How to HACK your ISP router - step by step. 

carrier-grade NAT and lack of port forwarding options drive me insane

​@@manitoba-op4jxCGNAT isn't very common in the USA. There's a lot of reserved IPv4 addresses, and some ISPs (especially for mobile internet) made the good decision to go IPv6-only, using 464XLAT for connectivity to legacy IPv4-only servers. Way better than CGNAT.

It actually is, in fact, illegal! Specifically if you're renting it. This is only legal if you provided the device, which means the title is incorrect. ISP routers are typically only rented/loaned, so hacking those would be strictly a felony or crime

@@SadKris lol. I know. But if you were to buy your own equipment and all you were doing was spoofing a serial number in the powershell, it wouldn't be defacing the rented product. But probably still illegal in terms of violating some fine print somewhere. Lol

@@SadKris although, don't mess with cable modems because theyre also protected under radio frequency laws, and those get handled way harder than just lying to your ISP. We're talking federal charges.

Even if there was no Law, I always prefer a router without backdoors like those provided by ISPs, and nobody can do nothing

Yeah, and they try to weasel around it every chance they get - sometimes you have to call multiple times until you find a service agent who knows that this is the law. Fun times! Would all be fine if they didn't tie the ONT's serial to your WAN uplink.

Same in NLD, and as far as I know it could be even a EU law. "Free Router Choice".

@@pe1pqx321 Well, not quite - in German it's Endgerätefreiheit, so "free end-device choice". If you tell an ISP you want to use your own router, they'll say sure, you can add a router to the ONT we're trying to force you to use. Don't give them this opportunity.

@@pe1pqx321 Man the EU is nice (all in all)

Law depends on country. In UE it's legal to hack/crack something to make it interoperable. I think this should fall into that law.

@@morsikpl I'm pretty sure you'll find Draconian laws in the EU regarding Telco equipment which is operated directly by the provider... Onsite CPE is probably excluded

@@morsikpl Good job.

Wtf... Again my comment is hidden/removed? Stupid RU-vid...

@@morsikpl RU-vid has a pretty good censorship AI... Will even detect using @ instead of a and things like that 🙁

Ha! I was wondering whether someone will notice :D You sir, have a keen eye! 🙌

Agreed. Very human conversation. At least it feels like a conversation between the two devices,😅

Thank you!

I would agree it's a lazy way to do it, but on the other hand, it makes replacing the SFP module simple. And everything the customer might ever need to see is right there on the label of the router.

We have that in Poland, and that's not a problem. You can buy media converter directly from GPON fiber (without SFP cage - built-in like in ISP routers) to RJ45 ;)

@@morsikpl how would you connect up such a converter? connect wall fibre to converter? what about the ONT? i like to sniff the VoIP password

@@SEOng-gs7ljsad I can't put any photo here :( First you must understand that In our new buildings in Poland it's required by law to have fibre and copper (RJ45) connection from building patchpanels to the apartments. This is for big multi-apartments multi-store buildings I mean. Then ISP gets into that building (or your home, since this moment it's very similar) puts their routers/patchpanels/whatever in basement of building and in case of multi-aparment building, patches fiber from their patchpanel to building patchpanel that has one end of your fiber. The other end is in your apartment near entrance door. There are always 2x RJ45 and 2x fiber. Now, ISP gives you their router with fiber connection and fiber cable and just connects it to the wall. Remember that their router is *also* ONT. Just not separate one, but integrated into the router. So the only thing you have to change is just replace their router with your ONT+your router and that's all ;) In terms of hardware I bought ONT LXT-010H-D by polish - ironically ISP - LeoLabs. It's 2,5G so I can have my 2G down/600Mbit up fully accessible. And I just set serial number on ONT to the one written in ISP's router label - so that was easy. In terms of password: now it really depends on your ISP. In my case, they don't provide passwords for fiber installs (I have Orange Poland). But guy on Chat gave me unofficial hint "we will give you password if you have problems with internet for example connection to our router is not working" so... I just disconnected it from the power so it "was not working", guy send me SMS with my PPPoE password (login was already available on their web portal) so I could just enter credentials into PPPoE connection on my DIY Debian-based router. I hope this comment won't be blocked because previous was... :/

Usually, you either get an SC-APC or SC-UPC terminated cable. So all you have to do is get one of those transcievers (I recommend fs.com), then put it in a media converter, and connect the other side to the router. Of course, then you have to figure out how your ISP-provided router authenticates to the ISP. Could be with serial (like mine), with MAC, or with a LOID password.

