Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Penetration Testing: Re: Dumping Data From Printers

Re: Dumping Data From Printers

From: David Howe <DaveHowe.Pentest_at_googlemail.com>
Date: Thu, 08 May 2008 11:19:39 +0100

sherwyn.williams_at_gmail.com wrote:
> Irongeek has some nice things you can do with a printer, use it as an
> ftp to store data, browse stored print jobs, change printer displays
> and the list goes on.
>
> But apart from that maybe there is a way to run or launch apps from
> the printer just someone find out more info do tell.

Depends too much on the printer. some of the larger network-attached
printers or scanner-printers run an os - varying between dos, unpatched
windows nt, windows 2000 or linux.

quite a few support ftp and can be used to relay or mask an attack by
fxp techniques. at least one linux based box I know of is happy to
accept ssh connections, open tunnels (which are a delight in themselves
of course) and if opened to loopback addresses, a mysql database with
no-password "root" access available....

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------
Received on May 08 2008

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]