Difference between revisions of "Main Page"

Attacks

• Denial of service:
  • Transmission channel
  • Document processing
  • Physical damage

• Privilege escalation:
  • Factory defaults
  • Accounting bypass
  • Fax and Scanner

• Print job access:
  • Print job retention
  • Print job manipulation

• Information disclosure:
  • Memory access
  • File system access
  • Credential disclosure

• Code execution:
  • Buffer overflows
  • Firmware updates
  • Software packages

TL;DR

Tools

• PRET, Praeda, PFT, BeEF

Fundamentials

• Printer languages
  • PJL, PCL, PostScript
• Network protocols
  • LPD, IPP, Raw, SMB

Attack Carriers

• USB drive or cable
• Port 9100 printing
• Cross-site printing

Countermeasures

• Vendors, Admins, Users

Bibliography

• Literature on printer security

References

• Printer language references

Beyond Printers