Presale is already done and the game is sold out. The only ‘legal’ ways would be the official secondary market of St. Pauli or knowing someone with a spare ticket.

Pauli normally tries to block cards from other secondary markets (e.g. Viagogo).