full-disclosure - Re: printer attacks?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <CAAL-QYbNPBfS8jZMBz-hHJD96p52Ob6496xF46wgSOv+ihBdzw@mail.gmail.com>
Date: Wed, 2 Nov 2011 09:48:45 -0500
From: doc tarrow <doc.tarrow@...il.com>
To: full-disclosure@...ts.grok.org.uk
Subject: Re: printer attacks?

On Tue, Nov 1, 2011 at 8:05 AM, <foofus@...fus.net> wrote:

> Is this stuff for real?
> >
> > http://www.foofus.net/?p=468
>
> Yes indeed.
>
>
> https://media.defcon.org/dc-19/video/DEF%20CON%2019%20Hacking%20Conference%20Presentation%20By%20-%20Deral%20Heiland%20-%20From%20Printer%20To%20Pwnd%20Leveraging%20Multifunction%20Printers%20During%20Penetration%20Testing%20-%20Slides.m4v
>

Thanks for the link.

Here's the thing. I'm working on an internal team. I've watched this talk,
I've downloaded Praeda and scanned some of our internal nets, and think I
have a general sense of what the future might hold in this area. I keep
coming back to my original question. Is this stuff for real? Am I missing
something, or is the answer to "block port 80." I'm curious, but know I'll
never get a serious answer here, to know if these things are actually being
exploited in the wild. 10 minutes with a search engine searching for
internet-connected printers seems to reveal interesting targets.

Also, whoever deals with these things, please note that pen-test@ seems to
be bustimicated.

<pen-test@...ts.securityfocus.com>: ezmlm-reject: fatal: Sorry, I don't
accept messages of MIME Content-Type 'multipart/alternative' (#5.2.3)

That was received when sending from gmail.

t.doc

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/