part cringe, feeling sorry for the person on the other side BC making me speak is very difficult, and holding back the urge to critique her performance. say this. not that. I CAN'T believe you said _____ it almost made me gag. lol sorry had to much fun typing this.

@MH-kc5jr 11 дней назад

@@jounlow i am too young to be able to relate to this, but i have heard many of those stories :) Good read my dude

@Itz_naj 2 месяца назад

The Bridge-mode comment isn’t applicable with newer hardware - my ISP supplied FRITZ!Box 5530 router has no bridge mode, leaving me with double NAT 🙈

@kennedyjohn5842 2 месяца назад

forum link please

@JoshHookerJoshhook123 2 месяца назад

Do a video on att’s, bgw210! I need to rip their certs off so I can replace it with my ubiquiti router

@keylokush Месяц назад

Hey I have an internet issue basically my games don’t feel right when I’m online but when I disconect to offline they feel fine and I’m not talking about lag or anything like that because I get my speed I pay for it’s like a weird Desync sort of delay that makes my inputs not feel snappy 😢 so I cannot play competitively online it completely ruins the experience if anyone can help im any way please your input would mean a lot

@deathsgun5630 2 месяца назад

Yay a new video

@magneticshrimp7429 2 месяца назад

Glad my ISP just uses plain fiber ethernet, and with no 802.1x or weird vlans. Just stuff in any compatible $10 SFP module and it just works - unlike this GPON based stuff which requires at least a bit of hackery, ISP assisted provisioning (which they will usually refuse to do) or both.

@jorgemtds 17 часов назад

Anyone that turns a lawnmower into a vacuum cleaner is also a hacker.

@CyanureNeko 2 месяца назад

My ISP router doesn't even have a bridge mode, and recently they "locked" all access to the interface (its all remote with their own tools), F that! I'll try this someday~

@ss-xy2im 2 месяца назад

Why did you need a windows laptop?

@svensyoutube1 2 месяца назад

thx for your work

@flott1 2 месяца назад

Great video! Technically it's not a modem, because it doesn't modulate/demodulates analog signals, there is only digital signals. Also, a PON stick being utilized in such a manner, directly locked down to customer premises equipment (CPE), is not a common practice observed in ISP setups here in the Nordic. ONT's instead of pon sticks so the customer can bring their own hardware if would like. also there is L3 switches I get that these are oversimplification of the technology and that most of the people that will probably watch this video doesn't care :) -jr network engineer c:

@tomazzaman 2 месяца назад

Yep, These videos would have 0.5% of the views if I go hardcore :) I honestly have no idea why my ISP gives out PON sticks without the serial stored on the device, and a couple of pages of documentation.

@flott1 2 месяца назад

@@tomazzaman haha, that sounds like "work" so Yeahh they won't. But I'm more curious why they don't use ONTs instead really.

@Akash.Chopra 2 месяца назад

Unfortunately, just because you paid for it and own it, that doesn't mean you can legally modify it. E.g. Purrari modded Ferrari.

@Matris225 Месяц назад

I wouldn't mind if you made a Slovenian version

@IvoKvesic 2 месяца назад

"...just put the ISP router in the bridge mode...". (The ISP device is in that case only being used for its ONT.) Well, that is not always possible. In my case, I have a fancy communications cabinet which the architect built into my wall where all the in- and out- going cabling is placed. That cabinet is unfortunately very small and the ISP device is bulky - I cannot manage to fit that device, my router and the corresponding power bricks in the tiny space available. So, if instead I use my own ONT (a pretty small box) and my own router than I'm fine. Of course, that approach requires specific knowledge and (in some cases) some "hacking". And if in addition you want to retain the IPTV and the telephone service (I don't), the project becomes a bit more complex. A silly reason to get rid of the ISP device altogether, I know, so I thought I would share it with you. And BTW my greatest compliments and admiration to you Tomaž for your excellent presentation of an excellent work! Iskrene čestitke! 😉

@TS-ex4dl Месяц назад

I received updated fritz 7530ax modem/router for fibre which I put in bridge mode network /mesh with old fritz 7530 downstairs router mode enough fun for me! Interesting. Not a hack though.

