full-disclosure - Hacking Xerox MFP Firmware Patch Process

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <1361995845.14315.YahooMailClassic@web2802.biz.mail.ne1.yahoo.com>
Date: Wed, 27 Feb 2013 12:10:45 -0800 (PST)
From: dh@...ereddefense.com
To: full-disclosure@...ts.grok.org.uk
Subject: Hacking Xerox MFP Firmware Patch Process - percX
	at foofus.net

Finally finished up my paper "Hacking Xerox MFP Firmware Patch Process". In this paper i discusses step by step process around how to gain root level access to high end Xerox MFP devices, how the firmware signing process works, and how to protect yourself from this attack. The pdf can be download from foofus.net at:
http://www.foofus.net/~percX/Xerox_hack.pdf

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/