Bibliography - Revision history

Admin at 11:05, 11 July 2018

2018-07-11T11:05:41Z

134.147.202.176: /* Research by date */

2017-01-30T15:55:04Z

‎Research by date

134.147.202.176 at 15:51, 30 January 2017

2017-01-30T15:51:14Z

92.227.58.56 at 17:27, 15 January 2017

2017-01-15T17:27:48Z

Admin at 17:25, 5 January 2017

2017-01-05T17:25:36Z

Admin at 17:13, 5 January 2017

2017-01-05T17:13:24Z

Admin at 17:11, 5 January 2017

2017-01-05T17:11:10Z

Admin at 16:58, 5 January 2017

2017-01-05T16:58:36Z

Admin at 17:08, 22 December 2016

2016-12-22T17:08:18Z

Admin: Created page with "[2014] Costin: "A Large-Scale Analysis of the Security of Embedded Firmwares" ----------------------------------- [2013] Zaddach: "Embedded Devices Security and Firmware Rev..."

2016-12-22T17:04:48Z

Created page with "[2014] Costin: "A Large-Scale Analysis of the Security of Embedded Firmwares" ----------------------------------- [2013] Zaddach: "Embedded Devices Security and Firmware Rev..."

New page

[2014] Costin: "A Large-Scale Analysis of the Security of Embedded Firmwares"

-----------------------------------

[2013] Zaddach: "Embedded Devices Security and Firmware Reverse Engineering"

-----------------------------------

- [2014] Jordon: "ARM Wrestling a Printer" | Canon Firmware RCE

* LINK: http://www.contextis.com/resources/blog/hacking-canon-pixma-printers-doomed-encryption/

-----------------------------------

- [2010] Costin: "Hacking Printers for Fun and Profit" | Use Word/JS/Java to deploy PostScript Payload
* VIDEO: https://www.youtube.com/watch?v=R56ZXErKCeE

- [2011] Costin: "PostScript(um): Youâ€™ve Been Hacked" | PS-Shell | Look into Firmware | API available to PS-Language | {Memory Dumper, BSD-Sockets}, Xerox Firmware Update via PS-File, MSF/Attacking Demo Toolkit
* LINK: https://www.corelan.be/index.php/2012/05/25/hitb2012ams-day-2-postscript-danger-ahead/
* VIDEO: https://www.youtube.com/watch?v=PqL5P46m_zQ

-----------------------------------

- [2011] Cui: "Print me if you Dare" | HP Firmware RCE

* TALK: http://events.ccc.de/congress/2011/Fahrplan/events/4780.en.html
* TALK: http://boingboing.net/2011/12/30/printer-malware-print-a-malic.html
* VIDEO: https://www.youtube.com/watch?v=njVv7J2azY8
* SLIDES: http://ids.cs.columbia.edu/sites/default/files/CuiPrintMeIfYouDare.pdf

-----------------------------------

- [2011] Smith: "Printers gone Wild" | PrintFS PJL filesystem

* LINK: http://blog.c22.cc/2011/01/29/shmoocon-2011-printers-gone-wild/
* CODE: http://www.remote-exploit.org/articles/printfs/index.html

-----------------------------------

- [2011] Heiland: "From Printer to Pwnd" | Praeda toolkit

* CODE: https://github.com/percx/Praeda
* VIDEO: https://www.youtube.com/watch?v=HMSLMsPJ010
* SLIDES: http://www.slideshare.net/403Labs/exploiting-vulnerabilities-in-multifunction-printersa

- [2011] Heiland: "From Patched to Pwned" | Xerox DLM RCE

* LINK: http://foofus.net/goons/percx/Xerox_hack.pdf
* LINK: http://www.xerox.com/download/security/security-bulletin/1284332-2ddc5-4baa79b70ac40/cert_XRX12-003_v1.1.pdf

