Zyxel ATSE Seed Decoder — Ministry of Tinkering

MINISTRY OF TINKERING — HM GOVERNMENT (UNOFFICIAL) /// CLASSIFICATION: UNCLASSIFIED /// REF: MoT-WEB-2026 // LONDON, ENGLAND /// ALL HARDWARE HANDLED IN ACCORDANCE WITH FIELD PROTOCOL /// NO DEVICES WERE HARMED IN THE PRODUCTION OF THIS WEBSITE /// STATUS: OPERATIONAL /// FIRMWARE BUILDS: NOMINAL /// SOLDER JOINTS: PENDING INSPECTION /// ALL UNATTENDED E-WASTE WILL BE DISASSEMBLED /// UNAUTHORISED ACCESS WELCOMED /// MINISTRY OF TINKERING — HM GOVERNMENT (UNOFFICIAL) /// CLASSIFICATION: UNCLASSIFIED /// REF: MoT-WEB-2026 // LONDON, ENGLAND /// ALL HARDWARE HANDLED IN ACCORDANCE WITH FIELD PROTOCOL /// NO DEVICES WERE HARMED IN THE PRODUCTION OF THIS WEBSITE /// STATUS: OPERATIONAL /// FIRMWARE BUILDS: NOMINAL /// SOLDER JOINTS: PENDING INSPECTION /// ALL UNATTENDED E-WASTE WILL BE DISASSEMBLED /// UNAUTHORISED ACCESS WELCOMED ///

Zyxel's second-stage bootloader gates its dangerous commands behind a Boot Module Debug Flag. Setting it means answering a challenge: ATSE prints a 36-character seed, and ATEN expects a password derived from it. Paste the seed below to get the password.

One sitting. ATEN re-derives from the nonce still live in RAM. A reboot or a second ATSE invalidates a captured seed.
ATEN 1 with no password silently no-ops. The flag stays 00 and it reads like a failed password.
Order matters. ATEN 1,<pw> before any ATSE gives please run atse first.
Two constants are untested. All three verified units — three models, three vendor OUIs (the IEEE-assigned manufacturer prefix of a MAC address), bootbase V1.42 (2019) through V1.49 (2023) — decoded x/y/z = 00 00 10, so n = 16 every time and only MAGIC[1] with an unshifted rotate count has ever run on hardware. Those MRD bytes look fixed for the family rather than per-unit. A seed that sums differently takes an unexercised path, and this page will say so.

© MINISTRY OF TINKERING — ALL CONTENT UNCLASSIFIED UNLESS MARKED OTHERWISE /// ● ONLINE /// MoT-WEB-2026 /// NO TAXPAYER FUNDS WERE USED /// RSS FEED AVAILABLE FOR FIELD OPERATIVES /// REPORT HARDWARE FAULTS TO THE APPROPRIATE DEPARTMENT /// ALL UNATTENDED E-WASTE WILL BE DISASSEMBLED /// © MINISTRY OF TINKERING — ALL CONTENT UNCLASSIFIED UNLESS MARKED OTHERWISE /// ● ONLINE /// MoT-WEB-2026 /// NO TAXPAYER FUNDS WERE USED /// RSS FEED AVAILABLE FOR FIELD OPERATIVES /// REPORT HARDWARE FAULTS TO THE APPROPRIATE DEPARTMENT /// ALL UNATTENDED E-WASTE WILL BE DISASSEMBLED ///