@dimitarnovoselski3064 Месяц назад

My ISP bridged the router and I control my network now. Good for me. Bad for Murica people.

@shapelessed 2 месяца назад

Recently my ISP switched my router. The new one: - Has 2 ports (excuse me, what year do we live in?) - Has about 5m usable Wi-Fi range. - Shuts off the internet access regularly for a few seconds because the public IP expires (like what?) I'm lucky enough to have a separate gigabit switch and an AP in my office. Oh and while we're at it. They shut off my internet for an entire bloody day before switching out my old router, because we got assigned an IPv6 address (god why) at 2am and the old one was v4-only. Arghhhh...

@tomazzaman 2 месяца назад

Oh damn, that's bad. Can you move to another ISP? This sounds ridiculous.

@shapelessed 2 месяца назад

@@tomazzaman The other one is even worse. Sadly. I just looked around the "IPMI" - if you coulc call it like that - of my ISP's router, and they don't even let me set up a bridge and change the DNS addresses... WTF?!

@InndyXD 2 месяца назад

8:44 you forgot to censor the hex part of payload

@master-phat 28 дней назад

I use to use the ISP SFP module from my Bell HomeHub300 in my UDM Pro, for Two Years the internet worked Perfect, however Unify did an Update and now the SFP Module sometimes doesn't work or if it does, only for an Hr then cut out. Anyone have any Idea why it did this? and Yes I tried Downgrading the UDM Pro Software, however that did Nothing. Now I'm Stuck with the HomeHub going into the UDM Pro 😞

@isheamongus811 2 месяца назад

Hacking sometimes involves material loss.

@fredwupkensoppel8949 Месяц назад

What annoys me with ISPs is that they tie the WAN access to the serial number of the ONT. On my setup, the PPPoE connection is handled by the router, but I still need an ONT sending its serial number along, which is just unnecessary. A media converter would do the same thing. Is it possible to spoof the ONT's serial to the OLT on the ISP's side so people running their own routers can skip the fibre modem entirely? It would save people a couple of bucks (the cheapest ONT costs about twice what you pay for a media converter) and streamline their setups (I need to keep my ONT up to date - a media converter not so much). And before anyone asks - I checked, this would be perfectly legal, at least in Germany. They can't force anyone to use specific equipment according to § 73 TKG (3). They also don't have to support you to set up your own, though. You may use whatever device you seem fit, as long as you don't disturb the public network.

@BilalHeuser1 2 месяца назад

"Hackers: Heroes of the Computer Revolution" --Steven Levy

2 месяца назад

Hmmm...will try to do that on t-2 😏

@rnts08 2 месяца назад

Hacking is more about the spirit of tinkering and protecting your right to own. You dont have to break into systems or protections to hack. Anyway, whatever you feel like doing.

@jounlow 11 дней назад

i think if you land a job at a ISP it's no longer hacking it's "gaining experience[by tinkering] to insure you're able to be prepared no matter the task. sir i doing it for the company!

@hebertocristiano.alvesmach7719 Месяц назад

Hi... Why is this sort of brilliant videos should be thought of as hacking??? My "wild" 😜 interpretation of that Oxford definition indeed makes me think that the ones who do hacking in the first place are the ISP themselves. When they use and abuse the information they carry to their own extra profit, and I for one, would like to know, inquisitive as I am, what determined use cases are our data are subject to. Does anyone know the full extent of those explorations? I don't think so. I do know that those who hold and explore the information, should be accountable for that activity. Besides, the video is extraordinary!!! One great RU-vidr!!! Thank you!!!

@shapelessed 2 месяца назад

5:45 - Unless it's a level 3 switch 👀 Don't leave out the details!

@tomazzaman 2 месяца назад

A layer 3 switch is a router.

@shapelessed 2 месяца назад

@@tomazzaman I mean, I have an 8-port gigabit cisco switch, and its primary purpose is switching, but I can toggle a few switches in the control panel and set it up to be a router. But I think it's like arguing about sifferences between a microcontroller and a computer.