-----------------------------------

- [2010] NBS: "Juste une imprimant?" | Lexmark/generic attacks

* SLIDES: http://www.ossir.org/jssi/jssi2010/1A.pdf

-----------------------------------

- [2006] Irongeek: "Hacking Network Printers" | HP/generic tricks

* LINK: http://www.irongeek.com/i.php?page=security/networkprinterhacking

-----------------------------------

- [2002] Slobotron: "Hacking HP Printers" | HP/generic tricks

* LINK: http://search.lores.eu/realicra/hp_slobo.htm

-----------------------------------

- [2002] Phenoelit: "Printer Exploration" | Hijetter PJL tool

* LINK: http://www.phenoelit.org/hp/index.html
* CODE: PFT/Hijetter, libPJL, ChaiPortScan, ChaiCrack

-----------------------------------

- Miscellaneous

* https://www.altamiracorp.com/blog/employee-posts/hacking-hp-printers-for-fun-profit
* http://hackonadime.blogspot.com/2011/12/hacking-printers-pjl-basics.html
* https://www.ipa.go.jp/security/jisec/apdx/documents/20130312report_E.pdf
* http://www.darkreading.com/vulnerabilities-and-threats/corporate-espionages-new-friend-embedded-web-servers/d/d-id/1100343?
* https://homepages.laas.fr/matthieu/talks/secu-impression.pdf

-----------------------------------

@@ Line 3: / Line 3: @@
 === 2017 ===
-'''SoK: Exploiting Network Printers''' ([https://www.nds.rub.de/media/ei/veroeffentlichungen/2017/01/30/printer-security.pdf PDF])
+'''SoK: Exploiting Network Printers''' ([https://www.nds.rub.de/media/ei/veroeffentlichungen/2018/07/11/printer-security.pdf PDF])
 <br>by Jens Müller, Juraj Somorovsky, Vladislav Mladenov | Blogpost: [http://web-in-security.blogspot.de/2017/01/printer-security.html]

← Older revision		Revision as of 15:55, 30 January 2017
Line 1:		Line 1:
	== Research by date ==		== Research by date ==
		+
		+	=== 2017 ===
		+
		+	'''SoK: Exploiting Network Printers''' ([https://www.nds.rub.de/media/ei/veroeffentlichungen/2017/01/30/printer-security.pdf PDF])
		+	<br>by Jens Müller, Juraj Somorovsky, Vladislav Mladenov \| Blogpost: [http://web-in-security.blogspot.de/2017/01/printer-security.html]

	=== 2016 ===		=== 2016 ===

@@ Line 3: / Line 3: @@
 === 2016 ===
-'''Exploiting Network Printers:  A Survey of Security Flaws in Laser Printers and Multi-Function Devices''' ([TBD PDF])
+'''Exploiting Network Printers:  A Survey of Security Flaws in Laser Printers and Multi-Function Devices''' ([https://www.nds.rub.de/media/ei/arbeiten/2017/01/30/exploiting-printers.pdf PDF])
 <br>by Jens Müller, Juraj Somorovsky, Vladislav Mladenov | Proof-of-concept code: [https://github.com/RUB-NDS/PRET]

@@ Line 3: / Line 3: @@
 === 2016 ===
-'''Exploiting Network Printers:  A Survey of Security Flaws in Laser Printers and Multi-Function Devices''' ([http://homepages.rub.de/jens.mueller-2/publications/2016-exploiting-network-printers.pdf PDF])
+'''Exploiting Network Printers:  A Survey of Security Flaws in Laser Printers and Multi-Function Devices''' ([TBD PDF])
 <br>by Jens Müller, Juraj Somorovsky, Vladislav Mladenov | Proof-of-concept code: [https://github.com/RUB-NDS/PRET]