@@tomazzamanwhere's my comment here... ugh :/ Why it's hidden? :/ Why I just can't help people with answers because my comments are hidden/removed? :/

Dutch?

That's actually awesome

What more did you need to do to use the mini PC as your router? It's a cool idea

I haven't heard of them before. Will order one and test it myself, sure looks like a great idea! Thanks!

@@tomazzaman You are welcome. Ask them in the support since they do not list prices but I can tell you how much was mine. I got the one one that gives 2.5gbps ethernet port so I can get a little bit extra speed from TCP/IP overhead. They have one that is 1gbps ethernet. Not sure the price difference, I went only for the 2.5gbps. The fiber as medium runs at 2500mbps downstream and 1250 upstream, at least here in Greece. Soon in my area we are going to get an ISP which will provide 10gbps symmetric, basically they will put it up to the customer how fast he wants to go depending on the gear the customer has. So I might change my ONT to a 10gbps. Please correct me where I am wrong. Leox I think is an ISP in Poland and they are making their own equipment which to their credit is "hackable" without too much trickery. So kudos to them! Price was: 56.58 EUR. Including shipping and all. They also included a nice mousepad and a pen!

@@tomazzaman also they are selling an SFP+ module that is "hackable" like the ONT. So in the router you will be making and most likely I will be buying, if you add an SFP+ 10gbps port, we might be able to just use 1 module from them directly without the need of a switch or even ONT!

@@tomazzaman this is the GPON I am talking about (GPON STICK LXT-010S-H)

Thank you! There will be plenty more! :)

The "problem" with GPON, if one wants to call it that way, is that the technology makes use of passive optical splitters, which are one of the reasons for the p = passive in GPON. That means that the ISP splits the same data stream to multiple customers which then need to filter out the relevant data without gaining access to all the date destined to other customers. AON on the other hand usually consists of one (or more) dedicated fibre runs from your home to the ISPs point of presence in which the fibre is terminated. Building the network this way the ISPs active equipment can directly send the relevant date to the corresponding customer. This is why you as the customer do not need to "authenticate" yourself via a serial number or MAC address to the ISP.

@@Middicom thanks!

@@Middicom When the P is not there, it's just GON! (gone, ok I'll see myself out)

Uf XGS-PON. Spoke with one of the ISPs around here. They offer it, but no sales in residental customer base. Too expensive.

Oh damn, that's bad. Can you move to another ISP? This sounds ridiculous.

@@tomazzaman The other one is even worse. Sadly. I just looked around the "IPMI" - if you coulc call it like that - of my ISP's router, and they don't even let me set up a bridge and change the DNS addresses... WTF?!

This is GPON. I guess I'm lucky then? :D

Telekom doesn't use MAC address to authenticate with the OLT - they use the serial. So you could get yourself one of the FS.com PON sticks I link to in the description (and a media converter, if you don't have a SFP-compatible switch), and copy over the serial from Innbox router.

close your eyes and remember that [noise/symphony] when your computer was trying to connect using the phone line. then remember how long images of pretty ladies took to load. THEN remember the $300 bill for a xxx phone call that you never made. p.s. the phone company dropped the charge. my mom never believed that i didn't make that call and 30 years later i still wonder about those 1-900 numbers. it's part cringe, feeling sorry for the person on the other side BC making me speak is very difficult, and holding back the urge to critique her performance. say this. not that. I CAN'T believe you said _____ it almost made me gag. lol sorry had to much fun typing this.

@@jounlow i am too young to be able to relate to this, but i have heard many of those stories :) Good read my dude

Yep, These videos would have 0.5% of the views if I go hardcore :) I honestly have no idea why my ISP gives out PON sticks without the serial stored on the device, and a couple of pages of documentation.

@@tomazzaman haha, that sounds like "work" so Yeahh they won't. But I'm more curious why they don't use ONTs instead really.

i think if you land a job at a ISP it's no longer hacking it's "gaining experience[by tinkering] to insure you're able to be prepared no matter the task. sir i doing it for the company!