Flüpke Fluepke

If you're a Versatel customer and wondering what's going on inside the Raisecom RAX701-GC, here's a fun one.

Apparently, the firmware exposes a superuser login function that can be invoked directly from the VxWorks shell.

Steps

Connect a serial console
- USB-A to USB-A cable 🤪 (shows up as USB peripheral, as a serial adapter)
- 9600 baud, 8N1
Boot the device.

Vodafail

This will become a short tutorial on how to achieve higher bandwidth on a residential (german) Vodafone DOCSIS internet connection.

A flaw in Vodafone's modem activation process allows for simultanous operation of two modems on one contract:

Vodafone-owned CPE (e.g. "Vodafone Station")
Customer CPE (TC4400, Fritz?!Box 6660, etc.)

On a low-loaded DOCSIS 3.1 segment, I am able to achieve 1900 MBit/s download and 95 MBits/ upload bitrate by bundling both modems using MPTCP

Use non local IPv6 with GoLang (e.g. to bypass Ratelimit)

You need:

IPv6 addresses (and a static route)
A "to local" route
The address range configured on the loopback interface
net.ipv6.ip_nonlocal_bind=1

	Source: https://kommunaler-notbetrieb.de/uebersichtskarte/kommunale-it-dienstleister/

	akdb.de
	kommunalbit.de
	itdz-berlin.de
	dikom-bb.de
	bit.bremerhaven.de
	dataport.de
	ekom21.de
	sis-ksm.de

	#!/bin/bash

	# Database parameters
	HOST="crt.sh"
	PORT="5432"
	USER="guest"
	DB="certwatch"

	# File to store the data
	OUTPUT_FILE="certificates.csv"

	#!/bin/bash

	if ! command -v curl &> /dev/null; then
	echo "This script needs curl. Please install curl."
	exit -1
	fi

	if ! command -v jq &> /dev/null; then
	echo "This script needs jq. Please install jq."
	exit -1


	; <<>> DiG 9.18.1 <<>> axfr govdigital.de @ns-govdigital.akdb.de.
	;; global options: +cmd
	govdigital.de. 28800 IN SOA dns.lvr.govdigital.de. admin-tech-c.regioit.de. 207 10800 3600 2419200 900
	govdigital.de. 300 IN A 217.160.41.129
	govdigital.de. 300 IN MX 10 govdigital-de.mail.protection.outlook.com.
	govdigital.de. 28800 IN TXT "v=spf1 include:spf.protection.outlook.com -all"
	govdigital.de. 28800 IN TXT "MS=ms78731993"
	govdigital.de. 28800 IN NS dns.lvr.govdigital.de.
	govdigital.de. 28800 IN NS ns-govdigital.akdb.de.

	#!/bin/env python

	import tweepy
	import sys
	from tqdm import tqdm

	print(f"Nuking {sys.argv[1]}")

	consumer_key = '<redacted>'
	consumer_secret = '<redacted>'


	; <<>> DiG 9.16.21 <<>> axfr 219.185.195.in-addr.arpa @91.189.192.6
	;; global options: +cmd
	; Transfer failed.