@@ Line 12: / Line 12: @@
 '''A Large-Scale Analysis of the Security of Embedded Firmwares''' ([https://www.usenix.org/system/files/conference/usenixsecurity14/sec14-paper-costin.pdf PDF])
-<br>by Andrei Costin, Jonas Zaddach, Aurélien Francillon, and Davide Balzarotti
+<br>by Andrei Costin, Jonas Zaddach, Aurélien Francillon, and Davide Balzarotti | Video: [https://www.youtube.com/watch?v=5gf6mFz1rPM]
-'''Hacking Canon Pixma Printers - Doomed Encryption''' ([http://www.contextis.com/resources/blog/hacking-canon-pixma-printers-doomed-encryption/ PDF])
+'''Hacking Canon Pixma Printers - Doomed Encryption''' ([http://www.contextis.com/resources/blog/hacking-canon-pixma-printers-doomed-encryption/ HTML])
 <br>by Michael Jordon
@@ Line 25: / Line 25: @@
 <br>by IPA Information-technology Promotion Agency, Japan
-=== 2011 ===
+=== 2012 ===
-'''PostScript(um): You've Been Hacked'''
+'''PostScript: Danger Ahead?!'''
-<br>by Andrei Costin | Slides: [https://infocon.org/cons/Hack%20In%20Paris/Hack%20In%20Paris%202012/Slides/Andrei-PostScript%20Danger%20Ahead.pdf] | Video: [https://www.youtube.com/watch?v=PqL5P46m_zQ]
+<br>by Andrei Costin | Slides: [https://infocon.org/cons/Hack%20In%20Paris/Hack%20In%20Paris%202012/Slides/Andrei-PostScript%20Danger%20Ahead.pdf] | Video: [https://www.youtube.com/watch?v=ygcs0m5C9ZI]
 '''Print Me If You Dare: Firmware Modification Attacks and the Rise of Printer Malware'''
@@ Line 37: / Line 39: @@
 '''From Printer to Pwnd: Leveraging Multifunction Printers During Penetration Testing'''
-<br>by Deral Heiland | Slides: [http://foofus.net/goons/percx/defcon/P2PWND.pdf] | Video: [https://www.youtube.com/watch?v=HMSLMsPJ010] | Proof-of-concept code: [https://github.com/percx/Praeda]
+<br>by Deral Heiland | Slides: [http://foofus.net/goons/percx/defcon/P2PWND.pdf] | Video: [https://www.youtube.com/watch?v=PH4pTCmKgOg] | Proof-of-concept code: [https://github.com/percx/Praeda]
 '''From Patched to Pwned: Attacking Xerox's  Multifunction Printers Patch Process''' ([http://foofus.net/goons/percx/Xerox_hack.pdf PDF])

@@ Line 4: / Line 4: @@
 '''Exploiting Network Printers:  A Survey of Security Flaws in Laser Printers and Multi-Function Devices''' ([http://homepages.rub.de/jens.mueller-2/publications/2016-exploiting-network-printers.pdf PDF])
-<br>by Jens Müller | Proof-of-concept code: [https://github.com/RUB-NDS/PRET]
+<br>by Jens Müller, Juraj Somorovsky, Vladislav Mladenov | Proof-of-concept code: [https://github.com/RUB-NDS/PRET]
-'''PWN Xerox Printers (...again):  About Hardware Attacks and Insecure Cloning'''' ([https://www.fkie.fraunhofer.de/content/dam/fkie/de/documents/xerox_phaser_6700_white_paper.pdf PDF])
+'''PWN Xerox Printers (...again):  About Hardware Attacks and Insecure Cloning''' ([https://www.fkie.fraunhofer.de/content/dam/fkie/de/documents/xerox_phaser_6700_white_paper.pdf PDF])
-<br>by Peter Weidenbach, Raphael Ernst, Fraunhofer FKIE
+<br>by Peter Weidenbach, Raphael Ernst
 === 2014 ===
 '''A Large-Scale Analysis of the Security of Embedded Firmwares''' ([https://www.usenix.org/system/files/conference/usenixsecurity14/sec14-paper-costin.pdf PDF])
-<br>by Andrei Costin, Jonas Zaddach, Aurélien Francillon, and Davide Balzarotti, Eurecom
+<br>by Andrei Costin, Jonas Zaddach, Aurélien Francillon, and Davide Balzarotti
 '''Hacking Canon Pixma Printers - Doomed Encryption''' ([http://www.contextis.com/resources/blog/hacking-canon-pixma-printers-doomed-encryption/ PDF])
@@ Line 28: / Line 28: @@
 '''PostScript(um): You've Been Hacked'''
-<br>by Andrei Costin | | Slides: [https://infocon.org/cons/Hack%20In%20Paris/Hack%20In%20Paris%202012/Slides/Andrei-PostScript%20Danger%20Ahead.pdf] | Video: [https://www.youtube.com/watch?v=PqL5P46m_zQ]
+<br>by Andrei Costin | Slides: [https://infocon.org/cons/Hack%20In%20Paris/Hack%20In%20Paris%202012/Slides/Andrei-PostScript%20Danger%20Ahead.pdf] | Video: [https://www.youtube.com/watch?v=PqL5P46m_zQ]
 '''Print Me If You Dare: Firmware Modification Attacks and the Rise of Printer Malware'''
@@ Line 45: / Line 45: @@
 '''Hacking Printers for Fun and Profit'''
-<br>by Andrei Costin | Video: [https://www.youtube.com/watch?v=R56ZXErKCeE]
+<br>by Andrei Costin | Slides: [http://andreicostin.com/papers/Conf%20-%20Hack.lu%20-%202010%20-%20Luxembourg%20-%20AndreiCostin_HackingPrintersForFunAndProfit.pdf] | Video: [https://www.youtube.com/watch?v=R56ZXErKCeE]
-'''Juste une imprimant? (Lexmark/generic attacks)'''
+'''Juste une imprimant?'''
 <br>by NBS System | Slides: [http://www.ossir.org/jssi/jssi2010/1A.pdf]
@@ Line 53: / Line 53: @@
 '''Hacking Network Printers''' ([http://www.irongeek.com/i.php?page=security/networkprinterhacking HTML])
-<br>by Irongeek
+<br>by Adrian Crenshaw (Irongeek)
 === 2002 ===

