Naix GhostNaix

Why Your Ubiquiti EFG Can't Push 25 Gbps Inter-VLAN — and What's Actually Going On

Or: How I Reproduced the Problem on x86, Tried to Load the Missing Modules on the Real Device, and What That Tells Us About Ubiquiti's Kernel

TL;DR

Ubiquiti markets the Enterprise Fortress Gateway (EFG) as a 25-gigabit-class router. The product page lists two 25 GbE SFP28 ports for WAN/LAN, and Ubiquiti positions the device as a flagship for medium and large enterprise deployments. Its silicon — a Marvell Octeon CN9670 — supports hardware-accelerated forwarding through purpose-built network engines (NIX) that should sustain tens of millions of packets per second. The UDM Beast, Ubiquiti's next-generation gateway, pairs a Marvell Octeon CN10K SoC (with ARM Neoverse N2 cores) with a dedicated Marvell Prestera-class switching ASIC accessed via PCIe — capabilities that, properly used, would offload most of the per-packet forwarding work into hardware.

FAQ on the xz-utils backdoor (CVE-2024-3094)

This is a living document. Everything in this document is made in good faith of being accurate, but like I just said; we don't yet know everything about what's going on.

Update: I've disabled comments as of 2025-01-26 to avoid everyone having notifications for something a year on if someone wants to suggest a correction. Folks are free to email to suggest corrections still, of course.

Background

Caution

This guide is out of date, follow the new guide here: https://flipper.wiki/mifareclassic/

MIFARE Classic

Here are the steps to follow in order to read your cards. Your goal is to find as many keys as possible. The keys unlock sections of your card for the Flipper to read them - you must have a card. Once you read enough sections, you can use an emulated or cloned card at the original card reader to unlock it (sometimes even without finding all of the keys!).

Important

Major update coming in first update following OFW 1.0.0 (ETA: mid to late September) which overhauls and simplifies this process:

How to Crack Sublime Text 3.2.2 Build 3211 with Hex Editor (Windows | Without License) ↓

Download & Install Sublime Text 3.2.2 Build 3211
Visit https://hexed.it/
Open file select sublime_text.exe
Offset 0x8545: Original 84 -> 85
Offset 0x08FF19: Original 75 -> EB
Offset 0x1932C7: Original 75 -> 74 (remove UNREGISTERED in title bar, so no need to use a license)

	> * Go to [hexed.it](https://hexed.it/)
	> * Click "Open File" and choose your sublime_text.exe (DON'T FORGET TO BACKUP YOUR EXE FILE)
	> * Go to Search and in "Search for" put: 80 78 05 00 0F 94 C1
	> * In Search Type select "Enable replace" and put: 80 78 05 00 0F 94 C1
	> * Click "Find next" then "Replace"
	> * Do the same thing with: C6 40 05 01 48 85 C9 => C6 40 05 01 48 85 C9
	> * Click "Save as" then name it: sublime_text
	> * Copy your modified sublime_text.exe to directory Sublime Text

	#!/usr/bin/env bash
	#Author: Josh Stroschein (@jstrosch)
	#Date: 28 Nov 2020
	#Desc: Script used to process a PCAP file with Arkime (formerly Moloch)

	PCAP=$1

	# Ensure there is at least one argument
	if [ $# -eq 0 ]; then
	echo "[!] Usage: $0 'path to PCAP file'";