@@ Line 1: / Line 1: @@
-[2016] Müller: "Exploiting Network Printers"
+== Research by date ==
-* LINK: http://homepages.rub.de/jens.mueller-2/publications/2016-exploiting-network-printers.pdf
+=== 2016 ===
-* CODE: https://github.com/RUB-NDS/PRET
------------------------------------
+'''Exploiting Network Printers:  A Survey of Security Flaws in Laser Printers and Multi-Function Devices''' ([http://homepages.rub.de/jens.mueller-2/publications/2016-exploiting-network-printers.pdf PDF])
-[2014] Costin: "A Large-Scale Analysis of the Security of Embedded Firmwares"
+'''PWN Xerox Printers (...again):  About Hardware Attacks and Insecure Cloning'''' ([https://www.fkie.fraunhofer.de/content/dam/fkie/de/documents/xerox_phaser_6700_white_paper.pdf PDF])
------------------------------------
+=== 2014 ===
-[2013] Zaddach: "Embedded Devices Security and Firmware Reverse Engineering"
+'''A Large-Scale Analysis of the Security of Embedded Firmwares''' ([https://www.usenix.org/system/files/conference/usenixsecurity14/sec14-paper-costin.pdf PDF])
------------------------------------
+'''Hacking Canon Pixma Printers - Doomed Encryption''' ([http://www.contextis.com/resources/blog/hacking-canon-pixma-printers-doomed-encryption/ PDF])
-[2014] Jordon: "ARM Wrestling a Printer" | Canon Firmware RCE
+=== 2013 ===
-* LINK: http://www.contextis.com/resources/blog/hacking-canon-pixma-printers-doomed-encryption/
+'''Embedded Devices Security and Firmware Reverse Engineering''' ([http://s3.eurecom.fr/docs/bh13us_zaddach.pdf PDF])
------------------------------------
+'''Research Report on the Security of MFPs''' ([https://www.ipa.go.jp/security/jisec/apdx/documents/20130312report_E.pdf])
-[2010] Costin: "Hacking Printers for Fun and Profit" | Use Word/JS/Java to deploy PostScript Payload
+=== 2011 ===
-* VIDEO: https://www.youtube.com/watch?v=R56ZXErKCeE
+'''PostScript(um): You've Been Hacked'''
-[2011] Costin: "PostScript(um): Youâ€™ve Been Hacked" | PS-Shell | Look into Firmware | API available to PS-Language | {Memory Dumper, BSD-Sockets}, Xerox Firmware Update via PS-File, MSF/Attacking Demo Toolkit
+'''Print Me If You Dare: Firmware Modification Attacks and the Rise of Printer Malware'''
-* LINK: https://www.corelan.be/index.php/2012/05/25/hitb2012ams-day-2-postscript-danger-ahead/
+'''Printers gone Wild (PrintFS PJL filesystem)'''
-* VIDEO: https://www.youtube.com/watch?v=PqL5P46m_zQ
+<br>by Ben Smith | Video: [http://www.securitytube.net/video/1395] | Proof-of-concept code: [http://www.remote-exploit.org/articles/printfs/index.html]
------------------------------------
+'''From Printer to Pwnd''' (Praeda toolkit)
-[2011] Cui: "Print me if you Dare" | HP Firmware RCE
+'''From Patched to Pwned (Xerox DLM RCE)''' ([http://foofus.net/goons/percx/Xerox_hack.pdf PDF])
-* TALK: http://events.ccc.de/congress/2011/Fahrplan/events/4780.en.html
+=== 2010 ===
-* TALK: http://boingboing.net/2011/12/30/printer-malware-print-a-malic.html
-* VIDEO: https://www.youtube.com/watch?v=njVv7J2azY8
-* SLIDES: http://ids.cs.columbia.edu/sites/default/files/CuiPrintMeIfYouDare.pdf
------------------------------------
+'''Hacking Printers for Fun and Profit'''
-[2011] Smith: "Printers gone Wild" | PrintFS PJL filesystem
+'''Juste une imprimant? (Lexmark/generic attacks)'''
-* LINK: http://blog.c22.cc/2011/01/29/shmoocon-2011-printers-gone-wild/
+=== 2006 ===
-* CODE: http://www.remote-exploit.org/articles/printfs/index.html
------------------------------------
+'''Hacking Network Printers''' ([http://www.irongeek.com/i.php?page=security/networkprinterhacking HTML])
-[2011] Heiland: "From Printer to Pwnd" | Praeda toolkit
+=== 2002 ===
-* CODE: https://github.com/percx/Praeda
+'''Understanding, Reversing, and Hacking HP Printers''' ([http://search.lores.eu/realicra/hp_slobo.htm HTML])
-* VIDEO: https://www.youtube.com/watch?v=HMSLMsPJ010
+<br>by Slobotron
-* SLIDES: http://www.slideshare.net/403Labs/exploiting-vulnerabilities-in-multifunction-printersa
-[2011] Heiland: "From Patched to Pwned" | Xerox DLM RCE
+'''Printer Exploration (PFT and Hijetter, libPJL, ChaiPortScan, ChaiCrack)'''
+<br>FtR of Phenoelit, FX of Phenoelit | Proof-of-concept code: [http://www.phenoelit.org/hp/index.html]
-* LINK: http://foofus.net/goons/percx/Xerox_hack.pdf
-* LINK: http://www.xerox.com/download/security/security-bulletin/1284332-2ddc5-4baa79b70ac40/cert_XRX12-003_v1.1.pdf
-−
------------------------------------
-−
-[2010] NBS: "Juste une imprimant?" | Lexmark/generic attacks
-−
-* SLIDES: http://www.ossir.org/jssi/jssi2010/1A.pdf
-−
------------------------------------
-−
-[2006] Irongeek: "Hacking Network Printers" | HP/generic tricks
-−
-* LINK: http://www.irongeek.com/i.php?page=security/networkprinterhacking
-−
------------------------------------
-−
-[2002] Slobotron: "Hacking HP Printers" | HP/generic tricks
-−
-* LINK: http://search.lores.eu/realicra/hp_slobo.htm
-−
------------------------------------
-−
-[2002] Phenoelit: "Printer Exploration" | Hijetter PJL tool
-−
-* LINK: http://www.phenoelit.org/hp/index.html
-* CODE: PFT/Hijetter, libPJL, ChaiPortScan, ChaiCrack
-−
------------------------------------
-−
-[Miscellaneous]
-−
-* https://www.altamiracorp.com/blog/employee-posts/hacking-hp-printers-for-fun-profit
-* http://hackonadime.blogspot.com/2011/12/hacking-printers-pjl-basics.html
-* https://www.ipa.go.jp/security/jisec/apdx/documents/20130312report_E.pdf
-* http://www.darkreading.com/vulnerabilities-and-threats/corporate-espionages-new-friend-embedded-web-servers/d/d-id/1100343?
-* https://homepages.laas.fr/matthieu/talks/secu-impression.pdf